Try our new research platform with insights from 80,000+ expert users

OpenText EnCase eDiscovery vs SentinelOne Singularity Complete comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText EnCase eDiscovery
Average Rating
7.8
Reviews Sentiment
7.7
Number of Reviews
8
Ranking in other categories
eDiscovery (12th)
SentinelOne Singularity Com...
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
214
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (2nd), Extended Detection and Response (XDR) (2nd), AI Observability (4th)
 

Mindshare comparison

OpenText EnCase eDiscovery and SentinelOne Singularity Complete aren’t in the same category and serve different purposes. OpenText EnCase eDiscovery is designed for eDiscovery and holds a mindshare of 3.1%, up 3.1% compared to last year.
SentinelOne Singularity Complete, on the other hand, focuses on Endpoint Detection and Response (EDR), holds 5.0% mindshare, down 5.3% since last year.
eDiscovery Mindshare Distribution
ProductMindshare (%)
OpenText EnCase eDiscovery3.1%
Microsoft Purview eDiscovery9.0%
kCura Relativity5.8%
Other82.1%
eDiscovery
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Complete5.0%
CrowdStrike Falcon8.4%
Microsoft Defender for Endpoint6.9%
Other79.7%
Endpoint Detection and Response (EDR)
 

Featured Reviews

Alejandro Stromer - PeerSpot reviewer
Director Consulting SAP OpenText en Entelgy at DCL Consultores EIM SL
A stable and scalable hybrid solution with easy setup
The solution is scalable. It has three levels. You have the presentation area that can be escalated to the balance sheet. You have the back-end area that can be escalated using higher viability to configure more application servers. Also, the area of storage can be increased. We usually cater to enterprise solutions but have small- and medium-sized customers. It starts with 25 users and goes up to 100s and 1000s.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Automation has reduced alerts and freed the soc team to focus on faster incident response
Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Data Recovery: Its ability to repair damaged partitions and uncover hidden partitions from within the tool, and allow further analysis."
"I like the processing feature on the product because it does everything at once, i.e, indexing, recovery, keyword searches, etc."
"The solution is very stable."
"Using Encase we are able to implement security and also Forensics."
"The most important feature we've found is the Enscripts, as it allows me to customize the scripts and deploy them as and how I need them, for example to segregate and index files efficiently."
"I like the processing feature on the product because it does everything at once, i.e, indexing, recovery, keyword searches, etc."
"The most important feature we've found is the Enscripts. That is one powerful feature that I, personally, love to use."
"Data Recovery: Its ability to repair damaged partitions and uncover hidden partitions from within the tool, and allow further analysis."
"The user interface, ease of maintenance, and the efficient way to identify the root cause of an incident to see all the factors that contributed to it are the most valuable features."
"The EDR functionality of the platform is what we use the most. That was the primary reason why we got SentinelOne. That is what we use the most in terms of functionality."
"We went from 30% ransom ware infections to zero."
"We have a preference for their receptor; it's good at finding many EFC files, and normally EFC files could have a virus, but we need to exclude some of them."
"It is priced by endpoint device, making it one of the well-priced solutions, as it is not too expensive and is a very good enterprise solution."
"The fact that this runs using AI instead of heuristics provides the best protection I've seen."
"If you want to protect your environment and sleep soundly at night, and if you're in the security industry, I highly encourage you to deploy SentinelOne and just watch what it's capable of."
"The 365 management and analytics from the cloud is another great feature."
 

Cons

"We have come across problems with the end-case. We could not find an email discovery type of module and there was not flexibility with the email."
"I would like to see a capability to ingest and absorb more data. That would be really good. It currently is lacking this function."
"There were minor UI bugs."
"We have come across problems with the end-case. We could not find an email discovery type of module and there was not flexibility with the email."
"In the past, incident response time for tech support was slow."
"Sometimes the application can take more time to complete the image processing or fail at the end of the process."
"This is not the program I would suggest for a newbie using to learn. It is just too expensive for the full experience, and the student versions, while very good, are just for that, students."
"I suggest that if the mobile phone acquisition is embedded in the Encase law enforcement version, it would be very useful."
"Initially, when we first deployed the solution, it caused some third-party connectivity issues."
"Security could always be better."
"In terms of improvement, I would like to see better alerting to let us know if there is anything wrong with SentinelOne working on the endpoint of the computer."
"The solution’s distributed intelligence at the endpoint is pretty effective, but from time to time I see that the agent is not getting the full execution history or command-line parameters."
"SentinelOne could improve by reducing the price."
"SentinelOne can improve by having better integration with Active Directory."
"They could add “right click>scan” where most users were trained to do so in handling flash drives."
"Something we are looking forward to is the ability of the SentinelOne backend to ingest data from other sources. Now that they are moving to the Singularity data lake, we are looking forward to being able to query data that is not just collected by SentinelOne endpoint agents. We are looking forward to being able to query against all data that we are ingesting into that backend."
 

Pricing and Cost Advice

"EnCase is an affordable solution."
"We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution."
"​The product is affordable and user-friendly.​"
"We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution."
"SentinelOne Singularity Complete is cheaper than CrowdStrike but more expensive than any traditional anti-virus solution."
"The pricing for SentinelOne Singularity Complete is competitive."
"I do not know much about the pricing. What I do know is that the person who negotiates most of the pricing is quite a hard bargainer. In that regard, he often says that he managed to get a very good deal. When we first looked at replacing our old system with Singularity Complete, its price was definitely a big factor. Back then, Singularity Complete was fairly new to the marketplace. We got quite a good deal as an early adopter. They have honored that and respected that we were an early adopter, and I feel we are still getting a very good price."
"The cost of Singularity Complete is similar to our previous solution but it comes with additional options such as Kubernetes integration."
"We pay $30,000 a year for 275 endpoints. We're growing, so I plan to buy another 75 endpoints. There is still a year and a half left in my three-year subscription, so I'm going to increase my endpoint count by 30 percent."
"The pricing of the solution seems reasonable, we got a discount but it still seems reasonable. The licensing cost is $3 to $4 per endpoint and can be paid monthly or yearly, with the price changing according to commitment."
"The cost of endpoint protection is fairly reasonable."
"We have not been beaten in the market by pricing, so we have been feeling good about that. The discussions we have had over the years keep us at a very low price per unit. It can always get better, but we also know there is a cost to the backend."
report
Use our free recommendation engine to learn which eDiscovery solutions are best for your needs.
884,976 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Performing Arts
13%
Government
10%
Financial Services Firm
9%
Manufacturing Company
8%
Computer Software Company
12%
Manufacturing Company
9%
Financial Services Firm
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise3
By reviewers
Company SizeCount
Small Business94
Midsize Enterprise48
Large Enterprise78
 

Questions from the Community

Ask a question
Earn 20 points
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
 

Also Known As

EnCase eDiscovery
Sentinel Labs, SentinelOne Singularity
 

Overview

 

Sample Customers

Ontario Ministry of Government, Aerospace Company, Chesterfield Police Department
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about OpenText EnCase eDiscovery vs. SentinelOne Singularity Complete and other solutions. Updated: January 2020.
884,976 professionals have used our research since 2012.