Try our new research platform with insights from 80,000+ expert users

SentinelOne Singularity Cloud Security vs Sonatype Lifecycle comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.8
Organizations gain productivity, save time and resources, and reduce costs by 30-80% with SentinelOne Cloud Security's features.
Sentiment score
7.0
Sonatype Lifecycle enhances visibility, security, and productivity, reducing vulnerability analysis time and lowering risks in application development.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
After implementing SentinelOne, it takes about five to seven minutes.
Cloud Native Security does offer ROI.
We have seen cost savings and efficiency improvements as we now know what happens in what was previously a black box.
 

Customer Service

Sentiment score
7.8
SentinelOne Singularity Cloud's support team is responsive and knowledgeable, though response time inconsistencies occasionally persist, earning high satisfaction.
Sentiment score
5.7
Sonatype Lifecycle's customer service is praised for responsiveness and effectiveness, despite occasional delays with product enhancement requests.
When we send an email, they respond quickly and proactively provide solutions.
They took direct responsibility for the system and could solve queries quickly.
Having a reliable team ready and willing to assist with any issues is essential.
They are helpful when we raise any tickets.
 

Scalability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud offers scalable, easily integrated security solutions for diverse needs, supporting AWS and Azure with seamless expansion.
Sentiment score
6.9
Sonatype Lifecycle is praised for infrastructure scalability and flexibility, but users report challenges with clustering and configuration complexities.
I would rate it a 10 out of 10 for scalability.
Scalability is no longer a concern because Cloud Native Security is a fully cloud-based resource.
I would rate the scalability of PingSafe 10 out of 10.
JFrog is easier to configure for high availability as it does not require extra components.
 

Stability Issues

Sentiment score
8.2
SentinelOne Singularity Cloud Security is stable and reliable, with occasional UI lags but generally praised for consistent performance.
Sentiment score
8.0
Sonatype Lifecycle is reliable and efficient, with minimal downtime and ease of use, even for large implementations.
It's a reliable solution that the organization is increasingly adopting for its robust features and security.
We contacted Cloud Native Security, and they addressed it in a day.
The only downtime we had was when switching from V1 to V2 but it was smooth.
Sonatype Lifecycle is very stable, especially in the binary repository management use case for managing binary artifacts.
 

Room For Improvement

SentinelOne Singularity Cloud Security needs enhancements in affordability, integration, support, customization, documentation, and performance for improved user experience.
Sonatype Lifecycle should improve integration, reporting, support, user interface, and adapt to modern practices for better user experience.
If they can merge Kubernetes Security with other modules related to Kubernetes, that would help us to get more modules in the current subscription.
As organizations move to the cloud, a cloud posture management tool that offers complete cloud visibility becomes crucial for maintaining compliance.
I would also like to see Cloud Native Security offer APIs that allow us to directly build dashboards within the platform.
We also noticed a lack of detailed information for configuring Sonatype Lifecycle for high availability and data recovery.
 

Setup Cost

SentinelOne Singularity is competitively priced but perceived as costly for larger deployments and possibly unsuitable for smaller businesses.
Sonatype Lifecycle offers competitive pricing with valuable features, though costs may impact startups due to licensing complexity.
I believe the enterprise version costs around $55 per user per year.
There are some tools that are double the cost of Cloud Native Security.
I recall Cloud Native Security charging a slightly higher premium previously.
For larger numbers like our case with 1,000 user licenses, JFrog becomes much more cost-effective, roughly ten times cheaper than Sonatype.
 

Valuable Features

SentinelOne excels in ease of use, real-time detection, automated remediation, and seamless integration, enhancing security operations efficiently.
Sonatype Lifecycle enhances security with seamless DevOps integration, user-friendly interface, real-time updates, and efficient dependency management.
This helps visualize potential attack paths and even suggests attack paths a malicious actor might take.
The infrastructure-as-code feature is helpful for discovering open ports in some of the modules.
This tool has been helpful for us. It allows us to search for vulnerabilities and provides evidence directly on the screen.
The integration into our CICD pipeline enables us to continuously monitor code changes and identify new vulnerabilities.
The most valuable feature for us is Sonatype Lifecycle's capability in identifying vulnerabilities.
 

Categories and Ranking

SentinelOne Singularity Clo...
Average Rating
8.8
Reviews Sentiment
7.7
Number of Reviews
114
Ranking in other categories
Vulnerability Management (5th), Cloud and Data Center Security (2nd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd)
Sonatype Lifecycle
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
45
Ranking in other categories
Application Security Tools (8th), Software Composition Analysis (SCA) (4th), Software Supply Chain Security (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. SentinelOne Singularity Cloud Security is designed for Cloud-Native Application Protection Platforms (CNAPP) and holds a mindshare of 4.6%, up 2.1% compared to last year.
Sonatype Lifecycle, on the other hand, focuses on Software Composition Analysis (SCA), holds 5.2% mindshare, down 5.6% since last year.
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security4.6%
Wiz23.4%
Prisma Cloud by Palo Alto Networks14.5%
Other57.5%
Cloud-Native Application Protection Platforms (CNAPP)
Software Composition Analysis (SCA) Market Share Distribution
ProductMarket Share (%)
Sonatype Lifecycle5.2%
Black Duck SCA15.7%
Snyk13.2%
Other65.9%
Software Composition Analysis (SCA)
 

Featured Reviews

Chetan Yelve - PeerSpot reviewer
Enhancing workflow with automation and comprehensive security monitoring
Since I have been using it, I have seen many improvements. SentinelOne Singularity Cloud Security is an excellent CSSPM tool, but the CSC CWPP features need improvement. There is scope for more application security posture management features and other than that, there are not many ASPM solutions on the market, and existing ones are more costly. I would prefer to see SentinelOne Singularity Cloud Security develop into a single pane of glass for ASPM and CSPM, and I would also appreciate runtime protection highlighted immediately if I'm changing anything in my environment. The dashboard needs more widgets added so that customers or users can see everything on the dashboard itself without needing to go too deep.
SrinathKuppannan2 - PeerSpot reviewer
Easily identifies problematic versions and ensures adherence to regulatory standards like HIPAA, critical for industries dealing with sensitive information
While Sonatype Lifecycle effectively manages artifacts in Nexus Repository and performs code firewall checks based on rules, it has the potential to expand further. I am looking forward to additional features similar to SonarQube, especially since licenses are often split per component. SonarType could integrate cloud-based capabilities, addressing the increasing shift towards cloud workloads. While there have been demos and discussions around this, significant progress on scanning and analyzing cloud images remains to be seen. I am looking forward to Sonatype incorporating these enhancements, particularly in regard to cloud-based features. On-prem workloads are getting to the cloud workloads. * I would like to see more cloud-related insights, such as logging capabilities for the images we use and image scanning information. * Additionally, it would be beneficial to have insights into the stages of dependencies and ensure they comply with standards. If there are any violations in respect to CVSS reports, * Integrating CVSS (Common Vulnerability Scoring System) report rules into the Lifecycle module to detect and report violations would be valuable. I am hoping to see these enhancements from Sonatype in the future. On the security side, I think there's a lot of development needed. There are many security tools on the market, like open-source ones, that Sonatype doesn't integrate with.
report
Use our free recommendation engine to learn which Cloud-Native Application Protection Platforms (CNAPP) solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
10%
Government
6%
Financial Services Firm
30%
Computer Software Company
10%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise53
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise8
Large Enterprise29
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have configured the policies could be enhanced. There could be a better way to configure cu...
How does Sonatype Nexus Lifecycle compare with SonarQube?
We like the data that Sonatype Nexus Lifecycle consistently delivers. This solution helps us in fixing and understanding the issues a lot quicker. The policy engine allows you to set up different t...
What do you like most about Sonatype Nexus Lifecycle?
Fortify integrates with various development environments and tools, such as IDEs (Integrated Development Environments) and CI/CD pipelines.
What is your experience regarding pricing and costs for Sonatype Nexus Lifecycle?
According to my calculations, if you are working with up to 200 developers, Sonatype is cheaper than JFrog. However, for larger numbers like our case with 1,000 user licenses, JFrog becomes much mo...
 

Also Known As

PingSafe
Sonatype Nexus Lifecycle, Nexus Lifecycle
 

Overview

 

Sample Customers

Information Not Available
Genome.One, Blackboard, Crediterform, Crosskey, Intuit, Progress Software, Qualys, Liberty Mutual Insurance
Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Cloud-Native Application Protection Platforms (CNAPP). Updated: October 2025.
872,706 professionals have used our research since 2012.