SentinelOne Singularity Complete Reviews

Name: SentinelOne Singularity Complete
Brand: SentinelOne
Rating: 4 (96 reviews)

Vendor: SentinelOne

4.3 out of 5

96 reviews

2,983 followers

Post review

What is SentinelOne Singularity Complete?UNIXBusinessApplication
Price:

SentinelOne is a leading comprehensive enterprise-level autonomous security solution that is very popular in today’s marketplace. SentinelOne will ensure that today’s aggressive dynamic enterprises are able to defend themselves more rapidly, at any scale, and with improved precision, by providing comprehensive, thorough security across the entire organizational threat surface.

Get the SentinelOne Singularity Complete Buyer's Guide and find out what your peers are saying about SentinelOne Singularity Complete, Microsoft Defender for Endpoint, CrowdStrike Falcon and more!

Buyer's Guide

SentinelOne Singularity Complete

September 2023

Get the report

Helped 735,432 peers since 2012

Featured reviews

Austin Estrada

Cybersecurity Analyst at Brady Corporation

Aug 23, 2023

Some of the reports that are exported through SentinelOne can be complicated for people who are not IT professionals. For example, we have some people within our leadership who would like to know why we are spending so much money on their product, and one of the ways that we are able to do that is through reports. Some of those reports are pretty easy to understand, and some of them are very complicated. Because they are not IT or security professionals, they may not have the same grasp. I wish their reporting feature was a little better. If they were able to export and make it a little more presentable, it would be great because this is something that we end up doing on our end where we take some of that data and make it look better. It would definitely save us time if it was a little prettier, for lack of a better word, from the beginning.

Read full review

Laurie Reynolds

Threat and Vulnerability Manager at GBG Plc

Sep 14, 2023

We use the Ranger functionality. It provides network and asset visibility. It is quite important for us. If we did not have another tool that is doing similar, it would have been extremely important, but we do have a vulnerability management tool that is very similar. It is quite good that it does that automatically out of the box, whereas we have to configure our vulnerability scanning solution to do something like this. The ability to have visibility of the network where we do not necessarily have SentinelOne deployed is very important. Ranger requires no new agents, hardware, or network changes. This is important for us. It has an advantage over our vulnerability management tool because we have to deploy scanners with our vulnerability management tool, whereas we do not have to deploy anything for SentinelOne Ranger, so in that way, it is a better solution in helping us. Ranger is very effective in helping to prevent vulnerable devices from becoming compromised. For example, we used Ranger and identified some systems in our data center that we could just log on to. It was not very difficult to get on to those devices. Therefore, it would not have been difficult for anyone else to get on those devices. We did not necessarily have the permission to do so, but we found a way to do that. We managed to get those devices secured, and therefore, increase the security of our systems. That kicked off from Ranger, and that is a good use case. Singularity Complete has helped free up our staff for other projects and tasks. For example, with automation, I have been able to patch some of our systems, which has freed up time for our help desk team. They do not have to patch some of the systems. It has also been helpful for deploying some of our agents for our other tools. If we deploy through SentinelOne using the script, that frees up our team's time. Singularity Complete has helped reduce our organizational risk. The previous solution we had was signature-based, so for endpoint detection, it has to know a certain kind of attack before it can detect it or even block it. Because Singularity Complete is more looking at the behavior of running processes and how these processes interact with other processes on the system, it has helped to reduce the risk. We are not relying on static detection signatures. We have got real-time detection. Singularity Complete can detect things that may be the first-ever attack in the world, and we get notified about it. It does reduce the risk.

Read full review

reviewer2248914

Director of Global Security Operations at a manufacturing company with 501-1,000 employees

Jul 31, 2023

There is a lot of improvement from a security maturity perspective. Even though we have a very reputable and well-known SIEM, one of our go-to applications in our environment is SentinelOne. On a daily basis, almost all my staff or my analysts use it and operate it every day. It gives us a lot of information and a lot of data about what is going on. In addition to the detections, we are able to use and leverage Binary Vault. We could also use Remote Script Orchestration, which is an add-on that we could add to the platform. It allows us other functionalities that we would not normally have with another product in the same category. It allows us to run scripts on endpoints remotely out of the SentinelOne administrative GUI, which we use for all kinds of purposes. It has improved our abilities significantly in what we can do. We have visibility into all our systems. We have visibility into malware or any suspicious activities that are occurring. We have the ability to quarantine systems based on the risks. If there is something going on, we have the ability to do that. We can also run remote scripts on systems, and we can control certain types of devices such as USB access. We have the ability to control what people can do with USBs. That is another functionality we use. Most traditional antivirus platforms are very basic in terms of how you add exclusions. Usually, you completely exclude an application from detection. They do not provide you with various modes or various levels of visibility into an application. SentinelOne provides different levels of visibility, so you can have a level that has some visibility and does not completely make the application invisible to SentinelOne. It is the first platform that I have ever worked on with such capability. Instead of just a binary exclusion on or exclusion off, they provide different interoperability modes. There are five interoperability modes. Some are performance-focused, and some are visibility-focused. They allow you to select the mode that will give you the best balance of visibility and performance depending on the application. It is very handy. Most endpoint security platforms, antivirus, and EDRs are binary. You apply the exclusion and have zero visibility into what that particular application is doing in your environment. With SentinelOne, you can implicitly trust, or you have the ability to say that you trust it, but you want to have an eye on it if anything ever happens. For example, your third-party software is compromised, as happened with SolarWinds, and it starts doing funny things in your environment. That is what the interoperability exclusions give you with SentinelOne. This is an excellent feature. In terms of its ability to ingest and correlate across our security solutions, they have recently added the Singularity marketplace in XDR. Not all of them but most of them are included in the license. We do leverage it. It gives us additional context. For example, we were able to add the VirusTotal API, which adds the context of what VirusTotal has in terms of information on a particular detection or binary that is detected in SentinelOne. They are starting to build those APIs out. We are able to add more context from other third-party applications. It is excellent. It is at no cost to us. We are using quite a few of them already for other platforms that are built out of the box. We are starting to leverage any out-of-the-box APIs for the platforms that we have. It has helped us with a little bit of consolidation. We were able to consolidate the device control. We were using another platform for that. We had another completely separate vendor for USB control, and now, we have decided to not renew that license and move all the controls through SentinelOne. It has not helped reduce alerts. The point is not to reduce alerts. It is to increase alerts. The point of Singularity is to reduce incidents, and, we for sure, have achieved that. The point of the Singularity platform is to block things that we do not want to occur in our environment or at least have visibility to them so that we can take action. If we were to strip it out completely, the organization would be in a much worse place. It has helped free up our staff for other projects and tasks because the incident response has diminished. I do not have my analysts responding to threats. I have them just validating when something is detected to ensure that we are okay. For sure, it has freed them up. There are about 25% of time savings. It has reduced our mean time to respond (MTTR). Without it, we would not have very much visibility into detections. It has improved our mean time to detect by 80% to 90%. If we did not have Singularity Complete, we would have very little visibility on the endpoints at least, and that is where most of our threats are occurring. We have a service from SentinelOne called Vigilance. This service has reduced our mean time to react or respond. This 24/7 service has improved our mean time to respond significantly because it is the SentinelOne analysts who are responding. It has improved our mean time to respond by 80% because they are performing the analysis. They are the experts, and they are looking at the detection in our console. We do not have to go out and try to perform that same level of understanding of what we have just seen. Their experts take a look at that. Instead of spending hours and hours trying to figure out what we are seeing, it is literally down to just minutes by the Vigilance team. It is a separate license that we have incorporated with our Singularity license. It is a part of their MDR solution. It is a service they offer. It has overall reduced our organizational risk.

Read full review

Pricing

Based on the reviews, the pricing for SentinelOne Singularity Complete is generally considered affordable and reasonable. There are different pricing options based on the features and services required, ranging from $4 to $6 per month per device. Some customers find the pricing a bit costly, but there is flexibility and room for negotiation. The licensing cost is competitive and paid annually. While the pricing is generally seen as reasonable, there are some suggestions for lower costs and inclusive features. The pricing is compared to other solutions in the market, with some customers finding it less expensive than competitors like CrowdStrike and McAfee. There are also positive remarks about the affordability and value provided by SentinelOne in terms of functionality and features.

ROI

The users have reported a positive return on investment (ROI) from using SentinelOne Singularity Complete. They mention that the ROI can be enhanced by using more licenses under a multi-cloud solution and that the product has good XDR capabilities and can integrate with various security components. The ROI is seen immediately after the stabilization phase and configuration according to customer needs. Users also highlight that the ROI is high and varies depending on the contract, with some rating it five out of five. They compare it favorably to other products like Microsoft Defender ATP, stating that SentinelOne is ahead in terms of features and independent of licensing schemes. Some users have already experienced a 100% ROI within a few months. Furthermore, the low CapEX is mentioned due to the cloud-based nature of the product. Users also mention the value of having dashboard data on cloud usage and better control over purchasing decisions. The ability of SentinelOne to reduce the need for analysts and prevent security incidents is highlighted, saving costs associated with incidents and potential loss of business. Overall, users believe that SentinelOne provides a great return on investment and offers significant advantages compared to other solutions.

Primary Use Case

The primary use case of SentinelOne Singularity Complete is as an endpoint protection and detection solution for cybersecurity. It is used extensively by clients and customers for EDR purposes, including detecting and mitigating malware threats. The solution covers all endpoints, including servers, and provides security controls. It also offers features such as ransomware protection, threat management, and antivirus capabilities. SentinelOne is used by various organizations, including resellers, distributors, system integrators, and solution providers, to protect against cyber attacks and ensure network security. Additionally, it is utilized for incident management, firewall implementation, and device control. The solution is flexible, with options for both on-premises and cloud deployment, and it offers API capabilities for enhanced cybersecurity protection.

Valuable Features

The most valuable features of SentinelOne Singularity Complete, according to the reviews, are:

1. Recovery and zero-day detection capabilities

2. Fulfillment of claims and reliability

3. Telemetry and information from the EDR part for security

4. Easy navigation and usability of the platform

5. AI solution for detecting and managing policies

6. Autonomous platform for separating false positives and negatives

7. Good graphing capabilities for visualizing attacks and alerts

8. Integration and data sharing with other security vendors

9. File-less monitoring and filtering for enhanced security

10. Real-time detection and face detection capabilities

11. Deep visibility, remote script orchestration, and Ranger features

12. Effective detection and protection against threats, malware, and cyber attacks

13. Remediation and rollback features for quick response

14. Endpoint detection and non-reliance on signatures for detection

15. Efficient use of system resources and quick full scans

16. Easy implementation and compatibility with various operating systems

17. Protection against ransomware and peace of mind

18. User-friendly interface and ease of use

19. Lightweight and non-disruptive to machine performance

20. Rapid threat detection and curiosity-sparking features

21. Agent deployment and system integrator requirements

22. Lateral movement and Active Directory utilization

23. Process visualization, automated response, and integration possibilities

24. Effective protection and management capabilities

25. Quick access to queries and information configuration

26. Easy deployment, stability, and scalability

27. Excellent support, pricing, and user interface

28. Excellent AI and behavioral-based protection against attacks

29. Instant rollback for Windows support and certificate distribution

30. Simple installation, management, and aggressive protection

31. Dashboard analytics and rapid threat detection

32. Low system resource consumption and fast scans

33. Reliable protection and support for various operating systems

34. Clarity of events and autonomous actions for improved security

35. Ranger functionality for endpoint protection and IoT defense

36. Reliability and never being breached for enhanced security.

Room for Improvement

Improvements suggested for SentinelOne Singularity Complete include adding DNS filtering, improving documentation, enhancing compatibility with other platforms such as Huntress, introducing an on-premises solution with affordable pricing for government institutions, improving the search feature and retention period, reducing resource usage during scanning, simplifying the software installation process, adding application control capability, improving stability, reducing the cost, integrating with other security tools, including troubleshooting in the dashboard, adding granular firewall capabilities, enhancing the user-friendly interface, optimizing performance and incident filtering accuracy, improving phishing detection, expanding product range to include Android and iPhone, adding manual review of threat files, enhancing support, providing missing features such as application security and control module, improving report customization, streamlining user management, integrating with Active Directory, automating the setup process, improving the update process, including patch management, extending encryption and DLP capabilities, offering better integration with antivirus solution and other security products, improving analytics and threat analysis, enhancing communication about requested features, upgrading the CASB tool, improving reporting and integration capabilities, enhancing stability, improving the administrative interface, improving reporting and integration with ConnectWise, removing the minimum license requirement for cloud-based product, and continuously developing automation, machine learning, and artificial intelligence capabilities.

Initial Setup

The initial setup for SentinelOne Singularity Complete is described as easy, straightforward, simple, and convenient by the reviewers. They mention that the deployment of the solution can be done in minutes or within a day, depending on the size of the network. The reviewers also highlight that the setup process does not require complex or difficult procedures. One reviewer rates the ease of implementation as ten out of ten, while another rates it a five out of five. They mention that the solution is easy to install, deploy, and manage, and that it has low maintenance requirements. Some reviewers mention that the setup process involves downloading and installing the agent, while others mention deploying it through policies or using a URL.

Scalability

The solution of SentinelOne Singularity Complete is highly scalable and can accommodate a large number of users. Users have reported that the scalability is great, very good, highly scalable, and better than other tools. The solution can be easily scaled and can handle thousands of users and servers. It is used by organizations with varying numbers of users, ranging from 10 to 10,000. Users have mentioned plans to increase usage as their organizations grow. The scalability is considered not a problem and the solution can work across different platforms. Users have also praised the flexibility and ease of scaling. Some users have mentioned the need to purchase additional licenses for scaling purposes.

Customer Service and Support

The customer service and support of SentinelOne Singularity Complete have received positive feedback from users. Users have mentioned that the technical support is great, helpful, and responsive. They have found the support team to be quick in resolving bugs and providing workarounds. Some users have also praised the documentation provided by SentinelOne. However, there have been a few complaints about slow response times and the lack of online sessions for technical assistance.

Stability

The solution of SentinelOne Singularity Complete is consistently described as stable and reliable by the reviewers. They emphasize that the product does not crash, freeze, or have bugs or glitches. The stability is praised for different scales of clients, ranging from small to large. However, some reviewers mention initial issues that have been resolved, and a few mention occasional lag or slower search functionality. Overall, the solution is considered stable and reliable, with ratings ranging from nine out of ten to five out of five.

Pricing

ROI

Primary Use Case

Valuable Features

The most valuable features of SentinelOne Singularity Complete, according to the reviews, are:

1. Recovery and zero-day detection capabilities

2. Fulfillment of claims and reliability

3. Telemetry and information from the EDR part for security

4. Easy navigation and usability of the platform

5. AI solution for detecting and managing policies

6. Autonomous platform for separating false positives and negatives

7. Good graphing capabilities for visualizing attacks and alerts

8. Integration and data sharing with other security vendors

9. File-less monitoring and filtering for enhanced security

10. Real-time detection and face detection capabilities

11. Deep visibility, remote script orchestration, and Ranger features

12. Effective detection and protection against threats, malware, and cyber attacks

13. Remediation and rollback features for quick response

14. Endpoint detection and non-reliance on signatures for detection

15. Efficient use of system resources and quick full scans

16. Easy implementation and compatibility with various operating systems

17. Protection against ransomware and peace of mind

18. User-friendly interface and ease of use

19. Lightweight and non-disruptive to machine performance

20. Rapid threat detection and curiosity-sparking features

21. Agent deployment and system integrator requirements

22. Lateral movement and Active Directory utilization

23. Process visualization, automated response, and integration possibilities

24. Effective protection and management capabilities

25. Quick access to queries and information configuration

26. Easy deployment, stability, and scalability

27. Excellent support, pricing, and user interface

28. Excellent AI and behavioral-based protection against attacks

29. Instant rollback for Windows support and certificate distribution

30. Simple installation, management, and aggressive protection

31. Dashboard analytics and rapid threat detection

32. Low system resource consumption and fast scans

33. Reliable protection and support for various operating systems

34. Clarity of events and autonomous actions for improved security

35. Ranger functionality for endpoint protection and IoT defense

36. Reliability and never being breached for enhanced security.

Room for Improvement

Initial Setup

Scalability

Customer Service and Support

Stability

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our SentinelOne Singularity Complete Buyer's Guide for additional reliable information.

Learn more about SentinelOne Singularity Complete

SentinelOne makes keeping your infrastructure safe and secure easy and affordable. They offer several tiered levels of security and varied payment options. SentinelOne works well with Linux, Windows, and MacOS, and can successfully support legacy infrastructures as well as the newer popular environments, including the latest operating systems. The single pane of glass management will save time and money by reducing manpower and ensuring comprehensive security protection of all your endpoints locally and worldwide.

SentinelOne offers intensive training and support to meet every organization’s unique business needs.

SentinelOne's levels of services and support include, but are not limited to:

SentinelOne GO is a guided 90-day onboarding service to ensure successful deployment and success. It assists with the deployment planning and overview, initial user setup, and product overviews. It provides ongoing training and advisory meetings, ensuring that everything is set up correctly and that your team understands the appropriate protocols to ensure success.

SentinelOne offers multi-tiered support based on your organizational needs from small business to enterprise, using their Designed Technical Account Management (TAM). They have support for every business level: Standard, Enterprise, and Enterprise Pro. SentinelOne is always available to ensure that you and your organization work together to minimize the risk of downtime and any threat exposure.

Threat Hunting & Response Services

Support for threat hunting and response include Watch Tower, Watch Tower Pro, Vigilance Respond, and Vigilance Respond Pro. Each of these services builds on the other, progressively adding features based on your organizational needs.

Watch Tower: This is the entry-level plan and includes: Active campaign hunting and cyber crime alerts and course correction for potential threats, access to the Monthly Hunting & Intelligence Digest.

Watch Tower Pro: Includes everything in WatchTower and customized threat hunting for all current & historical threats, unlimited access to Signal Hunting Library of Pre-Built Queries, Incident-Based Triage and Hunting, continuous customer service, followup and reporting, a Security Assessment, and quarterly Cadence meetings.

Vigilance Respond: Includes all of the features of Watch Tower in addition to a security assessment and Cadence meetings, which are on-demand. Provides the features of Watch Tower Pro in addition to 24x7x365 monitoring, triage, and response.

Vigilance Respond Pro: Includes all of the features of the above options, including a security assessment and quarterly cadence meeting as well as a complete digital forensic investigation and malware analysis.

Reviews from Real Users

Jeff D. who is an Operations Manager at Proton Dealership IT, tells us that "The detection rate for Sentinel One has been excellent and we have been able to resolve many potential threats with zero client impact. The ability to deploy via our RMM allows us to quickly secure new clients and provides peace of mind."

"The most valuable feature varies from client to client but having absolute clarity of what happened and the autonomous actions of SentinelOne are what most people find the most assuring." relates Rae J., Director IR and MDR at a tech services company.

SentinelOne Singularity Complete was previously known as Sentinel Labs, SentinelOne Singularity.

SentinelOne Singularity Complete is the #2 ranked solution in endpoint security software, top Anti-Malware Tools, EDR tools, and XDR Security products. PeerSpot users give SentinelOne Singularity Complete an average rating of 8.6 out of 10. SentinelOne Singularity Complete is most commonly compared to Microsoft Defender for Endpoint: SentinelOne Singularity Complete vs Microsoft Defender for Endpoint. SentinelOne Singularity Complete is popular among the large enterprise segment, accounting for 47% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.