SentinelOne Singularity Endpoint Features

Performance (5)

Issue Tracking: Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Detection Rate: The rate at which scans accurately detect all vulnerabilities associated with the target.
False Positives: The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans: Runs pre-scripted vulnerability scans without requiring manual work.
Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software

Network (4)

Compliance Testing: Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning: Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Vulnerability Scanning: Discover patch statuses and vulnerabilities

Application (1)

Administration (17)

Compliance: Monitors assets and enforces security policies to audit assets and infrastructure security.
Web Control: Filters websites and manages whitelisting to enforce compliance protocols for users accessing the internet within the network.
Application Control: Blocks endpoint users from accessing restricted applications.
Asset Management: Keeps records of each network asset and its activity. Discovers new assets accessing the network.
Device Control: Manages user network accessibility on laptops and mobile devices.
Patch Management: Install software updates and bug fixes remotely
Compliance Management: Track and manage adherence to policies for any service, product, process, or supplier
Remote Monitoring & Management: Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Workflow Management: Create, design and manage workflows for repetitive tasks
Policy Management: Create, manage, and track policies and procedures within an organization
Assessment Management: Creation, administration, and evaluation of assessments or tests
Endpoint Management: Track status, assign actions, and control access to systems for devices within the organization
User Management: Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Audit Management: Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
PCI Compliance: Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
Web Threat Management
Device Management: Maintenance and upkeep of physical and/or virtual devices

Functionality (4)

System Isolation: Cuts off network connection or temporarily inactivate applications until incidents are remedied.
Firewall: Protects endpoint devices from a variety of attacks and malware threats.
Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices.
Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software

Analysis (6)

Automated Remediation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Incident Reports: Produces reports detailing trends and vulnerabilities related to their network and infrastructure.
Behavioral Analysis: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Risk Analysis: Analyze potential risks across the organization
Customizable Reports: Alter the layout and content of reports
Summary Reports

Incident Management (3)

Detection & Response (5)

Response Automation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Threat Hunting: Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Rule-Based Detection: Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance.
Real-Time Detection: Constantly monitors system to detect anomalies in real time.
Threat Response: Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Management (4)

Extensibility: Allows for customized support for hybrid environments
Workflow Automation: Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Unified Visibility: Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
API: Application programming interface that allows for integration with other systems/databases

Analytics (3)

Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
Artificial Intelligence & Machine Learning: Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis.
Data Collection: Collects information from multiple sources to cross reference and build contextual to correlate intelligence.

Monitoring (6)

Investigate: Investigate identity threats with contextual user information.
Monitoring: Monitor & detect malicous identity and privileges activity
Misconfigurations: Identify identity-related misconfigurations.
Integrate: Offers integrations to identity store providers.
Visability: Provide full coverage of identity estate with granular detail.
Continuous Monitoring: Conduct tracking and assessment of application and device behavior without breaks or interruptions

Remediation (2)

Generative AI (5)

AI Text Generation: Allows users to generate text based on a text prompt.
AI Text Summarization: Condenses long documents or text into a brief summary.
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
AI Text Summarization: Condenses long documents or text into a brief summary.
AI Text Summarization: Condenses long documents or text into a brief summary.

Agentic AI - Vulnerability Scanner (2)

Agentic AI - Extended Detection and Response (XDR) Platforms (3)

Services - Extended Detection and Response (XDR) (1)

Services - Endpoint Detection & Response (EDR) (1)

Additional Functionality (178)

SSL Security: Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant: Compliant with HIPAA, which sets standards for sensitive patient data protection
API: Application programming interface that allows for integration with other systems/databases
Threat Response: Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection: Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling: Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations: Set up connections to third-party platforms to improve business processes
Security Auditing: Systematic evaluation of the security of a company's overall security system and situation
Application Security: Identify and respond to security threats to developed applications
Network Security: Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting: Active reporting of data and metrics
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data
Authentication: Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus: Prevents, detects and removes malware
Secure Data Storage: Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Audit Trail: A record of all activities within the system, including user access, changes made, etc.
Access Controls/Permissions: Define levels of authorization for access to specific files or systems
Data Visualization: Graphical representation of data
Alerts/Escalation: System alerts about the need to escalate an issue or request
Data Security: Protect sensitive data for digital privacy
Runtime Container Security: Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.
Asset Discovery
Threat Intelligence: Information to prevent, understand and identify cyber threats
Vulnerability Protection: Safeguards to protect network vulnerabilities
Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Vulnerability/Threat Prioritization: Classify levels of threat and organize actions based on priorities
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
SQL Injections: Protect against code driven website security attack techniques
Real-Time Analytics: Analyze and gain insights into data in real-time
Threat Protection: Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats
Web-Application Security: Identify and respond to security threats to web applications
Password Protection: Protect passwords from security threats
Vulnerability Assessment: The process of identifying, quantifying, and prioritizing the vulnerabilities in a system.
Real-Time Monitoring: Active monitoring of systems, applications, or networks
API: Application programming interface that allows for integration with other systems/databases
Threat Protection: Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats
Real-time Alerts: Receive notification of issues as soon as they occur
Data Security: Protect sensitive data for digital privacy
Incident Management: Manage and track all disruptions and incidents
Remote Update/Installation: Deploy updates or install new software remotely
Automatic Scans: Setup recurring or automatic scans
Vulnerability/Threat Prioritization: Classify levels of threat and organize actions based on priorities
Real-Time Analytics: Analyze and gain insights into data in real-time
Endpoint Protection: Protect users working remotely and provide secure environments for personal devices to access company programs
Security Auditing: Systematic evaluation of the security of a company's overall security system and situation
Virus Definition Update
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software
Third-Party Integrations: Set up connections to third-party platforms to improve business processes
Access Controls/Permissions: Define levels of authorization for access to specific files or systems
Phishing Protection: Identify phishing emails
AI/Machine Learning: Software program that continuously adjusts its behavior based on observed data
Reporting & Statistics: Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Network Security: Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Authentication: Verify the identity of users/devices to enable secure access
Threat Response: Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Vulnerability Scanning: Discover patch statuses and vulnerabilities
Backup and Recovery: Create backups and provide methods to recover deleted/lost data
Application Security: Identify and respond to security threats to developed applications
Whitelisting/Blacklisting: Control system access and/or deliverability for applications and email addresses
Server Monitoring: Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
SSL Security: Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant: Compliant with HIPAA, which sets standards for sensitive patient data protection
API: Application programming interface that allows for integration with other systems/databases
Threat Response: Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection: Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling: Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations: Set up connections to third-party platforms to improve business processes
Security Auditing: Systematic evaluation of the security of a company's overall security system and situation
Application Security: Identify and respond to security threats to developed applications
Network Security: Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting: Active reporting of data and metrics
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data
Authentication: Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus: Prevents, detects and removes malware
Secure Data Storage: Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Audit Trail: A record of all activities within the system, including user access, changes made, etc.
Access Controls/Permissions: Define levels of authorization for access to specific files or systems
Data Visualization: Graphical representation of data
Alerts/Escalation: System alerts about the need to escalate an issue or request
Data Security: Protect sensitive data for digital privacy
Real-Time Analytics: Analyze and gain insights into data in real-time
Collaboration Tools: Provides a channel for team members to share media files, communicate, and work together
Secure Login: At least a username and password is required to access the system
AI/Machine Learning: Software program that continuously adjusts its behavior based on observed data
Single Sign On: Allow users to access multiple services after entering their login credentials once
Behavioral Analytics: Track and analyse user behavior within a system or network
Prioritization: Arrange tasks based on the level of priority or urgency
Reporting & Statistics: Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
IOC Verification
Monitoring: Observe and track the demand, usage, progress or quality of a system, product, or user
Two-Factor Authentication: Extra layer of security that requires not only a password and username but also something specific to that user
Server Monitoring: Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Vulnerability Scanning: Discover patch statuses and vulnerabilities
Activity Tracking: Track and document all activities across devices, networks, and other systems
Event Logs: A chronological record of actions or occurrences within a network, software, or process
Risk Assessment: Initiate collection and analysis of known risks
Real-Time Notifications: Notifications that are delivered to users as soon as an event occurs
Real-Time Monitoring: Active monitoring of systems, applications, or networks
Whitelisting/Blacklisting: Control system access and/or deliverability for applications and email addresses
Activity Monitoring: Track and report on everything that happens within the system or network
Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Risk Alerts: Notifying as a warning or reminder of a potential or imminent hazard
Behavior Tracking: Track visitors'/audience's responses across web pages and other optimized content
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
Role-Based Permissions: Set & manage permission levels based on user roles and restrict access to only authorized individuals
Data Analysis Tools: Analyze survey results via statistical testing or crosstabs directly within the software
Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software
Risk Alerts: Notifying as a warning or reminder of a potential or imminent hazard
Access Management: Control and manage access to company resources
Data Classification: Grouping log entries based on similar attributes.
Access Control: Regulate who can view information within the system
Incident Response Checklists: Checklist to confirm the incident and response.
Active Directory Integration: Integrates with Active Directory
Multi-Factor Authentication: Request two or more credentials to prove user's identity before granting access to systems
Search/Filter: Search and filter data across systems to locate required information by entering keywords or certain criteria
Real-time Alerts: Receive notification of issues as soon as they occur
Remediation Management: Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Risk-Based Authentication: Determine the risk profile of a user requesting access before granting access
Configuration Management: Identify component attributes like servers, hardware, software, and manage relationships across all services
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Prioritization: Arrange tasks based on the level of priority or urgency
Deception Management: Deploy realistic decoys that lure away from real assets within a given network
Root Cause Analysis: Identify and analyse the reasons behind accidents
Identity Verification: Validating the identity of an individual or entity through verification of personal information or credentials
Access Certification: Verify user access rights within systems to confirm each user has appropriate and authorized access to resources
Behavioral Analytics: Track and analyse user behavior within a system or network
Mobile Access: Access software remotely via mobile devices
IT Asset Management: Managing inventories and tracking changes to hardware and software configurations
Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data
Data Import/Export: Import and export data to and from software applications
Remediation Management: Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Root Cause Analysis: Identify and analyse the reasons behind accidents
Customization: Create labels for products that contain required information such as colors, sizes, dates, etc.
Workflow Management: Create, design and manage workflows for repetitive tasks
User Management: Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Behavioral Analytics: Track and analyse user behavior within a system or network
Ransomware Protection: Protects systems from ransomware attacks and mitigates attack risks
Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Data Security: Protect sensitive data for digital privacy
Authentication: Verify the identity of users/devices to enable secure access
Firewalls: Monitor and control network/web traffic based on predetermined rules, protecting against unauthorized access and threats
Collaboration Tools: Provides a channel for team members to share media files, communicate, and work together
Endpoint Protection: Protect users working remotely and provide secure environments for personal devices to access company programs
Cloud Application Security: Identify and respond to security threats to cloud applications
Third-Party Integrations: Set up connections to third-party platforms to improve business processes
Access Controls/Permissions: Define levels of authorization for access to specific files or systems
Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Data Analysis Tools: Analyze survey results via statistical testing or crosstabs directly within the software
Risk Management: Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
Network Scanning: Scanning networks to identify security threats
Vulnerability Management: Detect (and block) vulnerabilities and threats in your applications based on vulnerability information
Search/Filter: Search and filter data across systems to locate required information by entering keywords or certain criteria
Generative AI: Use AI to generate content in the form of text, images, videos, etc.
Event Analysis: Investigate security threats and validate malicious activity
Prioritization: Arrange tasks based on the level of priority or urgency
AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Whitelisting/Blacklisting: Control system access and/or deliverability for applications and email addresses
Remediation Management: Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Behavioral Analytics: Track and analyse user behavior within a system or network
Continuous Monitoring: Conduct tracking and assessment of application and device behavior without breaks or interruptions
Root Cause Analysis: Identify and analyse the reasons behind accidents
Endpoint Management: Track status, assign actions, and control access to systems for devices within the organization
Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software