SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

David M.

Advisory Committee on Cybersecurity for Executive Education

Mid-Market (51-1000 emp.)

8/10/2023

"Highly Recommend SentinelOne Products"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

The S1 products do not impact the performance of our endpoints, and we have seen very few false positives. While we don't need to contact support often, our experiences with support have always been fast and helpful. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

We've been using the product for almost two years, and have very little negative to say about it. The only thing I wish they did better is the auto-update feature of the agents. That process is more involved than it needs to be. Review collected by and hosted on G2.com.

Corey M.

Mid-Market (51-1000 emp.)

8/23/2023

"SentinelOne is the best anti-malware out there"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

The ease of use is what I like a lot. The platform itself gives very little false positive incident alerts and I have full confidence that it's protecting the endpoints that we have it installed on. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The network firewall took a while to set up and doesn't work how I would expect it to. We blocked all network traffic when a rule was deleted, there was no warning that it was going to happen. Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

7/31/2023

"SentinelOne a solid Endpoint Protection Platform"

4/5

What do you like best about SentinelOne Singularity Endpoint?

SentinelOne has become one of the top players in the EDR/XDR space. Visibility/hunting is really nice, allowing you to dig deeper into a ton of information collected by the agent like processes, network traffic, DNS, URLs, etc. Ranger is a must-have that will increase network visibility. Overall, S1 does a great job at stopping threats and is easy to manage. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The agent can consume a lot of resources, especially CPU. Retention for Visibility is only 30 days. Upgrade policy can be improved, Auto Upgrade still in beta. Issues when upgrading agents to a new version, duplicated entries in the console. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

The business wanted to unify EPP into one solution that allows for splitting the bill, and assigning a license to each brand. Also having a robust solution that does not use signatures, has machine learning and behavioral analysis, process monitoring, containment, and many other features like SentinelOne. Review collected by and hosted on G2.com.

Verified User in Automotive

Mid-Market (51-1000 emp.)

7/26/2023

"SentinelOne...SentimentOne"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The best feature about S1 is the immediate threat detection and response. The moment a threat is detected you are informed promptly and can start analyzing what happened. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The portal can feel a little overwhelming at times to navigate as an end user. If you aren't in it every day you can spend quite some time trying to figure out where features are at that you need. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

The main problems S1 is solving is ensuring that our end users' PCs are protected and no malicious software is being run. If a user downloads a malicious file on their computer, then S1 is there to remove it and alert administrators about it. Then we can act quickly and investigate what happened. Furthermore, we can educate employees and mitigate threats this way. Having SentinelOne as our Endpoint Detection also helps check off boxes since it is one of the best products in the business. Review collected by and hosted on G2.com.

Verified User in Non-Profit Organization Management

Enterprise (> 1000 emp.)

7/26/2023

"Enterprise-grade EDR with tools to make Incident Response and Recovery a breeze!"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Its ability to present detailed relationships between security events on a system greatly reduces response times during attacks. The platform shows a clear chain between all aspects of what an attack has touched on the system which reduces what can be an hours-long, grueling process of sifting through logs to a few clicks. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Navigation to details outside of what the system identifies as an attack can still be very difficult to achieve. Any tasks that need to be manually traced and researched can be buried in the UI, leaving you in a position of trust that S1 has identified everything you might care about as an attack ahead of time. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

It is allowing us to move past simple NGAV and into a more security-specific platform to detect and respond to threats. Client logs were previously a difficult thing to analyze and manage and S1 has made that much easier and provided a clear pathway to integrate with the rest of our Security Operations Center capabilities. Review collected by and hosted on G2.com.

Guru k.

Security Analyst

Small-Business (50 or fewer emp.)

9/6/2023

"Sentinel One Was best Product!!!"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I like its response to attacks and remediation methods against malware and also it gives overall visibility of IT Infrastructure with a beautiful user interface. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

It requires smaller improvements and also there are some rooms for improvement of the product has to be done and it is also quite difficult to understand for beginners. Review collected by and hosted on G2.com.

Verified User in Primary/Secondary Education

Mid-Market (51-1000 emp.)

8/9/2023

"Great product!"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Nothing seems to escape SentinelOne! I have tested so many different malicious files and techniques for pivoting throughout a network. Mimikatz is definitely on the list of blocked executables also. We also use distributed administration to provide access for clients and we can retain an account to assist which is very helpful. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I can't think of many things I don't like about SentinelOne. I think on top of my list is that I hope they do not sell the company to a larger company. If I were to point out one flaw it would be that even when whitelisting certain applications, we still receive false positives. Review collected by and hosted on G2.com.

vivek m.

Enterprise (> 1000 emp.)

7/26/2023

"Best EDR/XDR solution in the market with user friendly console ."

5/5

What do you like best about SentinelOne Singularity Endpoint?

best thing is the user compatibility and platform access to all modules . agent installation , incident management , application external devcie control . As per other edr solutions this is best becasue of the user friendly console . Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

see it is very ahrd to identify but they need to improve them in ranger module. We are able to identify through IP but if Mac can also be included then it will be better . Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Mid-Market (51-1000 emp.)

7/26/2023

"SentinelOne EDR"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The admin controls for SentinelOne make it easy to keep our organization safe and allow for lots of customization and control by groups and different high-risk users. I like the visibility into incidents and it's easy to identify what is an actual threat and what is a false-positive. Updating agents is easy and generating reports is also super easy. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Not having an option for automatic updates is a slight disadvantage and not being able to schedule recurring full disk scans. I also notice that there are a lot of false positives that come up but I would rather have that then the latter. Review collected by and hosted on G2.com.