Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs SentinelOne Singularity Complete comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Sentiment score
7.4
SentinelOne Singularity Complete enhances efficiency, reduces costs, and improves security, delivering strong ROI and positive organizational impact.
SentinelOne Singularity Complete has helped reduce my organization's mean time to detect by fifty percent.
Director, Infrastructure & Security at Dreamscape Companies
Since then, I have not faced any intrusions, which is one reason I chose SentinelOne over ESET.
Computer Technician at VILLE DE POINTE-CLAIRE
We have not faced any attacks since we implemented it.
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
 

Customer Service

Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Sentiment score
7.2
SentinelOne Singularity Complete's support is praised for quick, knowledgeable assistance but could benefit from more transparent communication.
We are using the automated email process for support, and they respond within an hour or two hours sometimes.
Computer Technician at VILLE DE POINTE-CLAIRE
A chat service would be beneficial.
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
The technical support from SentinelOne Singularity Complete is very active and good, with a strong knowledge base available online.
Cyber Consultant at a consultancy with 11-50 employees
 

Scalability Issues

Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
Sentiment score
8.0
SentinelOne Singularity Complete is highly adaptable, seamlessly scaling across environments and platforms, despite minor auto-update challenges.
It's all auto-scale and auto-categorized, configuring automatically.
AGM IT Security at Page Industries Ltd
SentinelOne Singularity Complete is very scalable.
DGM. Technical Security at a tech services company with 10,001+ employees
My deployment is relatively small, and SentinelOne Singularity Complete works within those constraints.
Director, Information Technology at Premier Realty Group
 

Stability Issues

Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Sentiment score
7.9
SentinelOne Singularity Complete is praised for stability, reliability, minimal resource impact, and high user ratings despite occasional compatibility issues.
This indicates room for improvement in stability when interacting with other solutions.
Director, Information Technology at Premier Realty Group
Initially, there were issues, particularly on the management side, but now the console is much more stable.
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
Everything is managed automatically, so there is no user interference needed for upgrades.
DGM. Technical Security at a tech services company with 10,001+ employees
 

Room For Improvement

NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
SentinelOne Singularity Complete needs interface, affordability, and feature improvements, including better updates, automation, and third-party integration.
The only thing that prevented the attack from succeeding was a free version of Malwarebytes.
Director, Information Technology at Premier Realty Group
Providing a single pane of visibility for the end user would be beneficial.
AGM IT Security at Page Industries Ltd
That seems to play a little havoc and can conflict with manual installs, causing issues where it wants to delete and reinstall the client.
Computer Technician at VILLE DE POINTE-CLAIRE
 

Setup Cost

SentinelOne Singularity Complete is competitively priced, offering value and potential discounts, though pricing can vary by features and commitments.
If you want protection, you have to pay the price.
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
There are other products that are less expensive, but I tell my clients that in security, they cannot cut corners or look for the cheapest solution.
President at a tech services company with 1-10 employees
Reputation and quality are important, but especially in today’s economy, price is a significant factor.
Security and Compliance at a outsourcing company with 1,001-5,000 employees
 

Valuable Features

NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
SentinelOne Singularity Complete offers advanced ransomware protection, AI-driven threat detection, cross-platform support, and offline operation enhancing security and efficiency.
I have an advanced app providing visibility of all my endpoints, which was not the case before.
AGM IT Security at Page Industries Ltd
SentinelOne has a feature to decommission automatically, which has been fantastic.
Computer Technician at VILLE DE POINTE-CLAIRE
There's also automation that gives my team free time, preventing them from having to look for every alert.
Network & Security Section Head/Digital Transformation at City Edge
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
55th
Ranking in Endpoint Detection and Response (EDR)
57th
Ranking in Extended Detection and Response (XDR)
37th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (TIP) (40th), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (19th)
SentinelOne Singularity Com...
Ranking in Endpoint Protection Platform (EPP)
3rd
Ranking in Endpoint Detection and Response (EDR)
3rd
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
202
Ranking in other categories
Anti-Malware Tools (2nd), AI Observability (3rd)
 

Mindshare comparison

As of January 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of NetWitness NDR is 0.7%, up from 0.3% compared to the previous year. The mindshare of SentinelOne Singularity Complete is 5.1%, down from 5.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Complete5.1%
NetWitness NDR0.7%
Other94.2%
Endpoint Detection and Response (EDR)
 

Featured Reviews

reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Reliable and good support but can be expensive
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to not only rely on the intelligence of the engineer in charge but to have some threat intelligence and some seeds of IOCs and to have the host have some artificial intelligence to reduce the number of false positives. I don't see this solution being very scalable. The solution is pricey.
Daniel Giacomelli - PeerSpot reviewer
Security and Compliance at a outsourcing company with 1,001-5,000 employees
Strengthens cross-platform threat response while supporting audit compliance and log integration
The analytics and reporting can be a bit overwhelming. I love the dashboards, but I find that I need to better understand PowerQuery—specifically when to turn it on and off and its limitations. It's similar to SharePoint in that regard. As a former SharePoint instructor, I know it like the back of my hand. The best thing about SharePoint is that it can do whatever you want; the worst part is also that it can do whatever you want. You really need to know what you want before diving in. Most people usually have a good idea of what they need. SharePoint offers a lot out of the box, but you can customize it further if you wish. However, customization often requires hiring someone, which can be risky since you never know if it will work as intended. On the other hand, PowerQuery can help bridge some of those gaps within Singularity. The challenge arises when you want to incorporate what you've done into dashboards and charts, as there are limitations. For instance, I want more clickable drill-down options that allow me to filter on specific sections of the data, but that's currently not possible. It’s not to say that improvements won’t come in the future; it's just that it feels a bit early at this stage. Additionally, I find some navigation features frustrating, like the back button in certain contexts. For example, if you open PowerQuery from a chart, it doesn't open in a new window or tab. Clicking the back button takes you all the way back to the previous state, causing you to lose whatever progress you made. However, I'm actively providing this feedback to my partner, Pro Circular, through whom we access SentinelOne. They take our input seriously, and I've been sharing my observations. They have their own views but are addressing the issues I raise. It's good to see that suggestions occasionally lead to updates and improvements.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
879,711 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Computer Software Company
10%
Manufacturing Company
9%
Performing Arts
7%
Computer Software Company
16%
Manufacturing Company
9%
Financial Services Firm
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business87
Midsize Enterprise44
Large Enterprise76
 

Questions from the Community

Ask a question
Earn 20 points
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
 

Also Known As

RSA ECAT, NetWitness Network
Sentinel Labs, SentinelOne Singularity
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about NetWitness NDR vs. SentinelOne Singularity Complete and other solutions. Updated: December 2025.
879,711 professionals have used our research since 2012.