No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender External Attack Surface Management vs SentinelOne Singularity Cloud Security comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender External...
Average Rating
7.6
Reviews Sentiment
6.0
Number of Reviews
2
Ranking in other categories
Attack Surface Management (ASM) (16th), Microsoft Security Suite (33rd)
SentinelOne Singularity Clo...
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
140
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (5th), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Observability (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Microsoft Defender External Attack Surface Management is designed for Attack Surface Management (ASM) and holds a mindshare of 2.9%, down 3.7% compared to last year.
SentinelOne Singularity Cloud Security, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 6.0% mindshare, up 4.6% since last year.
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
Microsoft Defender External Attack Surface Management2.9%
HackerOne4.1%
Darktrace3.6%
Other89.4%
Attack Surface Management (ASM)
Cloud-Native Application Protection Platforms (CNAPP) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Cloud Security6.0%
Wiz12.5%
Prisma Cloud by Palo Alto Networks10.1%
Other71.4%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

AndyChan3 - PeerSpot reviewer
General manager at a tech services company with 201-500 employees
Enhanced visibility and exposes vulnerabilities but needs more integration
I am currently in the pilot stage of implementing Microsoft External Attack Surface Management (EASM). My organization is transitioning to a comprehensive track of Microsoft solutions, and we will move to full-scale production in another year, maybe Microsoft External Attack Surface Management…
KP
Software Developer at Softcell Technologies Limited
Advanced rollback and AI-driven insights have protected endpoints and simplified security operations
We can check multiple types of alerts and triggers, and we can analyze these. There are many types of functions such as Kill, Quarantine, and remediate rollback types of features, which we can use for client safety. The rollback feature is the best feature because it is only used in SentinelOne Singularity Cloud Security. We have used multiple types of EDR, but the rollback feature is unique to SentinelOne Singularity Cloud Security. When many types of attacks happen in an organization, the rollback feature deletes all types of malicious files and other malware-type files and completely cleans your system. This feature is very interesting according to me. SentinelOne Singularity Cloud Security provides many types of features such as Kill and Quarantine, which are very interesting features for security operations. There are deep visibility features, and Purple AI is also one of the best features. It is easy for security operations and incident response. We can check log analysis with the help of deep visibility, and any types of attacks, malware, and phishing attacks are detected by SentinelOne Singularity Cloud Security. Many types of security operations can be tracked and observed with the help of SentinelOne Singularity Cloud Security. Purple AI is one of the interesting features in SentinelOne Singularity Cloud Security. Deep visibility is one of the best features in SentinelOne Singularity Cloud Security. You can find any types of logs and any types of devices through searching portals, similar to Google search. It gives you information regarding this. With deep visibility, you can search for any name. For example, we can search for any name and check what is happening with that person's laptops, what USB is connected or disconnected, and whether the network is connected or not. This is with the help of Purple AI.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft External Attack Surface Management helps improve the visibility of my exposed vulnerabilities and provides an overview of my security posture across the globe."
"It seems to be better at protecting from cyberattacks."
"It is scalable, stable, and can detect any threat on a machine. It uses artificial intelligence and can lock down any virus."
"The best features in SentinelOne Singularity Cloud Security are that it is user friendly and its user interface is very easy to understand."
"For Singularity, the task capability is easy to use and it has a very intuitive dashboard, which streamlines the processes."
"Singularity Cloud Security's most valuable features are its ease of scalability and comprehensive security measures."
"SentinelOne Singularity Cloud Security released a new security graph tool that helps us identify the root issue. Other tools give you a pass/fail type of profile on all misconfigurations, and those will run into the thousands. SentinelOne Singularity Cloud Security's graphing algorithm connects various components together and tries to identify what is severe and what is not. It can correlate various vulnerabilities and datasets to test them on the back end to pinpoint the real issue."
"Cloud Native Security's evidence-based reporting allows us to prioritize issues by understanding their impact, helping us resolve the most important problems first."
"Visibility is the most important aspect."
"The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features."
 

Cons

"Further integration across different Microsoft products would be an improvement."
"With Microsoft, support is always crazy, it's not easy to get support."
"The integration is not as seamless compared to competitors like Palo Alto."
"One area for improvement could be the internal analysis process, specifically the guidance provided for remediation."
"There's an array of upcoming versions with numerous features to be incorporated into the roadmap. Customers particularly appreciate the service's emphasis on intensive security, especially the secret scanning aspect. During the proof of concept (POC) phase, the system is required to gather logs from the customer's environment. This process entails obtaining specific permissions, especially in terms of gateway access. While most permissions for POC are manageable, the need for various permissions may need improvement, especially in the context of security."
"Whenever I view the processes and the process aspect, it takes a long time to load."
"We don't get any notifications from SentinelOne Singularity Cloud Security when the clusters are down."
"Cloud Native Security's reporting could be better. We are unable to see which images are impacted. Several thousand images have been deployed, so if we can see some application-specific information in the dashboard, we can directly send that report to the team that owns the application. We'd also like the option to download the report from the portal instead of waiting for the report to be sent to our email."
"It sometimes produces a high number of false positive alerts."
"The Automation tab is an add-on that doesn’t work properly. They provide a list of scripts that don’t work and I have asked support to assist but they won’t help. When running on various endpoints the script doesn’t work and if it does, it’s only a couple. There are a lot of useful scripts that would be beneficial to run forensics, event logs, and process lists running on the endpoint."
"The application module focuses on the different codes and libraries that can be run on the machines. It is very important for Singularity EDR to detect what type of codes and what type of libraries can run in the machine. If they can implement a white list or a black list of codes or libraries that can be used in the machine, it would be very helpful. They can focus more on the application module."
 

Pricing and Cost Advice

Information not available
"Pricing is based on modules, which was ideal for us."
"PingSafe falls within the typical price range for cloud security platforms."
"SentinelOne is quite costly compared to other security platforms."
"The pricing is somewhat high compared to other market tools."
"SentinelOne offers excellent pricing and licensing options."
"The tool is cost-effective."
"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."
"SentinelOne Singularity Cloud Security is on the costlier side."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
916,956 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
14%
Computer Software Company
10%
Financial Services Firm
9%
Comms Service Provider
6%
Financial Services Firm
13%
Manufacturing Company
9%
Computer Software Company
9%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business63
Midsize Enterprise28
Large Enterprise64
 

Questions from the Community

What needs improvement with Microsoft Defender External Attack Surface Management?
Further integration across different Microsoft products would be an improvement. Introduction of more AI automation into the products would also be beneficial. The integration is not as seamless co...
What is your primary use case for Microsoft Defender External Attack Surface Management?
I am currently in the pilot stage of implementing Microsoft External Attack Surface Management (EASM). My organization is transitioning to a comprehensive track of Microsoft solutions, and we will ...
What is your experience regarding pricing and costs for PingSafe?
I have not personally dealt with pricing, setup costs, and licensing because in the end I only work on the console and do not do the installations.
What needs improvement with PingSafe?
In my opinion, there is not much to improve with SentinelOne Singularity Cloud Security as it is really good software. SentinelOne Singularity Cloud Security already gives you all the data you need...
What is your primary use case for PingSafe?
My main use case for SentinelOne Singularity Cloud Security is managing security incidents for the various companies we provide support to. A quick and specific example of a type of incident I have...
 

Also Known As

No data available
PingSafe
 

Overview

Find out what your peers are saying about TrendAI, Qualys, BitSight and others in Attack Surface Management (ASM). Updated: October 2026.
916,956 professionals have used our research since 2012.