No more typing reviews! Try our Samantha, our new voice AI agent.

Malwarebytes Teams vs SentinelOne Singularity Endpoint comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Protection Platform (EPP)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
114
Ranking in other categories
Endpoint Detection and Response (EDR) (6th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Malwarebytes Teams
Ranking in Endpoint Protection Platform (EPP)
26th
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
37
Ranking in other categories
No ranking in other categories
SentinelOne Singularity End...
Ranking in Endpoint Protection Platform (EPP)
3rd
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
263
Ranking in other categories
Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (2nd), Extended Detection and Response (XDR) (2nd), AI-Powered Cybersecurity Platforms (3rd), AI Observability (2nd)
 

Mindshare comparison

As of July 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of Malwarebytes Teams is 1.7%, down from 2.0% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 4.7%, up from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Endpoint4.7%
Cortex XDR by Palo Alto Networks3.8%
Malwarebytes Teams1.7%
Other89.8%
Endpoint Protection Platform (EPP)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2594097 - PeerSpot reviewer
Chief Executive Officer at a wholesaler/distributor with 11-50 employees
Exceptional malware protection with regular updates and behavior-based detection
There are no built-in backups or integrated backup options, which could be an opportunity. The free version is effective, however, the paid version is pricey compared to it. Other customers have mentioned issues with false positives. It lacks enterprise-level management and more enterprise functionality. CrowdStrike and SentinelOne are much more enterprise-grade solutions. Malwarebytes has limited integration with cybersecurity tools and lacks enterprise integrations because it is not an enterprise product.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Automation has reduced alerts and freed the soc team to focus on faster incident response
Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This software helps us understand any issues that may arise when someone is not at work."
"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"The tool's use cases are relevant to security."
"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."
"Automation and playbooks have helped me significantly, as Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, efficiently detecting and blocking malicious attacks with firewalls while eliminating workload and speeding responses for next-generation operations."
"Stability is one of the features we like the most."
"One of the main benefits of the solution is its intelligence to correlate the events into an incident."
"Cortex XDR by Palo Alto Networks should be a stable solution."
"I was very satisfied with Malwarebytes in terms of its antivirus abilities."
"Being able to carry out a full scan on your system."
"For a company with about 100 or more PC units, the solution is quite effective, makes monitoring easy, offers a lot of reporting, and provides protection for many applications including Windows and Zoom."
"I like the solution's ability to detect potentially unwanted programs. For some reason, it seems superior to other solutions, or at least in comparison to McAfee."
"The protection is really good with Malwarebytes. It's also user friendly and quite easy to set up."
"When it comes to frontend protections, it has some of the best definitions. In addition, they do traditional signature and heuristic detection a lot better than Microsoft and some other players in that space."
"The most valuable features of Malwarebytes are the EDR and the complete feature set provided."
"The solution is very good at scanning."
"SentinelOne Singularity Complete, together with SentinelOne Vigilance, is an EDR tool with capabilities such as these, which I found valuable: the dashboard that shows you all the information and the power to either manually or automatically quarantine issues or threats in the environment."
"It's effectively helped to reduce organizational risk."
"I really love how simple and effective the product is. I really love the visibility it gives me into the endpoint. I really love that they open their product to the customer to enhance it with custom-made software, giving you the APIs to program it. Those are all things competitors don't have."
"Singularity's rollback feature is one of the primary reasons we bought the product. If there's an attack on the machine, the system can automatically roll back the data and the hard drive of the machine that was attacked."
"We are able to write some custom rules on SentinelOne."
"Now that we have SentinelOne, we cannot go without it."
"The visibility component is the most valuable feature."
"Everything is perfect with SentinelOne Singularity Endpoint; there are no stability problems, and the system is very reliable and hands-on."
 

Cons

"This product has not improved my organization - in fact, we are in the process of moving back to another product as a result of Cortex's horrible impact on system performance."
"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"The solution could improve by providing better integration with their own products and others."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations."
"The only issues that we have are, one the cost, two the dashboard is not very intuitive, even though you can drill down within the dashboard, we usually have to gather information from other sources to determine locations and if its a false positive."
"There is a severe gap in functionality between Windows, Linux, and Mac versions. For example all folder restriction settings are Windows only. Traps 5.0+ does not have SAML / LDAP integration."
"The reporting is not as flexible as you would find with other antivirus software."
"They could come up with better reporting capabilities."
"My clients have frequently encountered some tech support scams where when you go to a particular website, it throws up a fake warning to you and states that you need to call this number."
"The online reporting needs to be improved. Currently, we have to look at it online, and if we want to download a report, it just downloads as an Excel file. It's just raw information. There needs to be some way to better display it when it's downloaded."
"It is one of the worst products which I have ever used."
"We experience a lot of false positives."
"They should make it faster, less taxing on the processor."
"The product could be improved in blocking malicious traffic, such as communication with known malicious IP addresses."
"The delay in updating inventory is ten minutes. If it can be improved, it will help a lot."
"SentinelOne Singularity Complete needs more connectors for integration with more solutions."
"SentinelOne Singularity Complete offers competitive pricing, but there's always potential for even better value."
"Some reports could be better."
"SentinelOne can continue to make the presentation of relevant and timely data to the analysts as succinct and clear as possible. It will allow analysts to execute remediation or resolution with the least amount of clicks."
"One of the negatives we have found is that we receive quite a lot of false positives."
"When I write that I need a query for AnyDesk blocking, they say again that this is not part of their job."
"Generally, the stability is good, but I would like to see better stability from the solution. The stability issue is partially a con of a behavioral-based product, but being behavioral-based, it also has a lot of pros."
 

Pricing and Cost Advice

"The solution is expensive. It's pricing is on a yearly-basis."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"The pricing is a little bit on the expensive side."
"This is an expensive solution."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"The cost may be something in the ballpark of $20-25 a year per computer."
"I believe the retail price is between $40 and $50 per copy."
"Yearly, it is around $50 per client."
"Malwarebytes is a cost-effective product."
"I would say that it's affordable. It costs much less than Sentinel One, CrowdStrike, or anything of that nature. But, at the same time, you are getting what you pay for. So I would say it's one of the best when you're comparing traditional NextGen AVs like Webroot that aren't the best in the bunch."
"The platform pricing is competitive with other antivirus products."
"Its licensing is annual. There are no additional costs beyond the standard licensing fee."
"It is expensive."
"SentinelOne Singularity Complete meets all enterprise requirements and is priced accordingly."
"The pricing for SentinelOne Singularity Complete is competitive."
"After negotiations, the pricing was found to be fair."
"For our use case, the solution is affordable. There are not any hidden fees."
"I don't know about the licensing model. It seems easy, but it's not my area of expertise. I don't have information on how it compares to its competitors, but the pricing is per device."
"The licensing is convenient, straightforward, and very clear."
"SentinelOne Singularity Complete is reasonably priced."
"This solution is less expensive than its competitors."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
904,016 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
11%
Comms Service Provider
9%
Comms Service Provider
10%
Financial Services Firm
9%
Construction Company
7%
University
7%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise53
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise8
Large Enterprise6
By reviewers
Company SizeCount
Small Business126
Midsize Enterprise69
Large Enterprise90
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Malwarebytes?
I really hate the automatic rebilling without officially confirming it with me. It's an annoyance and they should at ...
What needs improvement with Malwarebytes?
It takes up too much space when it's trying to run in the background.
What is your primary use case for Malwarebytes?
My primary use case is that it's protecting me against malware.
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...
What is your experience regarding pricing and costs for SentinelOne Singularity?
It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...
What needs improvement with SentinelOne Singularity?
I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Sentinel Labs, SentinelOne Singularity, Singularity Platform
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Knutson Construction
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about Malwarebytes Teams vs. SentinelOne Singularity Endpoint and other solutions. Updated: June 2026.
904,016 professionals have used our research since 2012.