SentinelOne Singularity Cloud Security Reviews

Our current organization operates in an AWS-centric environment with SentinelOne Singularity Cloud Security. We use everything on AWS, and all our resources require vulnerability detection and dependency issue management. Those detections are straightforward, and any tool can identify vulnerabilities. However, SentinelOne Singularity Cloud Security provides an extension on top of basic detection. Any CNAP currently in the market can tell you about vulnerabilities, but how to detect them and whether an attack is continuously happening on our traditional systems—and how to stop them at that moment—is critical. Runtime vulnerability checks are very important for us and help significantly with Kubernetes workflows as well as cloud infrastructure level operations.

We have extensively used the Kubernetes security features in SentinelOne Singularity Cloud Security, specifically the KSPM. We followed that with cloud work through what is called Cloud Workload Protection. Because we receive substantial data from AWS, the CWP has provided us with good information around what is going wrong. When attacks happen, we understand what to do and how to identify our system's vulnerabilities before they are exploited, ensuring things work properly without any security issues.

In my use case with SentinelOne Singularity Cloud Security, what I have used extensively is for Kubernetes and other infrastructure components.

Runtime protection is exceptional. The initial setup of SentinelOne Singularity Cloud Security is one of the best available. I have never had an easier integration than this, as everything is cloud-managed.

The positive impact I have observed is that runtime issues, which SentinelOne Singularity Cloud Security solves, are very good. Many times with Kubernetes and infrastructure that have numerous vulnerabilities, those issues can only be caught at the runtime level. SentinelOne Singularity Cloud Security provides the best runtime protection I have seen. I have not faced any problems, and regarding the engineering aspect, I have not been worried about this. That is a very good thing.

When it comes to the maturity of SentinelOne Singularity Cloud Security, it is not currently at the level of more established solutions. For example, we previously used CrowdStrike, which has been established for ages. CrowdStrike had an incident with an agent issue that was catastrophic, and despite that, people did not unsubscribe. CrowdStrike has something called Falcon that helped us in great ways before. Investigation is easier with SentinelOne Singularity Cloud Security—you can go through the screen and check everything, whereas with CrowdStrike it was more of a headache. However, the ecosystem is more mature at CrowdStrike compared to SentinelOne Singularity Cloud Security. There are not many users that need this in the market, and the CNAP market is very large. SentinelOne is specifically targeting AWS-first companies and is not extending its solution to Azure or GCP, which might help potentially.

We have been using SentinelOne Singularity Cloud Security for one and a half years now, following an incident with CrowdStrike where we experienced a complete blue screen crash. After that issue, we switched to SentinelOne Singularity Cloud Security.

We have never faced any outage or problem with SentinelOne Singularity Cloud Security. All the SLAs are in place. I don't think we have specific metrics to measure this, but if it had been down, we would have known. We have always received reports and have created a pipeline using a monitoring tool called Signoz that fetches everything from the SentinelOne report and provides that information to Slack every day at 8:00 a.m. IST. This has helped us identify any ongoing vulnerability and has never failed since its one-time setup. SentinelOne Singularity Cloud Security operates consistently, and that is how a product should work—you should not have to worry about it.

We have not faced any scalability issues with SentinelOne Singularity Cloud Security, and since our organization is not large, this is acceptable.

I do not communicate often with technical support regarding SentinelOne Singularity Cloud Security because our VP of Engineering handles that. My work focuses on the integration aspect. I am an end user in terms of how the solutions are working, and vulnerability catching happens in the code. If something goes wrong during infrastructure deployments, I need to investigate what happened and assess the problem. I need to check how things are looking and whether we have the visibility we need or if any threat hunting is happening, which is something very important.

Before choosing SentinelOne Singularity Cloud Security, we were using CrowdStrike, and we also evaluated Wiz. Wiz was acceptable, but compared to SentinelOne Singularity Cloud Security, their pricing was higher. They also provide similar features and are known better because they have something called agentless cloud visibility, which would have been a better opportunity for us to adopt, but their costing is very high. We opted for the runtime aspects instead.

My organization is small in terms of the scale of use cases with SentinelOne Singularity Cloud Security, so we did not have any issues. Even with CrowdStrike previously, it was also performing well. However, due to constraints regarding our customers who specifically asked us not to proceed with it, we had to move to SentinelOne Singularity Cloud Security.

The installation of SentinelOne Singularity Cloud Security was straightforward. First, we onboarded through AWS by connecting our AWS account from the SentinelOne console. We had to configure some privilege issues, and policies had to be configured beforehand. We created a cross-account IAM role before integrating SentinelOne, which helped ensure that SentinelOne could run on multi-cloud environments. After that, we enabled CloudTrail integration and configured some AWS configurations. Then we proceeded to Security Hub and enabled GuardDuty. We started the agent asset discovery, which helped us deploy the provided solution quickly.

For Kubernetes, each step was straightforward. We had one EKS cluster where we deployed a SentinelOne Kubernetes component via Helm chart. The admission policy of the controller had to be configured at that point, and we enabled the KSPM scanning. The onboarding aspect was something I completed extensively, and I remember the steps involved. It was very straightforward, I did not face many issues, and the documentation was appropriate and to the point.

I am not the right person to provide details about the cost aspect of SentinelOne Singularity Cloud Security because the company has already integrated it. I evaluated the solutions and provided a report, but the costing aspect is handled by the cost analysis or FinOps team. From articles I have read, SentinelOne Singularity Cloud Security appears fairly priced, but when dealing with many vulnerabilities, the runtime cost becomes somewhat high. However, I do not have much exposure to the pricing aspect.

As we are a smaller firm and need significant automation, we opted for SentinelOne Singularity Cloud Security. I would rate this solution a solid nine out of ten. Everyone has some room for improvement, but a nine is something I consider very good.

Our primary use case for SentinelOne Singularity Cloud Security is protecting cloud workloads and servers by continuously monitoring for threat detection, malicious activity, and providing automated response capabilities. We use it to provide visibility across our cloud environment, strengthen our security posture, and reduce the time required to investigate and remediate security incidents.

The best features of SentinelOne Singularity Cloud Security are its real-time threat detection, behavioral AI-based analytics, automated response capabilities, and comprehensive visibility across cloud workloads. The centralized management console makes it easier to investigate alerts, while the detailed telemetry helps speed up incident analysis and remediation. Overall, it provides good visibility with minimal operational work.

SentinelOne Singularity Cloud Security has improved our organization's overall security posture by providing better visibility into cloud workloads and faster threat detection. It has reduced the time needed to investigate security alerts, enabled quicker incident response, and helped our security team manage cloud risk more efficiently. Overall, it has increased confidence in the security of our cloud environment while reducing manual effort.

SentinelOne Singularity Cloud Security could be improved by providing more customizable reporting and dashboards, reducing false positives in certain scenarios, and offering deeper investigation with third-party security and IT management tools. More built-in guidance for alert investigation and remediation would also help teams resolve incidents more efficiently, especially those with smaller security teams.

Overall, SentinelOne Singularity Cloud Security is a strong security platform, but continued improvement in user experience, reporting flexibility, and integration capabilities would make it even more effective. Enhancing documentation, providing more advanced customization options, and adding more automation around routine security tasks would help organizations get more value from the platform.

I have been using SentinelOne Singularity Cloud Security for approximately one year.

We previously used a different security solution and switched to SentinelOne Singularity Cloud Security because we were looking for stronger behavior-based threat detection, faster response capabilities, better visibility, and a more centralized management experience. SentinelOne Singularity Cloud Security's AI-driven approach and automated response features provide better protection against unknown threats compared to our previous solution.

We have seen a positive return on investment, mainly through improved efficiencies in our security operations. SentinelOne Singularity Cloud Security has helped reduce the time required for threat investigation and response by providing automated detection, detailed context, and centralized visibility. While we do not track exact financial savings, the platform has helped reduce the workload involved in monitoring and analyzing security events, allowing the team to spend more time on high-value security activities.

Our experience with SentinelOne Singularity Cloud Security pricing, setup cost, and licensing has been generally positive. The licensing model is straightforward, and the value provided by the platform's threat detection, visibility, and automated response capabilities justifies the investment. The initial setup requires proper planning and configuration to align policies with the environment, but the deployment process is manageable. Clear documentation and support resources help reduce implementation challenges.

We evaluated other security solutions before choosing SentinelOne Singularity Cloud Security, including alternatives such as Microsoft Defender for Cloud, CrowdStrike Falcon, and other cloud security platforms. We selected SentinelOne Singularity Cloud Security because of its strong AI-driven detection, behavioral analysis capabilities, automated response features, and centralized visibility, which aligned well with our security requirements.

My advice to others looking into using SentinelOne Singularity Cloud Security would be to clearly define your security requirements and evaluate how SentinelOne Singularity Cloud Security fits into your existing environment before deployment. Take advantage of AI-based protection, automation features, and centralized visibility, but also spend time on proper configuration, policy tuning, and integration with your existing security tools. Organizations should also plan for user training and regular review of alerts and reports to get maximum value from the platform. I would rate this product an 8 out of 10.

Hybrid Cloud

Microsoft Azure

I have been using SentinelOne Singularity Cloud Security for the last two years.

My main use case for SentinelOne Singularity Cloud Security is Cloud Security Posture Management, cloud data security, and unified visibility.

A specific example of how I use SentinelOne Singularity Cloud Security for cloud data security management is with cloud object storage such as Amazon S3.

I continuously monitor and audit my environment for misconfigurations as part of my main use case for SentinelOne Singularity Cloud Security.

The best features SentinelOne Singularity Cloud Security offers in my experience are cloud Open-Sip Security Engine and a very tight expert path, as well as AI-powered runtime protection. This feature provides clear evidence of exploitability, allowing security teams to focus on fixing critical issues rather than chasing noise and false positives. It uses behavioral AI to detect ransomware, zero-day exploits, fileless attacks, and NDR attacks.

For visibility, SentinelOne Singularity Cloud Security has a Singularity Data Lake, where telemetry from cloud workload endpoints identifies into a single repository for rapid querying and analysis. It also has Graph Explorer, which visually maps the relationships between cloud assets, endpoints, and identities to help analysts understand the blast radius and root cause of the incident. It correlates related events into a single storyline, providing full historical context for deeper forensic analysis.

SentinelOne Singularity Cloud Security positively impacts my organization by reducing alert fatigue and decreasing false positives. The platform allows security analysts to focus strictly on actionable, verified risk rather than manual triage. It also provides faster response times, helping my organization see a reduction in mean time to respond and mean time to detect. It includes autonomous resolutions and eliminates blind spots, providing unified visibility across multi-cloud environments, endpoints, and enterprise risk, reducing the likelihood of major security incidents.

In terms of improvement for SentinelOne Singularity Cloud Security, users and industry analysts identify several areas where the platform can be enhanced, including administrative setup experience and operational tuning and performance.

The user interface of SentinelOne Singularity Cloud Security is quite good. I do not have any additional improvements needed for SentinelOne Singularity Cloud Security that I have not already mentioned.

I have been working in my current field for two years.

SentinelOne Singularity Cloud Security is very stable.

SentinelOne Singularity Cloud Security's scalability is quite good, as it is very scalable.

I rate the customer support for SentinelOne Singularity Cloud Security a ten out of ten.

I observe an approximate 88% reduction in mean time to respond as a specific metric around the reduction in false positives and response times.

I chose a rating of ten out of ten for SentinelOne Singularity Cloud Security because of its autonomous threat detection and response, comprehensive visibility, operational efficiency, and lightweight performance. It also demonstrates proven industry leadership.

SentinelOne Singularity Cloud Security's unified platform experience has helped streamline my security operations, functioning as a single pane of glass. My users appreciate having one source of truth for endpoints and cloud workloads, such as virtual machines and containers across AWS and other clouds. It has verified exploit paths, not just listing vulnerabilities but identifying which ones are actually reachable and exploitable by an attacker, helping my team focus only on high-priority risks.

I use Purple AI for threat investigations, and it is a game-changer.

SentinelOne Singularity Cloud Security's runtime protection is quite good in terms of adaptability to new and unknown threats compared to other solutions I have used.

It is significant for my team to have built-in integrations that unify various aspects of cloud security, resulting in superior threat detection and faster response, along with improved operational efficiency and security posture.

Drift detection significantly impacts my organization's ability to detect unexpected process behavior in containerized environments by reducing response times. The system can automatically share information and responses across different aspects to improve incident response time significantly. The automation of tasks and built-in integration enables automated compliance audit and risk remediation, reducing manual efforts and human error in managing security configurations.

SentinelOne Singularity Cloud Security drastically reduces the mean time to remediate for cloud incidents by shrinking investigation and response time from hours to seconds or minutes. The platform offers an autonomous AI-driven approach.

We measure the time savings in terms of SecOps operations achieved through SentinelOne Singularity Cloud Security by focusing on metrics, where automation reduces manual investigation and expedites incident response time. My organization frequently achieves significant efficiencies, with some customers achieving a 95% reduction in mean time to detect and an 88% reduction in mean time to respond. The reduction of false positives by using AI contextualized alerts allows teams to spend less time investigating non-malicious findings. The verified exploit paths feature helps my team prioritize vulnerabilities with a critical exploitable route, reducing time spent patching non-critical issues.

I advise others looking into using SentinelOne Singularity Cloud Security to prioritize the visibility feature, utilize the AI-driven Purple AI for cross-environment threat analysis, and adopt a least-privilege IAM model to maximize the security impact.

SentinelOne Singularity Cloud Security is a recognized Singularity Cloud system and a premier cloud-native application protection platform, heavily emphasizing autonomous and AI-driven protection over manual, policy-based detections. I rate this product ten out of ten.

Private Cloud

Amazon Web Services (AWS)

I use SentinelOne Singularity Cloud Security to collect endpoint data from the company, such as servers, computers, and mobile phones. The solution functions similarly to Cortex XDR and provides antivirus protection that safeguards devices from viruses and malware.

SentinelOne Singularity Cloud Security offers real-time protection, anti-tamper capabilities, and a centralized platform with a good user interface. The UI is intuitive enough that even people without cybersecurity knowledge can understand how to use it.

The policy feature is valuable because it tells the product what to do with new files, such as whether to scan them or leave them untouched. One single tab covers all the features, so I do not have to open another tab or window to turn settings on or off. The simplicity of the product itself makes it better than competitors.

The real-time protection is quite valuable. If any attack occurs or if an employee tries to download something malicious, SentinelOne Singularity Cloud Security directly blocks it for us without requiring manual intervention. For example, if an employee accidentally clicks on a link that tries to download something malicious, SentinelOne Singularity Cloud Security directly blocks it and quarantines it, notifying us on the console about the employee's name and what they attempted to download. We can then check the file or ask the user, and if they did not download it intentionally, we can close the case. If it was critical for them, we can release it directly from the console.

The unified platform experience of SentinelOne Singularity Cloud Security is good. The dashboard, settings menu, policy menu, user menu, and endpoint menu are all well organized. I can say it is one of the best user interfaces I have used, and it is very user-friendly.

Integration could be improved because not all solutions can be integrated with SentinelOne Singularity Cloud Security or vice versa. I was in a project where the company wanted to integrate SentinelOne Singularity Cloud Security with another solution product. When I checked, it turned out that integration was possible but could not be directly connected. It had to go through middleware before reaching that product, which is more complicated.

SentinelOne Singularity Cloud Security is a newer product compared to Palo Alto Cortex, so perhaps some product solutions cannot be integrated yet. SentinelOne Singularity Cloud Security does not have as large a portfolio of integrations as Cortex XDR.

SentinelOne Singularity Cloud Security is more sensitive compared to other solutions. While all solutions perform well when it comes to real-time protection, SentinelOne Singularity Cloud Security tends to generate more false positive events due to its high sensitivity. For example, some companies use older types of WinRAR, which may get blocked by SentinelOne Singularity Cloud Security directly.

I would appreciate it if they introduced a filtering or archive feature where we could add applications that should not be marked as threats.

Many features in SentinelOne Singularity Cloud Security have additional costs, which limits our exploration of the full product.

It would be more convenient if SentinelOne Singularity Cloud Security could be integrated with other solution tools such as firewalls or SIEM, as it would be more comfortable for us to avoid checking the console every single time. In our SOC, we have many tabs open on our screen, and it is confusing; we might miss some alerts. With better integrations, we could go in one tab and have everything provided for us.

I have used SentinelOne Singularity Cloud Security for almost one year.

SentinelOne Singularity Cloud Security is very stable, and there are no errors, even compared to Cortex where there were errors on the agent. We have not experienced any issues with SentinelOne Singularity Cloud Security. The platform is more convenient, and for the server, they choose the nearest one from Indonesia, so when we go to the console or when the devices try to connect, there are no errors. Even during power outages, the system remains stable.

From the licensing perspective, it is very easy to scale. When a company wants to add more licenses, they simply call the provider or a consultant, and they can add it within one or two months from the time they request it. They will then receive the license instantly.

SentinelOne Singularity Cloud Security is more resource-friendly, so it does not consume a lot of RAM or storage. This is excellent because even companies with older devices can run SentinelOne Singularity Cloud Security. In Indonesia, especially in financial-related companies, there are regulations stating that some servers or programs can only run on older servers. SentinelOne Singularity Cloud Security can directly create a custom build for that specific server.

In the case of custom builds, the company itself has to contact SentinelOne Singularity Cloud Security, as this is not publicly available.

I have experience with the technical support and customer service of SentinelOne Singularity Cloud Security.

During implementation, when we encounter any issues, we call support. The implementation process has only involved minor issues, so we have not needed extensive support. We simply email them, and they respond directly with documentation if available. Otherwise, they provide comments to help resolve the issue.

After implementation, the process is fast. SentinelOne Singularity Cloud Security provides cloud hosting itself. If we choose the cloud option, they will set it up, and we simply wait until we have our domain and account. When we go to that domain and log in, our console is already there.

Regarding the deployment model, I recommend the cloud option for SentinelOne Singularity Cloud Security.

As far as I know, SentinelOne Singularity Cloud Security has one license for the cloud itself and another license for the devices. If the company size is one thousand people, they can buy one thousand or one thousand one hundred for a backup. If they need more, they can add more licenses, and the company will buy it and update it directly to the console. SentinelOne Singularity Cloud Security is much cheaper than Palo Alto Cortex.

SentinelOne Singularity Cloud Security is simpler than Cortex XDR. The process is similar to Cortex, but the difference is that Cortex integrates the package file with the license or token. With SentinelOne Singularity Cloud Security, we have to manually insert the token or copy it from the console to a notepad. When we try to install, we click the installer and open the notepad to paste the token.

Public Cloud

Other

Cloud security is what I refer to when discussing SentinelOne Singularity Cloud Security. The main use case for SentinelOne Singularity Cloud Security would be getting the security posture through the CSPM module, understanding how the security posture of the cloud is configured. The second would be the identity piece, understanding from an identity perspective because in the cloud, even in the front end, you see one identity and the roles associated with it. However, in the back end, that identity is mapped to multiple roles, and if it gets compromised, you don't have visibility on how far the attack is or how deep the breach has happened. To have complete visibility of how the identities are mapped within the cloud and what are the misconfigurations and vulnerabilities associated with it, CSPM and CIEM are the main use cases that I am looking for concerning cloud configuration vulnerabilities and identity perspective.

Regarding the functionality part of SentinelOne Singularity Cloud Security, it is a unified platform. All the different modules which comprise cloud security, such as CSPM, CWPP, and CIEM, are unified and given in a single console which helps because I don't have to log in to different things and then check or do a lineage comparison. In a single console, I get everything. The AI feature is also quite good. The AI detection rate that I have found is much better than the other set of tools that I work on. From a Kubernetes perspective, it has some good in-depth sidecar-based scanning technologies that I have found to be good. From the reporting perspective, the reports are better. I can easily prioritize my risks based on the reports that are generated from the solution. At the back end, it also has a single data lake, so from the single console and single data lake, I am able to get some good reports. Overall, these are the benefits I would say from the solution perspective that I liked.

SentinelOne Singularity Cloud Security helps me understand the nitty-gritties of my environment. A few of its deployments are agentless, so that helps from the system perspective because it does not utilize any resources. Reporting is quite better, and it gives an in-depth picture of the overall cloud security posture of my environment. These are the factors that have defined my inclination towards going for SentinelOne Singularity Cloud Security.

SentinelOne Singularity Cloud Security helps reduce MTTR for cloud incidents, especially in the investigation part. My MTTR has reduced because of the AI detection capabilities and the risk prioritization. Because of the AI detection and its integration with third-party solutions for automation of remediations, plus the risk prioritization, I know which risks to address first even if there are one hundred risks. From an operationalized perspective, the agentless part, security prioritization, risk prioritization, and the AI detection have been very beneficial.

The unified platform experience helps to streamline some security operations, so the single console and single data lake at the back end have helped to streamline the operations, and the agentless part has made the operations part quite easier.

The AI detection engine of SentinelOne is quite powerful, and since it works on behavioral patterns rather than signatures, the detection of unknown threats is much better compared to the other solutions.

In my opinion, if you have worked on the SentinelOne platform, then SentinelOne Singularity Cloud Security is easier to manage. However, if you are new to it, understanding the console, the policies, and the integrations takes more time for an administrator. Compared to other solutions, the third-party integrations are currently less compared to other cloud security solutions. They may improve in the future, but as of now, they are less. They have entered the market a couple of years ago from a cloud perspective, so the maturity factor or the support perspective is still not that competitive compared to others. Support also needs to be improved; the ticket closing time or understanding of the issues is much longer, and the understanding of the issues from the support perspective is less.

The technical support is quite immature, so I would rate it as a six.

I have used SentinelOne Singularity Cloud Security since last year.

I would rate the stability for SentinelOne Singularity Cloud Security a seven.

Scalability for SentinelOne Singularity Cloud Security has no issues; it is good. I would rate it a nine, or 9.5 in fact.

I can compare SentinelOne Singularity Cloud Security with Google's Wiz, Palo Alto's Prisma Cloud, and CrowdStrike's Falcon Cloud. In my opinion, I rate SentinelOne Singularity Cloud Security number two, then Prisma, and then Wiz. I find CrowdStrike somewhat better from SentinelOne Singularity Cloud Security.

The initial setup for SentinelOne Singularity Cloud Security is not that simple, but it is also not that complex. It is somewhere in between. If I understand cloud and if I have worked on the SentinelOne platform, it is easier comparatively. However, if not, then it becomes a tedious task. Since I have worked on SentinelOne before, it was not that complex. However, for someone new, it might be complex if they don't know.

Regarding the pricing model for SentinelOne Singularity Cloud Security, I would rate it a six. I find it to be pretty reasonable money for the product, but it could be a bit cheaper.

I am totally satisfied with the functionality part of SentinelOne Singularity Cloud Security. The functionality is fine. They have some good feature sets. If you look at it from an individual perspective, it gives good reports and a good index of what my cloud posture is. From the agentless perspective, I have less overhead. From an operationalized perspective and from a security perspective, that is good.

Purple AI is very good; it is natural language, so I can easily ask questions and get those answers. I don't have to write some heavy codes or do some XML programming at the back end. With simple queries, I get all the results that are expected. My overall review rating for SentinelOne Singularity Cloud Security is eight.

We used SentinelOne Singularity Cloud Security for approximately one year during a nine-month period. We attempted to onboard it and used it for application security and to track vulnerability management. However, as we are part of the Danaher organization and one of the operating companies under it, they decided to move to a different vendor, resulting in this short period of usage.

SentinelOne Singularity Cloud Security was implemented across our multi-cloud infrastructure, with all of these infrastructures integrated into the platform. The solution pulled all accounts and subscriptions from AWS and Azure, providing a consolidated view of our entire infrastructure. Within those infrastructures, it ran agentless scanning and could identify any vulnerabilities, malware, or risks associated with our infrastructure resources.

SentinelOne Singularity Cloud Security was user-friendly and not difficult to understand in terms of how the application works. The integration process was pretty straightforward. We integrated with AWS, Azure, and Google, though integration with Google required significant workarounds involving Terraform. Once the integration was completed, the process became straightforward. The onboarding process for accounts was somewhat tedious, but apart from that aspect, everything was straightforward.

The visibility provided by SentinelOne Singularity Cloud Security around infrastructure was very valuable. The platform has levels that notify you of information-level risks, and these notifications increase as risks escalate, such as when malware is detected. The system continuously defines and alerts you about risks. There are mechanisms where you can integrate with messaging tools and notifications according to your preferences, which helps you get notified on a priority basis. You can configure how often you want to receive notifications based on whether a risk is medium or high priority. We were working on configuring these features when we stopped because we were moving to another tool.

From a security operations perspective, SentinelOne Singularity Cloud Security played an important role. I work with the infrastructure team and closely work with the Infosec team, which is the primary security team. They relied on all the risks and alerts from the platform and worked on how to remediate them and determine whether patching was required. All remediation decisions were based on the initial visibility of any infrastructure risk provided by this application.

The secret scanning feature in SentinelOne Singularity Cloud Security is very important. When we create new accounts or onboard new accounts for any business unit, we gain visibility into what exactly that team is doing and what risks are associated with their activities. As a platform engineer, I work with multiple business units who want to work on Kubernetes or Docker solutions in test environments or sandboxes. When we create an account for a business unit without segmentation around what connects to what, SentinelOne Singularity Cloud Security runs scanning and provides visibility. For example, if a developer creates a vulnerable Jenkins instance, the SOC team and I get a better view of the risks associated with instances that the developer team is working on, even though the developers themselves may not be aware of those risks.

We did not try to use the threat investigations feature from SentinelOne Singularity Cloud Security.

Drift detection with respect to infrastructure code is important. When somebody makes changes to infrastructure code, it creates a drift and lets you know what changes have been made at the infrastructure level.

The first downside of SentinelOne Singularity Cloud Security was the onboarding process, which was very challenging and took a lot of time. We faced many challenges around onboarding accounts. However, once we got past that initial phase, everything became pretty straightforward and we did not have any issues.

We used SentinelOne Singularity Cloud Security for approximately one year during a nine-month period.

I have not observed any lagging, crashing, downtime, or any sort of instability with SentinelOne Singularity Cloud Security.

We did not attempt to scale extensively with SentinelOne Singularity Cloud Security. As of the time we used it, the application was working fine. Since we did not use it for a longer period of time, we did not face any challenges in terms of scalability.

The maintenance part of SentinelOne Singularity Cloud Security was not very challenging. The platform had some bugs in between, but when we reached out to support, they helped us and indicated that the issue would be resolved. They could reach out to the engineering team and provided us with a resolution in one to two weeks if the bug was not critical. We did not face any challenges with support or maintenance.

The speed of opening a ticket with SentinelOne Singularity Cloud Security support is good. However, there were some cases where getting a support agent on a call was a little difficult.

Positive

We moved to another application after discontinuing SentinelOne Singularity Cloud Security. We are now using Palo Alto's application called Prisma. Prisma is also going to be rebranded into Cortex, which is probably going to be released next year. Currently, all operating companies under Danaher, which we are part of, are using Palo Alto Prisma.

The company went with Prisma because within multiple operating companies, there is a significant footprint of Palo Alto devices for firewalls and endpoint firewalls on-premise. Since Prisma is also a Palo Alto product, it integrates natively with their existing applications. SentinelOne Singularity Cloud Security operated through the cloud, while Prisma also provides risk assessment for on-premise devices, which is an additional capability. This is the reason why Prisma is preferred currently.

I was not part of the onboarding process, so I do not know how difficult or challenging the implementation was. However, I did not observe any issues or discussions within the team indicating that implementation of SentinelOne Singularity Cloud Security was difficult.

I have not tried using the Offensive Security Engine feature. My overall rating for SentinelOne Singularity Cloud Security is seven out of ten.

Other

My use case for SentinelOne Singularity Cloud Security was mostly for cloud security, to identify vulnerabilities in the environment and to secure important sensitive data. These were the two primary use cases.

SentinelOne Singularity Cloud Security improved our risk posture significantly. There was a very great improvement that I can definitely confirm.

SentinelOne Singularity Cloud Security helped reduce our mean time to detect and mean time to remediate. 

The inclusion of proof of exploitability in SentinelOne Singularity Cloud Security's evidence-based reporting is quite important to me, as they were quite useful. 

Regarding its evidence-based reporting for helping prioritize and solve the most important cloud security issues, it mostly relates to our VMs running on GCP, which was the most important use case for us. I assess this agentless vulnerability scanning for vulnerability discovery across my cloud infrastructure as good; they frequently provide us with existing vulnerabilities, so overall, it was great to work with.

SentinelOne Singularity Cloud Security helped to reduce the number of false positives. I was using automated malware scanning for S3 buckets in SentinelOne, and we were able to resolve quite a good number of use cases with that, so it was pretty helpful.

SentinelOne Singularity Cloud Security improved collaboration among our cloud security teams, application developers, and AppSec teams. We were able to collaborate with different teams, sharing information about vulnerabilities related to development, explaining the actual problems, how they could be resolved, and how they could be verified first. This collaboration helped save engineering time, approximately three to four hours.

I appreciate its ability to scan the entire environment and fetch all items that are not configured properly, which is one of the best capabilities. It also suggests what the actual configuration should be, notifies instantly about any information that is leaked, and regularly gives updates about vulnerabilities that are present in the market.

SentinelOne Singularity Cloud Security is quite easy to use; there is not much complexity. The UI is quite user-friendly, making it very easy to use. 

One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have configured the policies could be enhanced. There could be a better way to configure custom policies, which is one aspect that I feel can be improved further.

I used this solution for two years.

In my opinion, it is stable.

It is a scalable solution.

I would rate my experience with the technical support of SentinelOne Singularity Cloud Security as eight out of ten.

Positive

I did not use a different SentinelOne solution or solutions from other vendors.

I was not involved in the deployment of the solution or the initial setup of SentinelOne Singularity Cloud Security.

We saw a return on investment with SentinelOne Singularity Cloud Security. The aspects where I have seen ROI were mainly in time-saving, as it saved considerable time in identifying vulnerabilities, testing vulnerabilities, and it helped in preventing quite a few incidents that could have led to major issues.

I think the pricing of SentinelOne Singularity Cloud Security is a bit high.

I would rate SentinelOne Singularity Cloud Security an eight out of ten.

I am an integrator and reseller of SentinelOne Singularity Cloud Security. Most of our customers are interested in cloud security posture management, including misconfigurations of different clouds, particularly AWS and Azure. We also use SentinelOne Singularity Cloud Security for compliance in the cloud and, rarely, with modules like Kubernetes security and IAC security posture management.

What I appreciate most about SentinelOne Singularity Cloud Security is how deeply the solution can identify misconfigurations with many different built-in rules for misconfigurations, probably around 2,000 if I remember correctly. Additionally, the solution has very good compliance modules with strong rules for standards such as PCI DSS.

From my experience, the unified platform of SentinelOne helps streamline security operations, and I propose to our customers that they move to the platform where they can choose different solutions such as EDR, SIEM, cloud security, and others, which I consider one of the biggest positives.

In one of my latest projects, I faced issues with the functionality of runtime protection for serverless functions for AWS, as SentinelOne currently does not have this functionality. However, the vendor promised that this functionality should be added by the end of this year, so it would be beneficial if SentinelOne adds runtime protection for serverless AWS.

I am still working with SentinelOne Singularity Cloud Security for half a year.

The stability and reliability of SentinelOne Singularity Cloud Security are good enough. I believe the vendor does not have any problems with stability, which indicates it is a good factor for improvement in the future. I have not experienced any outages with SentinelOne Singularity Cloud Security when the product stopped working abruptly.

When evaluating how scalable SentinelOne Singularity Cloud Security is, I find that if we need to scale, we just need to buy additional licenses; we do not need to deploy additional servers or consoles.

I do not usually communicate with the technical support of SentinelOne Singularity Cloud Security. In some projects, we have communicated with their support due to specific customer infrastructure needs, but generally, the initial setup can be completed without support team communication.

Based on my interactions with the technical support of SentinelOne, I would rate them highly. As an integrator, I have communicated with many support teams and vendors, and I was impressed when we sent some technical requests and received answers within 30 minutes, although those were general questions, not high-priority ones.

My experience with the initial setup of SentinelOne Singularity Cloud Security is that when we receive the license and do a full initial setup, it takes around one workday. After one workday, we can use this solution with all capabilities and get value.

Overall, I find the initial setup of SentinelOne Singularity Cloud Security straightforward due to good documentation and a really user-friendly interface. I do not use the documentation a lot other than during the initial setup, but I refer to it in specific cases.

I think it is hard to say about the pricing, but projects with SentinelOne Singularity Cloud Security can start from probably 20,000 dollars per year. I do not know the current cost for one cloud resource for scanning, but I think if the customer has about 20,000 dollars for cloud security posture management solutions, we can proceed with SentinelOne.

I have extensive experience with SentinelOne Singularity Cloud Security. The functionalities I get from SentinelOne Singularity Cloud Security mean the possibilities outweigh the price. It is not over-expensive; for the capabilities it provides, SentinelOne Singularity Cloud Security is truly not over-expensive.

I cannot answer the question about the impact of SentinelOne Singularity Cloud Security on reducing MTTR for cloud incident investigations because I am not working as an analyst and this is not part of my experience. I have not worked closely with any different technology for the same use cases before SentinelOne Singularity Cloud Security.

I would rate this review a 9 out of 10.

Public Cloud

Amazon Web Services (AWS)

Our primary use case for SentinelOne Singularity Cloud Security is securing multi-cloud workloads by identifying cloud misconfigurations, monitoring risks, and improving compliance while strengthening our overall cloud security posture.

We use SentinelOne Singularity Cloud Security to continuously assess AWS environments for security risk. It helps detect configuration issues, prioritize critical findings, and provides practical remediation guidance, allowing us to resolve exposures before they become security incidents.

SentinelOne Singularity Cloud Security is part of our daily cloud security workflow and gives us centralized visibility across cloud resources while simplifying risk management.

Key features of SentinelOne Singularity Cloud Security include Cloud Security Posture Management (CSPM), cloud workload protection, risk prioritization, compliance monitoring, and unified visibility across cloud environments.

The risk prioritization feature of SentinelOne Singularity Cloud Security has definitely made a difference in our daily workflow. Compared to some other cloud security tools we have used, SentinelOne does a better job of prioritizing risk based on potential impact instead of simply listing every finding with the same level of importance. This helps us focus on the issues that require immediate attention rather than spending time triaging low-risk alerts. In practice, it has reduced the amount of manual work effort needed to review findings.

It makes it easier to decide what should be remediated first with SentinelOne Singularity Cloud Security, especially in large cloud environments where the number of alerts can grow quickly. We still validate critical findings before making changes, but overall, it has made our remediation process more efficient and helped the team respond faster.

SentinelOne Singularity Cloud Security has improved our security visibility, reduced the manual effort, accelerated the remediation process, and strengthened compliance across cloud environments.

Since using SentinelOne Singularity Cloud Security, we have reduced the time spent identifying cloud misconfigurations, improved remediation efficiency, and achieved better compliance readiness through continuous monitoring.

I would like to see more customizable dashboards, deeper reporting capabilities, and broader integrations with third-party cloud management platforms in SentinelOne Singularity Cloud Security. Additionally, regarding the event search feature, the power query is useful, but it has a learning curve for those new to the platform, which could be improved.

I have been working in the observability and cybersecurity domain for over two years, gaining hands-on experience with SIEM, cloud security, endpoint protection, and security operations.

SentinelOne Singularity Cloud Security has been stable and dependable in our production environment.

SentinelOne Singularity Cloud Security scales well as our cloud environment grows and continues to perform consistently.

Our experience with SentinelOne Singularity Cloud Security's customer support has been positive. The support team is knowledgeable and responsive. I would give the customer support of SentinelOne Singularity Cloud Security a nine out of ten.

We previously relied on native cloud security tools and manual security reviews.

The unified platform experience of SentinelOne Singularity Cloud Security has helped streamline our security operations. One of the biggest advantages is having cloud security insights in a single platform instead of switching between multiple tools. Earlier, we often had to correlate information from different dashboards to understand what was happening, which took extra time. With SentinelOne Singularity Cloud Security, posture findings, workload security, and risk insights are available in one place. This gives everyone on the team the same view of the environment, making collaboration much easier.

We have seen value through fast risk identification, reduced manual effort, and improved overall efficiency.

My experience with SentinelOne Singularity Cloud Security's pricing, setup cost, and licensing has been positive in that deployment was straightforward, licensing was easy to understand, and overall pricing was reasonable considering the security capabilities provided.

We evaluated other cloud security platforms provided by CrowdStrike, but we chose SentinelOne because of its unified approach and ease of management.

If I had to give one piece of advice to others looking into using SentinelOne Singularity Cloud Security, I would say to start with the initial deployment, integrate your cloud accounts, review the initial findings carefully, and establish remediation priorities before expanding across all environments. I would rate this product a nine out of ten overall.

Public Cloud

Amazon Web Services (AWS)

Our main use case for SentinelOne Singularity Cloud Security in our company is using the endpoint for the machine.

In my opinion, the best features of SentinelOne Singularity Cloud Security are the integration with AI capability and more powerful performance; this is the future.

I find these features the best for my organization because the feature protects the machine.

SentinelOne Singularity Cloud Security has impacted my company positively as it provides good protection for the company and for the services.

In my opinion, SentinelOne Singularity Cloud Security can be improved by acknowledging that it has a good future with good capability for integrating with AI capability; it increased the high speed and performance for taking action.

I have been using SentinelOne Singularity Cloud Security for one year.

SentinelOne Singularity Cloud Security has been very stable so far.

My impression of SentinelOne Singularity Cloud Security's scalability is that it has high scalability and grows well.

I would evaluate SentinelOne Singularity Cloud Security's customer service or technical support by giving them an eight.

I give them an eight because it is not quite exceeded to reach a ten.

For them to get a ten, I still do not have any notes to give them to improve their service.

Before choosing SentinelOne Singularity Cloud Security, we evaluated other solutions and we are using Microsoft Defender.

The main differences between SentinelOne Singularity Cloud Security and Microsoft Defender, both pros and cons, are that SentinelOne Singularity Cloud Security has AI capability and is faster for performance and detection.

My experience with the pricing, setup costs, and licensing of SentinelOne Singularity Cloud Security is that the pricing is good; it is not expensive, it is medium.

I did not purchase SentinelOne Singularity Cloud Security through the AWS Marketplace.

I have not seen a return on my investment so far.

My experience with the pricing, setup costs, and licensing of SentinelOne Singularity Cloud Security is that the pricing is good; it is not expensive, it is medium.

Before choosing SentinelOne Singularity Cloud Security, we evaluated other solutions and we are using Microsoft Defender.

The main differences between SentinelOne Singularity Cloud Security and Microsoft Defender, both pros and cons, are that SentinelOne Singularity Cloud Security has AI capability and is faster for performance and detection.

There has been no impact on reducing our MTTR until now.

I do use Purple AI for threat investigations.

Its impact on understanding the root causes of security incidents is good; it understood the root cause for security.

SentinelOne Singularity Cloud Security's runtime protection compares well to other solutions I have used in terms of adaptability to new and unknown threats, as SentinelOne Singularity Cloud Security is a stable solution.

I am not using the Offensive Security Engine feature.

The role of SentinelOne Singularity Cloud Security's Secret Scanning feature in tightening my company's cloud hygiene is that it is a good one; it is very heavy and not too much load from the endpoint.

We measure the time savings achieved through SentinelOne Singularity Cloud Security as a good achievement.

I save time for my security operations by using SentinelOne Singularity Cloud Security.

I have saved approximately one year of time. I gave this review an overall rating of eight.

Public Cloud

Other