SentinelOne Singularity Identity vs Trellix Advanced Threat Defense comparison

SentinelOne and Trellix are both solutions in the Advanced Threat Protection (ATP) category. SentinelOne is ranked #7 with an average rating of 8.9, while Trellix is ranked #21 with an average rating of 9.0. SentinelOne holds a 2.5% mindshare in ATP, compared to Trellix’s 1.9% mindshare. Additionally, 95% of SentinelOne users are willing to recommend the solution, compared to 83% of Trellix users who would recommend it.

SentinelOne Singularity Ide...

Read 22 SentinelOne Singularity Identity reviews

2,016 Views
403 Comparison Views

95% willing to recommend

Trellix Advanced Threat Def...

Read 8 Trellix Advanced Threat Defense reviews

403 Views
367 Comparison Views

83% willing to recommend

SentinelOne Singularity Ide...

Trellix Advanced Threat Def...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 1, 2024

Trellix Advanced Threat Defense and SentinelOne Singularity Identity are two prominent cybersecurity solutions involved in advanced threat detection and identity protection. SentinelOne Singularity Identity appears to have the upper hand due to its extensive features and innovative identity-centric approach, though Trellix is noted for its superior deployment support.

Features: Trellix Advanced Threat Defense offers robust threat prevention, real-time malware analysis, and a flexible system adaptable to emerging threats. SentinelOne Singularity Identity excels with identity-based security, seamless integration capabilities, and a comprehensive zero-trust architecture. SentinelOne's identity-focused solutions cater to holistic security needs, surpassing Trellix's more traditional threat-centric model.

Room for Improvement: Trellix Advanced Threat Defense could improve its detection accuracy to reduce false positives, enhance its integration capabilities for diverse IT environments, and advance its user interface for better user experience. SentinelOne Singularity Identity may benefit from simplifying its deployment process, enhancing its configuration flexibility, and optimizing its advanced features for quicker setup.

Ease of Deployment and Customer Service: Trellix Advanced Threat Defense is celebrated for its smooth deployment and dependable customer service, facilitating easy adoption into existing systems. SentinelOne Singularity Identity, offering a robust deployment model, can involve complex integration and customization, occasionally leading to extended setup durations.

Pricing and ROI: Trellix Advanced Threat Defense typically provides competitive pricing, targeting long-term ROI through its superior threat detection capabilities. SentinelOne Singularity Identity, while possibly requiring a higher initial investment, offers notable ROI due to its extensive features and proactive identity protection strategies, which many consider invaluable despite the upfront costs.

To learn more, read our detailed SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense Report (Updated: July 2025).

Buyer's Guide

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Ide...

Ranking in Advanced Threat Protection (ATP)

7th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Vulnerability Management (10th), Threat Deception Platforms (2nd), Identity Threat Detection and Response (ITDR) (4th)

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

21st

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Advanced Threat Protection (ATP) category, the mindshare of SentinelOne Singularity Identity is 2.5%, up from 1.5% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 1.9%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

Featured Reviews

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

HossamSelim

Vice- Head Of Math Department at a non-tech company with 5,001-10,000 employees

Easy to set up and use with a nice interface

The scalability could be better. We'd like them to be better at dealing with script threats. In sandboxing, the time to respond is slower than we would like. We'd like them to be able to process faster. For example, Fortinet, they are doing 18,000 files per hour. For Wildfire, it is elastic. It can support as many files as you get. McAfee doesn't react like that. It does not support interfaces with HTTPS.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"SentinelOne enhances our customers' risk management."

"The threat detection capability is the most valuable feature."

"All the features within the XDR are valuable as a whole for our organization."

"The XDR capabilities are very good."

"Having high visibility into all of our network concerns and a customizable UI are the most valuable features."

"The most valuable feature of SentinelOne Singularity Identity is its ability to detect based on behavior rather than just static signatures."

"The biggest value for us is getting a much better picture of what our risks are."

"One of the top things we're interested in is cloud protection."

More SentinelOne Singularity Identity pros

"The most valuable features are the administration console and its detection and response module."

"It stops in excess of twenty-five malware events per month, all of which could be critical to the business."

"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."

"I recommend this solution because of its ease of use."

"It is very scalable."

"It is stable and reliable."

"Provides good exfiltration, and is an all-in-one product."

Cons

"Our engineers are dealing with issues to add exclusions to the antivirus for custom applications."

"Our company has different locations, such as Sunbury, Oklahoma, and Alabama. I have my devices by location, and I have not found a way to choose all the endpoints and then push the update automatically. I have been doing it one by one."

"The root cause of automation could be better."

"To improve SentinelOne, I would suggest adding a network detection and response capability."

"The primary reason for this discontent is that we frequently encounter performance issues with our servers."

"To enhance our already strong partnership with SentinelOne, we should focus on improving collaboration."

"There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies. Further development is anticipated to continue enhancing the solution."

"The policies could be more precise, and Singularity should use more templates like alternative solutions have. Endpoint management is poor. We cannot manage individual endpoints and must rely on policies, exclusions, or block lists to apply settings to a group instead of the individual agent. If I have to make settings for one computer, I need to create a group, apply the configuration, and move the agent there. It's challenging to manage endpoints that way."

More SentinelOne Singularity Identity cons

"This solution needs to be made "cloud ready"."

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

"Lacks remote capabilities not dependent on the internet."

"We'd like them to be better at dealing with script threats."

"I would like to see future versions of the solution incorporate artificial intelligence technology."

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

Pricing and Cost Advice

"Their pricing has been fair, especially in the current market, and they haven't excessively increased prices at renewal times like many vendors do."

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

"The pricing is a bit high."

"SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good."

"Compared to competitors, it's well-priced for the quality offered, and I don't see anyone surpassing them in that regard."

"Its price is a little bit high. It is a nice product, but it comes at a cost. Compared to other products, it is not cheap, but you sometimes have to pay for the value you get. It is not cheap, but it is worth it."

"As a SentinelOne partner, we offer competitive pricing on comprehensive packages that include the SentinelOne license, our management services, and a proof-of-concept to ensure the technology meets your needs."

"The price is affordable."

More SentinelOne Singularity Identity pricing and cost advice

"Our licensing fees for this solution are approximately one million dollars per year."

"The product is expensive, but it is better than the rest of them in the industry."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

13%

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

Government

18%

Comms Service Provider

13%

Financial Services Firm

11%

Computer Software Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

See all answers

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.

See all answers

What needs improvement with SentinelOne Singularity Identity?

Regarding improvements, I believe that API integration in third-party applications could be better. The Singularity tool uses its own credential in the record features.

See all answers

What do you like most about McAfee Advanced Threat Defense?

I recommend this solution because of its ease of use.

See all answers

What needs improvement with McAfee Advanced Threat Defense?

There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client.

See all answers

What is your primary use case for McAfee Advanced Threat Defense?

We use the solution for client management and security. We used the whole suite for client Firewall, antivirus, and everything provided by Trellix.

See all answers

Comparisons

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 12% of the time

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 10% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 9% of the time

Huntress Managed ITDR vs SentinelOne Singularity Identity

Compared 8% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 7% of the time

More SentinelOne Singularity Identity Competitors

Microsoft Defender for Identity vs Trellix Advanced Threat Defense

Compared 34% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 26% of the time

Palo Alto Networks WildFire vs Trellix Advanced Threat Defense

Compared 20% of the time

Check Point Infinity vs Trellix Advanced Threat Defense

Compared 20% of the time

More Trellix Advanced Threat Defense Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Identity

July 2025

Download SentinelOne Singularity Identity product report

Buyer's Guide

Advanced Threat Protection (ATP)

August 2025

Download Trellix Advanced Threat Defense product report

Also Known As

No data available

McAfee Advanced Threat Defense

Overview

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Powerful advanced threat detection

Uncover Hidden Threats

Combine in-depth static code analysis, dynamic analysis (malware sandboxing), and machine learning to increase zero-day threat and ransomware detection.

Threat Intelligence Sharing

Immediately share threat intelligence across your entire infrastructure—including multi-vendor ecosystems—to reduce time from threat encounter to containment.

Enable Investigation

Validate threats and access critical indicators of compromise (IoCs) needed for investigation and threat hunting.

Trellix

Sample Customers

Information Not Available

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

Buyer's Guide

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

July 2025

Free Report: SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

Find out what your peers are saying about SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense report.

See our list of best Advanced Threat Protection (ATP) vendors.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.