Try our new research platform with insights from 80,000+ expert users

SentinelOne Singularity Complete vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 25, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
SentinelOne Singularity Complete cuts costs by boosting productivity, preventing threats, and reducing ransomware risks, offering quick ROI.
Sentiment score
4.4
Wazuh offers significant ROI through reduced detection times and cost-effectiveness, benefiting small and medium businesses financially.
Since then, I have not faced any intrusions, which is one reason I chose SentinelOne over ESET.
We have not faced any attacks since we implemented it.
It has absolutely helped reduce our organizational risk.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
 

Customer Service

Sentiment score
7.2
SentinelOne Singularity Complete offers quick, knowledgeable support with remote sessions, though some desire faster, interactive phone or chat options.
Sentiment score
4.3
Wazuh support is effective for paid users, but open-source users face variability in community responsiveness and documentation use.
They do a great job of figuring out the problem and pointing you to generic documentation or working with you to fine-tune a solution.
We are using the automated email process for support, and they respond within an hour or two hours sometimes.
A chat service would be beneficial.
They responded quickly, which was crucial as I was on a time constraint.
We use the open-source version of Wazuh, which does not provide paid support.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
 

Scalability Issues

Sentiment score
8.0
SentinelOne Singularity Complete scales efficiently, smoothly handling deployments, adding agents, and supporting growth across diverse IT infrastructures.
Sentiment score
6.6
Wazuh offers adaptable scaling, effective for most, despite challenges, excelling in compliance and endpoint management with varied scalability scores.
It's all auto-scale and auto-categorized, configuring automatically.
The tool's built-in automation for deploying the agents works well for large infrastructures like mine.
My deployment is relatively small, and SentinelOne Singularity Complete works within those constraints.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
 

Stability Issues

Sentiment score
7.8
SentinelOne Singularity Complete is praised for stability, performance, and proactive updates, despite occasional third-party software conflicts.
Sentiment score
6.6
Wazuh's stability generally ranges from moderate to high, contingent on proper maintenance, updates, and user-specific technical environments.
It has caused problems with interoperability between third-party tools, which could lead to entire servers crashing or specific tools failing.
This indicates room for improvement in stability when interacting with other solutions.
Initially, there were issues, particularly on the management side, but now the console is much more stable.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
The stability of Wazuh is largely dependent on maintenance.
The indexer frequently times out, requiring system restarts.
 

Room For Improvement

SentinelOne Singularity Complete requires UI, integration, resource efficiency, and pricing improvements, with enhanced support and deployment processes.
Wazuh requires enhanced interface usability, scalability, AI integration, and easier deployment, with improved reporting and native system integration.
The only thing that prevented the attack from succeeding was a free version of Malwarebytes.
Providing a single pane of visibility for the end user would be beneficial.
It's challenging to prevent a user from manipulating their privileges or someone else's of others, and it's difficult to control what users can access at the organizational level.
Machine learning is needed along with understanding user behavior and behavioral patterns.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
 

Setup Cost

SentinelOne Singularity Complete provides cost-effective endpoint security, with competitive pricing justified by its comprehensive and flexible features.
Wazuh is cost-effective for enterprises with open-source availability but incurs costs for infrastructure, support, and managed hosting.
If you want protection, you have to pay the price.
There are other products that are less expensive, but I tell my clients that in security, they cannot cut corners or look for the cheapest solution.
Reputation and quality are important, but especially in today’s economy, price is a significant factor.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Totaling around two lakh Indian rupees per month.
 

Valuable Features

SentinelOne Singularity Complete is lauded for AI threat detection, automation, user-friendly interface, and efficient endpoint security without cloud reliance.
Wazuh offers customizable open-source security solutions with SIEM, MITRE, and compliance tools for cloud-native, Kubernetes, and Azure environments.
I have an advanced app providing visibility of all my endpoints, which was not the case before.
SentinelOne has a feature to decommission automatically, which has been fantastic.
There's also automation that gives my team free time, preventing them from having to look for every alert.
Wazuh is a SIEM tool that is highly customizable and versatile.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
 

Categories and Ranking

SentinelOne Singularity Com...
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
200
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (2nd)
Wazuh
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
7.4
Reviews Sentiment
6.3
Number of Reviews
49
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (2nd)
 

Mindshare comparison

As of October 2025, in the Extended Detection and Response (XDR) category, the mindshare of SentinelOne Singularity Complete is 6.2%, up from 5.8% compared to the previous year. The mindshare of Wazuh is 10.2%, down from 12.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Complete6.2%
Wazuh10.2%
Other83.6%
Extended Detection and Response (XDR)
 

Featured Reviews

Daniel Giacomelli - PeerSpot reviewer
Strengthens cross-platform threat response while supporting audit compliance and log integration
The analytics and reporting can be a bit overwhelming. I love the dashboards, but I find that I need to better understand PowerQuery—specifically when to turn it on and off and its limitations. It's similar to SharePoint in that regard. As a former SharePoint instructor, I know it like the back of my hand. The best thing about SharePoint is that it can do whatever you want; the worst part is also that it can do whatever you want. You really need to know what you want before diving in. Most people usually have a good idea of what they need. SharePoint offers a lot out of the box, but you can customize it further if you wish. However, customization often requires hiring someone, which can be risky since you never know if it will work as intended. On the other hand, PowerQuery can help bridge some of those gaps within Singularity. The challenge arises when you want to incorporate what you've done into dashboards and charts, as there are limitations. For instance, I want more clickable drill-down options that allow me to filter on specific sections of the data, but that's currently not possible. It’s not to say that improvements won’t come in the future; it's just that it feels a bit early at this stage. Additionally, I find some navigation features frustrating, like the back button in certain contexts. For example, if you open PowerQuery from a chart, it doesn't open in a new window or tab. Clicking the back button takes you all the way back to the previous state, causing you to lose whatever progress you made. However, I'm actively providing this feedback to my partner, Pro Circular, through whom we access SentinelOne. They take our input seriously, and I've been sharing my observations. They have their own views but are addressing the issues I raise. It's good to see that suggestions occasionally lead to updates and improvements.
Ebenezer Okoh - PeerSpot reviewer
Innovative platform enables proactive threat hunting and endpoint monitoring
I have not seen Wazuh moving in the direction of AI-driven threat detection projects myself, but since the market is moving that way, I wouldn't be surprised if they implemented it soon. My plans to increase the usage of Wazuh or switch to another tool depend on what my boss decides. We don't refer to any community support specifically, as we rely on other platforms such as GitHub or Discord, depending on the application. I recommend that as more companies come on board with Wazuh, it will motivate those who contribute to it, but I am also cautious that as it gains attention, a large company might buy it and change its course of business. Overall, I rate Wazuh a nine out of ten.
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
868,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
19%
Manufacturing Company
8%
Financial Services Firm
7%
Government
5%
Computer Software Company
15%
Comms Service Provider
9%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business82
Midsize Enterprise45
Large Enterprise75
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
The lack of AI features is an issue at the moment in the industry. Forti provides user behavior capabilities, which I would want to see in Wazuh. In FortiSIEM, they provide user behavior understand...
What is your primary use case for Wazuh?
At the moment, I'm working in software integration, so we are working with FortiGate. To research and get an idea, I did some investigation into Wazuh. They have already used Fortinet products. The...
 

Also Known As

Sentinel Labs, SentinelOne Singularity
Wazuh All-In-One Deployment
 

Overview

 

Sample Customers

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Information Not Available
Find out what your peers are saying about SentinelOne Singularity Complete vs. Wazuh and other solutions. Updated: September 2025.
868,706 professionals have used our research since 2012.