SentinelOne Singularity Identity vs Trellix Advanced Threat Defense comparison

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

Download the complete report

Helped 869,566 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Ide...

Ranking in Advanced Threat Protection (ATP)

8th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Vulnerability Management (9th), Threat Deception Platforms (2nd), Identity Threat Detection and Response (ITDR) (4th)

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

21st

Average Rating

7.8

Reviews Sentiment

5.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2025, in the Advanced Threat Protection (ATP) category, the mindshare of SentinelOne Singularity Identity is 2.6%, up from 1.9% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 2.0%, up from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Market Share Distribution
Product	Market Share (%)
SentinelOne Singularity Identity	2.6%
Trellix Advanced Threat Defense	2.0%
Other	95.4%

Advanced Threat Protection (ATP)

Featured Reviews

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

Philippe Panardie

RSSI at SDIS49

Ensuring long-term reliability while seeking internal email management enhancements

Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The incident and threat logs are great."

"One of the top things we're interested in is cloud protection."

"The XDR capabilities are very good."

"They have different levels of support. We have the highest level where they are constantly checking all the endpoints. If at any certain point, they identify that a computer has been triggered by a virus, a link, or something else, they would automatically tell us that within 15 seconds. If they notice something, they automatically send us an email saying that they noticed something in the computer, and they are going to block it."

"The response is a valuable aspect of SentinelOne."

"SentinelOne enhances our customers' risk management."

"The AI provides a futuristic ML model. That helps a lot when it comes to shifting security approaches and hep better forecast attacks."

"Having high visibility into all of our network concerns and a customizable UI are the most valuable features."

More SentinelOne Singularity Identity pros

"It is stable and reliable."

"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."

"The most valuable features are the administration console and its detection and response module."

"It stops in excess of twenty-five malware events per month, all of which could be critical to the business."

"I recommend this solution because of its ease of use."

"It is very scalable."

"The fact that in 10 years, we have had no problem is the most valuable feature for us; it's really a washing machine, but the only problem we face is that it's difficult to report on this product."

"Provides good exfiltration, and is an all-in-one product."

Cons

"I don't like SentinelOne's reporting tools. Their reports seem fine theoretically, but the issue is the sample size. For example, it will report that there were four incidents, and that equals 25 percent fewer incidents compared to the previous months. It would be a great improvement if I could expand the range to see reports for the last six months, but it's always one month. That would be an easy thing for them to resolve."

"The UI can be more user-friendly."

"The resolution turnaround from SentinelOne Singularity Identity's support should be improved."

"The first-level support has room for improvement."

"Our company has different locations, such as Sunbury, Oklahoma, and Alabama. I have my devices by location, and I have not found a way to choose all the endpoints and then push the update automatically. I have been doing it one by one."

"A lot of those features came from an acquisition of a different company."

"We haven't received the expected support whenever we've had questions."

"We've brought three critical items to their attention regarding vulnerability management."

More SentinelOne Singularity Identity cons

"This solution needs to be made "cloud ready"."

"The only problem we can have is that as we have no API interface, there is no inspection of internal mail."

"Lacks remote capabilities not dependent on the internet."

"We'd like them to be better at dealing with script threats."

"I would like to see future versions of the solution incorporate artificial intelligence technology."

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

Pricing and Cost Advice

"SentinelOne seemed to offer more while being priced lower than its competitors."

"Its price is a little bit high. It is a nice product, but it comes at a cost. Compared to other products, it is not cheap, but you sometimes have to pay for the value you get. It is not cheap, but it is worth it."

"The price of SentinelOne Singularity Identity is relatively high, but it offers numerous features and capabilities that make it well worth the investment."

"Their pricing has been fair, especially in the current market, and they haven't excessively increased prices at renewal times like many vendors do."

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

"Compared to competitors, it's well-priced for the quality offered, and I don't see anyone surpassing them in that regard."

"The price is affordable."

"As a SentinelOne partner, we offer competitive pricing on comprehensive packages that include the SentinelOne license, our management services, and a proof-of-concept to ensure the technology meets your needs."

More SentinelOne Singularity Identity pricing and cost advice

"The product is expensive, but it is better than the rest of them in the industry."

"Our licensing fees for this solution are approximately one million dollars per year."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

869,566 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

Manufacturing Company

Performing Arts

Government

16%

Comms Service Provider

14%

Performing Arts

11%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	5
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	4
Large Enterprise	5

Questions from the Community

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.

What needs improvement with SentinelOne Singularity Identity?

Regarding improvements, I believe that API integration in third-party applications could be better. The Singularity tool uses its own credential in the record features.

What do you like most about McAfee Advanced Threat Defense?

I recommend this solution because of its ease of use.

What needs improvement with McAfee Advanced Threat Defense?

I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...

What is your primary use case for McAfee Advanced Threat Defense?

We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Comparisons

Compared 10% of the time

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 9% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 8% of the time

Huntress Managed ITDR vs SentinelOne Singularity Identity

Compared 8% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 7% of the time

More SentinelOne Singularity Identity Competitors

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 32% of the time

Check Point Infinity vs Trellix Advanced Threat Defense

Compared 25% of the time

Microsoft Defender for Identity vs Trellix Advanced Threat Defense

Compared 25% of the time

Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense

Compared 19% of the time

More Trellix Advanced Threat Defense Competitors

Product Reports

SentinelOne Singularity Identity

Download SentinelOne Singularity Identity product report

Trellix Advanced Threat Defense

Download Trellix Advanced Threat Defense product report

Also Known As

No data available

McAfee Advanced Threat Defense

Overview

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Powerful advanced threat detection

Uncover Hidden Threats

Combine in-depth static code analysis, dynamic analysis (malware sandboxing), and machine learning to increase zero-day threat and ransomware detection.

Threat Intelligence Sharing

Immediately share threat intelligence across your entire infrastructure—including multi-vendor ecosystems—to reduce time from threat encounter to containment.

Enable Investigation

Validate threats and access critical indicators of compromise (IoCs) needed for investigation and threat hunting.

Trellix

Sample Customers

Information Not Available

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense