No more typing reviews! Try our Samantha, our new voice AI agent.

SentinelOne Singularity Endpoint vs VirusTotal comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 9, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity End...
Ranking in Anti-Malware Tools
2nd
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
227
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Endpoint Detection and Response (EDR) (2nd), Extended Detection and Response (XDR) (2nd), AI Observability (4th)
VirusTotal
Ranking in Anti-Malware Tools
4th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
11
Ranking in other categories
Threat Intelligence Platforms (TIP) (4th)
 

Mindshare comparison

As of April 2026, in the Anti-Malware Tools category, the mindshare of SentinelOne Singularity Endpoint is 2.5%, down from 4.8% compared to the previous year. The mindshare of VirusTotal is 3.0%, down from 5.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Complete2.5%
VirusTotal3.0%
Other94.5%
Anti-Malware Tools
 

Featured Reviews

Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Automation has reduced alerts and freed the soc team to focus on faster incident response
Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.
Chinmay Banerjee - PeerSpot reviewer
Advisor Adtech/Martech/API product/project Engineering at a financial services firm with 10,001+ employees
Helps businesses collect threat data while keeping privacy in mind and apable of detecting, blocking, and removing viruses and malware
There are two gray areas I still need to explore. I have worked with VirusTotal because it easily integrates with over seventy antivirus scanners and blacklisting services. In addition to those there is much scope to improve and add other services or integrations. The areas for improvement are that VirusTotal is not using much AI or generative AI models, while other competitors are starting to build them. For example, VirusTotal's work is based on the setup done by their engineers. If you want to do scanning or protection activities for a specific site, app, or device, that is the area VirusTotal is currently focused on. But other competitors are building AI models that can do things like left-side scanning and provide auto-generated reports. VirusTotal has predefined reports, but there is a lot of manual effort involved. Secondly, the API is very limited if I want to integrate VirusTotal with other applications. They need to build more connectors and provide support for Webhook connectors for the API. If you can't build your own connector, it's always good to have provisions for Webhook setup connectors across platforms. Thirdly, Kaspersky, a competitor of VirusTotal, is using a methodology called "gatekeeper." A gatekeeper is a security system that protects the inside of a building from outside threats. This is the model Kaspersky is currently using. You have your website set up, but the entire army of VirusTotal or Kaspersky is standing guard, protecting you from the first gate itself. Right now, VirusTotal detects threats from your domain, but it is always better to verify inside the domain and protect it from the first level when people or malware are entering. This first level of protection is lacking in VirusTotal right now. The security bridge and protection gate are missing.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool's most valuable feature is EDR."
"I really like the storyline feature."
"The platform's ability to easily integrate with various other platforms is highly valuable."
"The most valuable aspect, in any scenario, was the rollback feature."
"The visibility and, obviously, the protection aspects are second to none when it comes to speed. Another thing we fall back on is the option to roll back an endpoint if it is infected. There is a shadow copy so that if a PC downloads malicious content, we can roll it back to the state it was in before that package was imported."
"We have been protecting more than 100 companies (with no infections) since the product was installed."
"Singularity Platform allows us to have one single view of potential threats and the health of our environment, helping us optimize operational efficiency."
"SentinelOne offers one of the best software quotes and has excellent reviews and everything."
"It gives detailed information about suspicious IPs, which is one of its most valuable features."
"The most valuable feature is the worldwide malware information database."
"It allows us to see if there have been previous reports on certain indicators of compromise, providing insights from other security professionals."
"With VirusTotal, I can check for any hash, malware, file, domain, IP URL, or malicious URL, and Kaspersky stays clean."
"It can scan the dark web and find if an email ID has been compromised. This is another area that we have not explored yet."
"The initial setup is easy."
"The feature I like the most is the ability to see the MD5 or SHA-256 signature of the file, and also the composition of the file according to its segments."
"VirusTotal provides 95% to 98% accurate information."
 

Cons

"The solution can improve by adding more granular firewall capabilities."
"We often experience interruptions to our investigations in SentinelOne Singularity Complete."
"There are features that I would like them to add. They have little to do with endpoint protection, but if they could add encryption and DLP on, it would make it even better."
"I would like to see a better control panel for the managed service side of it."
"It is not so much on the Singularity platform itself, but they have their own built-in SIEM that is included with it. That needs to evolve a little bit. It is relatively basic in its capabilities. They have potential there for a great product and a needed product too. Having some kind of SIEM capability with the endpoint solution will save me from buying a bigger SIEM or buying another one. I could just use the one that comes with my endpoint solution."
"The overall integration functionality for this solution could be improved."
"The false alerts can be annoying, especially during administrative tasks."
"Singularity's reporting isn't that great. The dashboards could be more customizable. It could be better integrated with other tools. SIEM tools provide better feeds. Singularity is a separate product altogether. It does not give enough information to integrate with different solutions to correlate better."
"I would like to see an improved user interface and some automation."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
"The platform could improve in the areas of endpoints and networks."
"VirusTotal needs better advertisement and promotion, especially in the Middle East, since it is not yet widely recognized or popular in that region."
"VirusTotal has different versions, and sometimes the parameters of the API are not very clear."
"VirusTotal is hard to understand because you need to know Google Docs to create queries, and it doesn't have documentation for that."
"I would like to see improvements in the score consistency and accuracy."
"They can improve the telemetry. Whenever we handle a sample, they cannot provide any information about a victim."
 

Pricing and Cost Advice

"The pricing is comparable with other vendors but some customers find it a bit costly."
"The price is costly compared to what we were previously paying with Microsoft Defender and McAfee."
"SentinelOne Singularity Complete's price point is excessive compared to the functionality it provides."
"SentinelOne Singularity Complete is fairly priced."
"I don't know about the licensing model. It seems easy, but it's not my area of expertise. I don't have information on how it compares to its competitors, but the pricing is per device."
"It is not sold as a consumer product. It is only sold based on the number of licenses. So, as an MSP, you're probably going to pay about three and a half dollars per license, per month to have SentinelOne."
"It was cheaper than McAfee, which was a way to convince management to go with the solution."
"While SentinelOne Singularity Complete carries a higher price tag than some endpoint security solutions, customers find its robust features and return on investment justify the cost."
"The pricing is reasonable."
"We are using VirusTotal with free licenses, managing the license limits across three or four accounts, thus incurring no costs."
"The pricing is very economical."
"VirusTotal is an expensive solution."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
886,174 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Manufacturing Company
8%
Financial Services Firm
7%
Government
6%
Computer Software Company
13%
Financial Services Firm
11%
Comms Service Provider
8%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business104
Midsize Enterprise51
Large Enterprise79
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise2
Large Enterprise5
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What is your experience regarding pricing and costs for VirusTotal?
I do not know about the pricing or licensing as our organization services VirusTotal for our clients.
What needs improvement with VirusTotal?
I would like to see improvements in the score consistency and accuracy. VirusTotal should add more details like those from competitors such as URL Void or Symantec URL Checker, which show the categ...
What is your primary use case for VirusTotal?
As I work in an incident response role, my daily task is to mitigate the security alert and perform the analysis part. When any alerts come, I check the IPs from where they originate and the locati...
 

Also Known As

Sentinel Labs, SentinelOne Singularity, Singularity Platform
No data available
 

Overview

 

Sample Customers

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Information Not Available
Find out what your peers are saying about SentinelOne Singularity Endpoint vs. VirusTotal and other solutions. Updated: March 2026.
886,174 professionals have used our research since 2012.