ReliaQuest GreyMatter vs SentinelOne Singularity Endpoint comparison

ReliaQuest GreyMatter vs. SentinelOne Singularity Endpoint

Download the complete report

Helped 886,174 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of April 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.9%, down from 5.5% compared to the previous year. The mindshare of ReliaQuest GreyMatter is 1.0%, up from 0.4% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 5.8%, up from 5.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Complete	5.8%
Cortex XDR by Palo Alto Networks	4.9%
ReliaQuest GreyMatter	1.0%
Other	88.3%

Extended Detection and Response (XDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Md Yousuf Khan

Senior Security Analyst at Tata Consultancy

Unified security monitoring has reduced alert fatigue and improves proactive threat hunting

I use real-time monitoring in ReliaQuest GreyMatter, which significantly improves my security posture. The unified interface helps reduce alert fatigue. I would estimate it saves around 20% in alert fatigue reduction. The automated threat hunting capabilities in ReliaQuest GreyMatter help me stay ahead of threats. The machine learning algorithm benefits my threat intelligence by providing deeper insights and predictions. I use various metrics to rate the success of the predictive threat intelligence in ReliaQuest GreyMatter.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex XDR is a very capable solution for protecting large networks and a lot of endpoints. It's very useful because the automation is very high, and if you combine it with the features on Palo Alto firewalls, it provides very strong protection."

"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."

"Its ability to react to cyber data attacks is awesome. That is pretty much the use of it. What blows your mind is the ability to access your assets remotely and see what is actually going on with them. You can not only see them in a console. You can also react very rapidly to your assets that are compromised."

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."

"Cortex XDR's most valuable feature is its intelligence-based dashboards."

"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."

"The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices."

More Cortex XDR by Palo Alto Networks pros

"ReliaQuest GreyMatter has helped us to reduce security incidents by 89%, which is a significant amount of incidents we have seen."

"ReliaQuest GreyMatter saves around 60% of time or resources."

"Overall, I would rate SentinelOne Singularity Complete a nine out of ten because nothing is perfect, but it is close."

"I have tried some paid tools, but I have found that Singularity Platform is far better than others, and as a log analyst and SOC analyst, I find it better than others."

"It's effectively helped to reduce organizational risk."

"The most valuable feature of this solution is the user-friendly interface."

"The setup is very straightforward."

"We saw a return of investment within the first month."

"It is great for security monitoring and blocking when needed."

"The user interface, ease of maintenance, and the efficient way to identify the root cause of an incident to see all the factors that contributed to it are the most valuable features."

More SentinelOne Singularity Endpoint pros

Cons

"For Cortex XDR by Palo Alto Networks, if I had to point out improvements, I would say the UI is still somewhat difficult for beginners."

"There are some false positives. What our guys would have liked is that it would have been easier to manipulate as soon as they found a false positive that they knew was a false positive. How to do so was not obvious. Some people complained about it. The interface, the ESM, is not user-friendly."

"For working with the solution, you only really need a web browser, however, we've found that working on Chrome, for example, is horrible."

"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."

"However, if you do not have Palo Alto in your environment, you are paying these additional services just for Cortex XDR by Palo Alto Networks, so it is not a cost-effective solution."

"We would also like to have advanced tech protection and email scanning."

"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

More Cortex XDR by Palo Alto Networks cons

"Areas that have room for improvement include user interface and integration."

"In terms of improvement, I would like to see better alerting to let us know if there is anything wrong with SentinelOne working on the endpoint of the computer."

"SentinelOne Singularity Complete needs more connectors for integration with more solutions."

"The way Singularity Complete handles blocking external mass storage is annoying because it is so difficult to unblock single endpoints."

"Some reports could be better."

"The channel policy has room for improvement."

"One thing I don't like is the exportable report. They're they're not as useful as I'd hoped they would be."

"I think communication and documentation could be improved in the solution."

"The solution needs better reporting on new threats and malware. The reporting is present, but I can't find the information easily."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"I am using the Community edition."

"This is an expensive solution."

"Its pricing is kind of in line with its competitors and everybody else out there."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"The cost depends on your chosen license type, like Pro or other licenses."

"I don't have any issues with the pricing. We are satisfied with the price."

More Cortex XDR by Palo Alto Networks pricing and cost advice

Information not available

"I believe that the current pricing and licensing structure is fair."

"I find the licensing cost for SentinelOne Singularity Complete fair."

"I can pay, for my environment, between $30,000 and $40,000 a year, and that's a pretty good deal."

"We have not been beaten in the market by pricing, so we have been feeling good about that. The discussions we have had over the years keep us at a very low price per unit. It can always get better, but we also know there is a cost to the backend."

"SentinelOne is more affordable than some competing products, and it's not overly expensive for what you're getting."

"The pricing is reasonable. It may be a little high, but it's on par with everything out there."

"It is expensive. There is no doubt about it. If one of the functions does not work, it becomes very difficult for any CIO to justify the cost."

"Its price can be lower because I'm seeing competition from another vendor who beats it on commercials."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

886,174 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Financial Services Firm

11%

Manufacturing Company

Construction Company

Retailer

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	104
Midsize Enterprise	51
Large Enterprise	79

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for ReliaQuest GreyMatter?

I find that the pricing is cost-effective.

What needs improvement with ReliaQuest GreyMatter?

Areas that have room for improvement include user interface and integration.

What is your primary use case for ReliaQuest GreyMatter?

I use ReliaQuest GreyMatter for detection and response, XDR, and SIEM. The best features I like about GreyMatter the ...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

What do you like most about SentinelOne Singularity?

The Ranger feature is valuable.

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 8% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs ReliaQuest GreyMatter

Compared 11% of the time

Expel vs ReliaQuest GreyMatter

Compared 10% of the time

Arctic Wolf Managed Detection and Response vs ReliaQuest GreyMatter

Compared 6% of the time

Red Canary vs ReliaQuest GreyMatter

Compared 5% of the time

IBM Security QRadar vs ReliaQuest GreyMatter

Compared 3% of the time

More ReliaQuest GreyMatter Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 5% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Huntress Managed EDR vs SentinelOne Singularity Endpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Digital Risk Protection

Download ReliaQuest GreyMatter product report

SentinelOne Singularity Endpoint

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

ReliaQuest GreyMatter enhances security operations by integrating tools and delivering automation that increases efficiency and visibility.

ReliaQuest GreyMatter optimizes security infrastructures through its platform by connecting disparate technologies, facilitating real-time threat detection, and responding effectively. By leveraging automation, it reduces manual workloads and improves response times. Its ability to unify operations across different tools makes it a preferred choice for maximizing productivity and maintaining a robust security posture.

What are the essential features of ReliaQuest GreyMatter?

Tool Integration: Seamlessly connects existing security tools to ensure cohesive protection.
Threat Detection: Offers real-time insights to identify potential threats promptly.
Automation: Reduces manual efforts by automating routine security processes.
Advanced Analytics: Provides enhanced data analysis for better decision-making.
Flexible Deployment: Compatible with different environments, allowing tailored implementation.

What benefits or ROI should users consider?

Increased Efficiency: Streamlined operations through integrated platforms.
Cost Reduction: Cuts down expenses by reducing manual tasks and productivity loss.
Improved Security Posture: Ensures comprehensive threat detection and response.
Scalability: Grows with organizational needs without compromising performance.
Time Savings: Accelerates incident response and resolution times.

ReliaQuest GreyMatter is effectively implemented in industries such as finance, healthcare, and energy, where security is paramount. Its ability to adapt to specific sector needs and regulatory requirements makes it versatile for targeted use in diverse environments.

ReliaQuest

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

ReliaQuest GreyMatter vs. SentinelOne Singularity Endpoint