SentinelOne Singularity Identity vs Trellix Advanced Threat Defense comparison

SentinelOne and Trellix are both solutions in the Advanced Threat Protection (ATP) category. SentinelOne is ranked #7 with an average rating of 8.9, while Trellix is ranked #21 with an average rating of 9.0. SentinelOne holds a 2.6% mindshare in ATP, compared to Trellix’s 1.9% mindshare. Additionally, 95% of SentinelOne users are willing to recommend the solution, compared to 83% of Trellix users who would recommend it.

SentinelOne Singularity Ide...

Read 21 SentinelOne Singularity Identity reviews

357 Views
38 Comparison Views

95% willing to recommend

Trellix Advanced Threat Def...

Read 8 Trellix Advanced Threat Defense reviews

369 Views
108 Comparison Views

83% willing to recommend

SentinelOne Singularity Ide...

Trellix Advanced Threat Def...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 1, 2024

Trellix Advanced Threat Defense and SentinelOne Singularity Identity are two prominent cybersecurity solutions involved in advanced threat detection and identity protection. SentinelOne Singularity Identity appears to have the upper hand due to its extensive features and innovative identity-centric approach, though Trellix is noted for its superior deployment support.

Features: Trellix Advanced Threat Defense offers robust threat prevention, real-time malware analysis, and a flexible system adaptable to emerging threats. SentinelOne Singularity Identity excels with identity-based security, seamless integration capabilities, and a comprehensive zero-trust architecture. SentinelOne's identity-focused solutions cater to holistic security needs, surpassing Trellix's more traditional threat-centric model.

Room for Improvement: Trellix Advanced Threat Defense could improve its detection accuracy to reduce false positives, enhance its integration capabilities for diverse IT environments, and advance its user interface for better user experience. SentinelOne Singularity Identity may benefit from simplifying its deployment process, enhancing its configuration flexibility, and optimizing its advanced features for quicker setup.

Ease of Deployment and Customer Service: Trellix Advanced Threat Defense is celebrated for its smooth deployment and dependable customer service, facilitating easy adoption into existing systems. SentinelOne Singularity Identity, offering a robust deployment model, can involve complex integration and customization, occasionally leading to extended setup durations.

Pricing and ROI: Trellix Advanced Threat Defense typically provides competitive pricing, targeting long-term ROI through its superior threat detection capabilities. SentinelOne Singularity Identity, while possibly requiring a higher initial investment, offers notable ROI due to its extensive features and proactive identity protection strategies, which many consider invaluable despite the upfront costs.

To learn more, read our detailed SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense Report (Updated: June 2025).

Buyer's Guide

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

June 2025

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Ide...

Ranking in Advanced Threat Protection (ATP)

7th

Average Rating

9.0

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Vulnerability Management (10th), Threat Deception Platforms (2nd), Identity Threat Detection and Response (ITDR) (4th)

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

21st

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2025, in the Advanced Threat Protection (ATP) category, the mindshare of SentinelOne Singularity Identity is 2.6%, up from 1.2% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 1.9%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

Featured Reviews

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

HossamSelim

Vice- Head Of Math Department at a non-tech company with 5,001-10,000 employees

Easy to set up and use with a nice interface

The scalability could be better. We'd like them to be better at dealing with script threats. In sandboxing, the time to respond is slower than we would like. We'd like them to be able to process faster. For example, Fortinet, they are doing 18,000 files per hour. For Wildfire, it is elastic. It can support as many files as you get. McAfee doesn't react like that. It does not support interfaces with HTTPS.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The XDR capabilities are very good."

"The protection provided by SentinelOne Singularity Identity is the most valuable feature."

"The biggest value for us is getting a much better picture of what our risks are."

"All the features within the XDR are valuable as a whole for our organization."

"Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart."

"The AI-based detection, scanning, prevention and mitigation features are the most valuable features."

"The response is a valuable aspect of SentinelOne."

"SentinelOne Singularity Identity is very lightweight as an agent or software."

More SentinelOne Singularity Identity pros

"I recommend this solution because of its ease of use."

"The most valuable features are the administration console and its detection and response module."

"It stops in excess of twenty-five malware events per month, all of which could be critical to the business."

"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."

"Provides good exfiltration, and is an all-in-one product."

"It is stable and reliable."

"It is very scalable."

Cons

"We haven't received the expected support whenever we've had questions."

"The policies could be more precise, and Singularity should use more templates like alternative solutions have. Endpoint management is poor. We cannot manage individual endpoints and must rely on policies, exclusions, or block lists to apply settings to a group instead of the individual agent. If I have to make settings for one computer, I need to create a group, apply the configuration, and move the agent there. It's challenging to manage endpoints that way."

"I don't like SentinelOne's reporting tools. Their reports seem fine theoretically, but the issue is the sample size. For example, it will report that there were four incidents, and that equals 25 percent fewer incidents compared to the previous months. It would be a great improvement if I could expand the range to see reports for the last six months, but it's always one month. That would be an easy thing for them to resolve."

"The root cause of automation could be better."

"A lot of those features came from an acquisition of a different company."

"We've brought three critical items to their attention regarding vulnerability management."

"Our engineers are dealing with issues to add exclusions to the antivirus for custom applications."

"To improve SentinelOne, I would suggest adding a network detection and response capability."

More SentinelOne Singularity Identity cons

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

"Lacks remote capabilities not dependent on the internet."

"We'd like them to be better at dealing with script threats."

"I would like to see future versions of the solution incorporate artificial intelligence technology."

"This solution needs to be made "cloud ready"."

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

Pricing and Cost Advice

"Their pricing has been fair, especially in the current market, and they haven't excessively increased prices at renewal times like many vendors do."

"The pricing is a bit high."

"The price is affordable."

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

"Its price is a little bit high. It is a nice product, but it comes at a cost. Compared to other products, it is not cheap, but you sometimes have to pay for the value you get. It is not cheap, but it is worth it."

"The price of SentinelOne Singularity Identity is relatively high, but it offers numerous features and capabilities that make it well worth the investment."

"Ideally, I would like SentinelOne to lower their prices a little bit."

"As a SentinelOne partner, we offer competitive pricing on comprehensive packages that include the SentinelOne license, our management services, and a proof-of-concept to ensure the technology meets your needs."

More SentinelOne Singularity Identity pricing and cost advice

"The product is expensive, but it is better than the rest of them in the industry."

"Our licensing fees for this solution are approximately one million dollars per year."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

11%

Manufacturing Company

Comms Service Provider

Government

17%

Manufacturing Company

15%

Financial Services Firm

13%

Computer Software Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Does SentinelOne have a Virtual Patching functionality?

Yes -- SentinelOne has a Virtual Patching functionality called Virtual Patching and Exploit Shield. This preventive security solution uses behavioral AI to identify and block zero-day attacks and v...

See all answers

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

See all answers

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.

See all answers

What do you like most about McAfee Advanced Threat Defense?

I recommend this solution because of its ease of use.

See all answers

What needs improvement with McAfee Advanced Threat Defense?

There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client.

See all answers

What is your primary use case for McAfee Advanced Threat Defense?

We use the solution for client management and security. We used the whole suite for client Firewall, antivirus, and everything provided by Trellix.

See all answers

Comparisons

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 11% of the time

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 11% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 10% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 8% of the time

Microsoft Entra ID Protection vs SentinelOne Singularity Identity

Compared 6% of the time

More SentinelOne Singularity Identity Competitors

Microsoft Defender for Identity vs Trellix Advanced Threat Defense

Compared 31% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 21% of the time

Palo Alto Networks WildFire vs Trellix Advanced Threat Defense

Compared 16% of the time

Check Point Infinity vs Trellix Advanced Threat Defense

Compared 16% of the time

Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense

Compared 16% of the time

More Trellix Advanced Threat Defense Competitors

Product Reports

Buyer's Guide

SentinelOne Singularity Identity

May 2025

Download SentinelOne Singularity Identity product report

Buyer's Guide

Advanced Threat Protection (ATP)

June 2025

Download Trellix Advanced Threat Defense product report

Also Known As

No data available

McAfee Advanced Threat Defense

Overview

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Powerful advanced threat detection

Uncover Hidden Threats

Combine in-depth static code analysis, dynamic analysis (malware sandboxing), and machine learning to increase zero-day threat and ransomware detection.

Threat Intelligence Sharing

Immediately share threat intelligence across your entire infrastructure—including multi-vendor ecosystems—to reduce time from threat encounter to containment.

Enable Investigation

Validate threats and access critical indicators of compromise (IoCs) needed for investigation and threat hunting.

Trellix

Sample Customers

Information Not Available

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

Buyer's Guide

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

June 2025

Free Report: SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

Find out what your peers are saying about SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense and other solutions. Updated: June 2025.

DOWNLOAD NOW

859,129 professionals have used our research since 2012.

See our SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense report.

See our list of best Advanced Threat Protection (ATP) vendors.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.