We are using SentinelOne within our company in servers and endpoints and we have deployed it for some of our clients.
Président at ARS Solutions
Reliable, scalable, but priced high
Pros and Cons
- "The most valuable feature of SentinelOne is the EDR functionality. We are protected against threats, such as ransomware."
- "The most valuable feature of SentinelOne is the EDR functionality; we are protected against threats, such as ransomware."
- "SentinelOne could improve by reducing the price."
- "SentinelOne could improve by reducing the price."
What is our primary use case?
What is most valuable?
The most valuable feature of SentinelOne is the EDR functionality. We are protected against threats, such as ransomware.
What needs improvement?
SentinelOne could improve by reducing the price.
For how long have I used the solution?
I have been using SentinelOne for approximately one year.
Buyer's Guide
SentinelOne Singularity Complete
March 2026
Learn what your peers think about SentinelOne Singularity Complete. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,286 professionals have used our research since 2012.
What do I think about the stability of the solution?
The stability of SentinelOne was fine.
What do I think about the scalability of the solution?
SentinelOne is scalable.
We have approximately 300 users using this solution.
How was the initial setup?
The initial setup of SentinelOne was straightforward.
What's my experience with pricing, setup cost, and licensing?
The price of SentinelOne is on the higher side compared to other solutions, such as Symantec.
What other advice do I have?
We have one person who maintains the solution.
I rate SentinelOne a seven out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Cybersecurity Analyst at a tech services company with 11-50 employees
Great test automation and improvement of use cases
Pros and Cons
- "SentinelOne has helped us to improve our security by fine-tuning our current use cases and creating new ones."
- "SentinelOne has helped us to improve our security by fine-tuning our current use cases and creating new ones."
- "SentinelOne's performance and the accuracy of its incident filtering could be improved."
- "SentinelOne's performance and the accuracy of its incident filtering could be improved."
What is our primary use case?
I use SentinelOne for security.
How has it helped my organization?
We function as an internal red team and do numerous tests of attack simulations. SentinelOne has helped us to improve our security by fine-tuning our current use cases and creating new ones.
What is most valuable?
SentinelOne's best features are test automation, playbooks, incident response, use-case improvement, and compliance with MITRE ATT&CK techniques.
What needs improvement?
SentinelOne's performance and the accuracy of its incident filtering could be improved.
For how long have I used the solution?
I've been using SentinelOne for five years.
What do I think about the stability of the solution?
SentinelOne is stable.
What do I think about the scalability of the solution?
SentinelOne is scalable.
How was the initial setup?
The initial setup was straightforward because we created an implementation plan and did some diagnostics before starting.
What about the implementation team?
We used a third-party team.
What's my experience with pricing, setup cost, and licensing?
SentinelOne's pricing could be lower.
What other advice do I have?
I would give SentinelOne a rating of eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Buyer's Guide
SentinelOne Singularity Complete
March 2026
Learn what your peers think about SentinelOne Singularity Complete. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
885,286 professionals have used our research since 2012.
Service Assurance Executive at Infoprive
Excellent auto-rollback feature
Pros and Cons
- "SentinelOne's auto-rollback feature is the most valuable."
- "SentinelOne is stable and reliable."
- "SentinelOne's phishing feature could be improved."
- "SentinelOne's phishing feature could be improved."
What is our primary use case?
I use SentinelOne to protect against ransomware attacks, validate incoming emails, and ensure websites don't have any malicious coding.
What is most valuable?
SentinelOne's auto-rollback feature is the most valuable.
What needs improvement?
SentinelOne's phishing feature could be improved.
For how long have I used the solution?
I've been using SentinelOne for around five years.
What do I think about the stability of the solution?
SentinelOne is stable and reliable.
What do I think about the scalability of the solution?
SentinelOne is easy to scale.
How are customer service and support?
SentinelOne's technical support is helpful and competent.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was straightforward and completed within a day because we had run a POC with them to understand the environment and had all the information we needed. I would rate the setup process 3.5 out of five.
What about the implementation team?
We did the implementation in-house with the support of SentinelOne engineers.
What other advice do I have?
I would give SentinelOne a rating of eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Director Information Technology at a wellness & fitness company with 201-500 employees
Effective detection capabilities, scalable, and reliable
Pros and Cons
- "The most valuable features of SentinelOne are the endpoint detection of threats, and it does not only rely on signatures for detection."
- "The most valuable features of SentinelOne are the endpoint detection of threats, and it does not only rely on signatures for detection."
- "SentinelOne could improve by creating an autopilot or automated way to roll out the solution more efficiently which would be helpful."
- "SentinelOne could improve by creating an autopilot or automated way to roll out the solution more efficiently which would be helpful."
What is our primary use case?
We are using SentinelOne for an endpoint view of the corporate network.
What is most valuable?
The most valuable features of SentinelOne are the endpoint detection of threats, and it does not only rely on signatures for detection.
What needs improvement?
SentinelOne could improve by creating an autopilot or automated way to roll out the solution more efficiently which would be helpful.
For how long have I used the solution?
I have been using SentinelOne for approximately one year.
What do I think about the stability of the solution?
SentinelOne is stable.
I rate the stability of SentinelOne a five out of five.
What do I think about the scalability of the solution?
The scalability of SentinelOne is not a problem. These solutions can easily host up to 10,000 endpoints if not more, and we have 500. We do not have an immediate need to scale, but it is not an issue. As the company grows, the company will increase the usage of the solution.
How are customer service and support?
I am satisfied with the support from SentinelOne.
How was the initial setup?
SentinelOne is not too difficult to set up. The full deployment took a couple of months. The lengthy installation was caused by the fact that many people are remote working and we had 500 systems to install the solution on.
What about the implementation team?
We did our own deployment of SentinelOne. We used three to five people for the deployment.
What other advice do I have?
I rate SentinelOne an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Owner at FirewallHire.com
Quick and easy to deploy with good performance
Pros and Cons
- "It's quite scalable."
- "The solution works well in general."
- "It is an expensive product."
- "Every site has its own key. I'm not sure how I can implement the key for the setup package, therefore with every installation I need to do it manually and put on the site keys."
What is our primary use case?
We primarily use the solution for endpoint detection.
What is most valuable?
The solution works well in general.
It's a small size and offers an easy deployment. It's very quick to deploy.
The solution is stable.
It's quite scalable.
What needs improvement?
Every site has its own key. I'm not sure how I can implement the key for the setup package. Therefore, with every installation, I need to do it manually and put on the site keys.
It is an expensive product. They could work on lowering the price a bit.
For how long have I used the solution?
I've used the solution for one year.
What do I think about the stability of the solution?
It is stable and reliable. There are no bugs or glitches. It doesn't crash or freeze.
What do I think about the scalability of the solution?
The solution is quite scalable.
How was the initial setup?
The initial setup and deployment are easy. I can get it up and running in five minutes.
What's my experience with pricing, setup cost, and licensing?
The cost is a bit high. It's around $8 per client per month.
What other advice do I have?
We are partners. We are using the latest version of the product.
I'd recommend the solution to others. We really like it in general.
I'd rate the solution a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Account Manager - Security Specialist at a computer software company with 1,001-5,000 employees
A flexible product that meets the requirements of most of the clients and comes with many good features
Pros and Cons
- "Most of the features are valuable. As a system integrator, agent deployment is valuable. It also fits the requirements of most of the clients."
- "It is a good product, and it fits the requirements of most of the clients."
- "They can improve the administrative interface. They can make it more user-friendly."
- "They can improve the administrative interface. They can make it more user-friendly."
What is our primary use case?
We are a system integrator. We provide this solution to the end-users.
What is most valuable?
Most of the features are valuable. As a system integrator, agent deployment is valuable. It also fits the requirements of most of the clients.
What needs improvement?
They can improve the administrative interface. They can make it more user-friendly.
Its price can be lower.
For how long have I used the solution?
I have been using this solution for three years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
It is scalable.
How was the initial setup?
Its setup is of medium complexity. It is not complex, and it is also not straightforward.
What's my experience with pricing, setup cost, and licensing?
Its price can be lower because I'm seeing competition from another vendor who beats it on commercials.
What other advice do I have?
I would advise others to go for it. It is a good product, and it fits the requirements of most of the clients. It is very flexible.
I would rate it an eight out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer.
VP at a tech services company with 11-50 employees
Easy to set up and transparently offers effective protection
Pros and Cons
- "The most valuable feature is that it just unintrusively works in the background to carry out the protection."
- "The most valuable feature is that it just unintrusively works in the background to carry out the protection."
- "Periodically we have an application that does not work correctly when SentinelOne is installed, yet performs as expected when SentinelOne is removed."
- "Periodically we have an application that does not work correctly when SentinelOne is installed, yet performs as expected when SentinelOne is removed."
What is our primary use case?
We have SentinelOne installed on all of our workstations and servers. It is set up with the maximum protection except that Active is in Alert Mode, and everything else is blocked.
What is most valuable?
The most valuable feature is that it just unintrusively works in the background to carry out the protection. You don't have to babysit it. Instead, it will alert if it sees something, you deal with it and carry on from there.
What needs improvement?
Periodically we have an application that does not work correctly when SentinelOne is installed, yet performs as expected when SentinelOne is removed. SentinelOne gives no clue as to the problem, so to diagnose what is happening can be difficult. To make it worse, the behavior is inconsistent. Two people in the office might have the application working correctly, but a third person using the same program will have a problem.
Nothing is displayed by the agent that is running on the workstations, but it would be helpful to have a mode available where we can see feedback as to what it is doing. We wouldn't want it running all the time because there would be more overhead, but it could be helpful for debugging or diagnosing problems.
For how long have I used the solution?
I have been using SentinelOne for between six months and a year.
What do I think about the stability of the solution?
In terms of stability, it has been good so far.
What do I think about the scalability of the solution?
It appears to be scalable.
How was the initial setup?
The initial setup is very easy.
What's my experience with pricing, setup cost, and licensing?
Our licensing fees are about $5 USD per endpoint, per month.
What other advice do I have?
Overall, this is a good product and I recommend it. That said, there are always ways to make things better.
I would rate this solution a nine out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Engineer II, Enterprise Client Support at a media company with 10,001+ employees
Visually appealing and customizable console, as well as a powerful API
Pros and Cons
- "We love the API. We use it to generate robust reporting, and we also developed tools to perform agent actions remotely without needing to provide all IT staff with console access."
- "SentinelOne has provided amazing security; we were getting new cryptolocker variant infections several times per month and the month following our SentinelOne rollout, the numbers dropped to zero, and we have not had a single infection since."
- "It would be nice if the console stored data daily, so that you could look at a timeline of events on a machine over a period of time, and currently this is not possible."
- "The agent update schedule is a little sporadic, and the updates are frequent."
What is our primary use case?
We use SentinelOne to secure our entire environment, including all user endpoints and servers. We are also currently testing the Deep Visibility addon. We were using a definition-based AV prior to SentinelOne, and we were getting daily/weekly infections of a variety of malware. We are a mix of PC, Mac, and Linux. We have on-premises machines and servers, as well as cloud VMs that we were wanting to protect. We wanted to purchase a Next Generation AV client that would be algorithm-based instead of definition file-based.
How has it helped my organization?
SentinelOne has provided amazing security. We were getting new cryptolocker variant infections several times per month and the month following our SentinelOne rollout, the numbers dropped to zero. We have not had a single infection since.
The new console is not only visually appealing and simple to use, but it allows you to customize and apply labels to different areas. I don't have a good gauge on how much money SentinelOne has saved us, but we only get a handful of security alerts in our console each day. It has freed up our security staff to perform other tasks.
What is most valuable?
We love the API. We use it to generate robust reporting, and we also developed tools to perform agent actions remotely without needing to provide all IT staff with console access.
The agent will now also report the location in AD. This allows you to create dynamic collections of machines in the cloud console based on their location in local AD. You can replicate your AD OU structure into the console and run deployments and reporting based on OU. It's a very powerful feature and something that was missing in our last product.
What needs improvement?
The agent update schedule is a little sporadic, and the updates are frequent. You are definitely going to want to have a good management solution in place, such as SCCM, Intune, or Jamf in order to maintain the environment properly.
There is agent data, such as last known IP address, that is not stored historically. It would be nice if the console stored data daily, so that you could look at a timeline of events on a machine over a period of time, and currently this is not possible. You can see a snapshot of the data at the moment, but once it changes whatever was there previously is not stored.
For how long have I used the solution?
I have been using SentinelOne for four years.
What do I think about the stability of the solution?
The agent is very stable, especially the later versions of the product. Agent never crashes and consumes minimal system resources. New agent versions are constantly released (which can be slightly difficult to manage if you don't have a good endpoint third party management solution like SCCM\JAMF). Release over release both stability and features have improved and been more fleshed out.
What do I think about the scalability of the solution?
It is very scalable and easy to deploy over any of the standard management solutions.
How are customer service and technical support?
Customer service and our TAM are both very good. They are responsive and have never been unable to answer a question we asked.
Which solution did I use previously and why did I switch?
We switched because or old solution flat out was not picking up infections. It was really almost rather useless.
How was the initial setup?
The initial setup is straightforward. We do not have any on-premises infrastructure. Rather, we are using sentinel one in full-cloud mode. It was really just a matter of deploying the agent to the endpoints.
What about the implementation team?
Our in-house team handled the deployment.
What was our ROI?
ROI is kind of hard to quantify but we definitely do feel like we get our money worth.
What's my experience with pricing, setup cost, and licensing?
The costs are really rather minimal for what you receive with the product. No real advisement here. The larger count you have, the deeper discount you will receive in your contract.
Which other solutions did I evaluate?
We looked at Carbon Black. SentinelOne was more economical, and the feature set was comparable so we ultimately went with it.
What other advice do I have?
Be ready to dedicate a good amount of time to learn the API. To really get the most from the product you need to tap the REST API.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free SentinelOne Singularity Complete Report and get advice and tips from experienced pros
sharing their opinions.
Updated: March 2026
Product Categories
Endpoint Detection and Response (EDR) Endpoint Protection Platform (EPP) Anti-Malware Tools Extended Detection and Response (XDR) AI ObservabilityPopular Comparisons
CrowdStrike Falcon
Microsoft Defender for Endpoint
Cortex XDR by Palo Alto Networks
IBM Security QRadar
Fortinet FortiEDR
HP Wolf Security
Huntress Managed EDR
Elastic Security
Microsoft Defender XDR
Trellix Endpoint Security Platform
WatchGuard Firebox
TrendAI Vision One
Buyer's Guide
Download our free SentinelOne Singularity Complete Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What is the biggest difference between Carbon Black CB Defense, CrowdStrike, and SentinelOne?
- Which is better - SentinelOne or Darktrace?
- What do you recommend to choose when replacing Symantec EDR: SentinelOne or CrowdStirke Falcon?
- Cortex XDR by Palo Alto vs. Sentinel One
- Which solution do you prefer: CrowdStrike Falcon or SentinelOne Singularity Complete?
- Does SentinelOne have a Virtual Patching functionality?
- What is the biggest difference between EPP and EDR products?
- What is the difference between EDR and traditional antivirus?
- What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
- Which is the best EDR for a logistics company with 500-1000 employees?


















