SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Anastasiya S.

Mid-Market (51-1000 emp.)

10/24/2026

"Good endpoint protection for everyday use"

4/5

What do you like best about SentinelOne Singularity Endpoint?

What I liked most was being able to check what happened when SentinelOne detected or blocked something on my machine. As a QA engineer, I was often testing different applications and running scripts, so occasionally an alert would come up because of something I was working on. It was helpful to be able to look into it and understand what caused it. I also found the interface fairly easy to use once I got familiar with it. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The main downside for me was that some alerts were not very easy to understand at first. Since I’m not a security specialist, sometimes I had to spend extra time figuring out why something had been detected and whether it was actually a problem or just related to the testing I was doing. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

It helped keep the work machine protected and made it easier to understand when something unusual happened. In QA I was constantly testing applications and running different scripts, so occasionally something would get flagged. Being able to check what caused it was useful and saved some time when troubleshooting. Review collected by and hosted on G2.com.

Goodness Caleb I.

Information Security Engineer

Mid-Market (51-1000 emp.)

10/23/2026

"Powerful Endpoint Protection with Smart Automation and Deep Investigation Visibility"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like most about SentinelOne Singularity Endpoint is the combination of strong endpoint protection and automation. It does not just flag suspicious activity and leave the analyst to figure everything out. It can investigate behavior, connect related activity, and respond quickly.

I also like the visibility it provides during investigations. Being able to understand the sequence of processes and events around an alert makes it much easier to determine what actually happened.

For me, the biggest advantage is that it reduces repetitive work for security teams while still giving analysts the control and visibility they need when a deeper investigation is required. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The main thing I would improve is the overall user experience. SentinelOne is very powerful, but some parts of the console can feel more complicated than they need to be, especially when you are trying to quickly investigate an incident or find a specific piece of information.

I would also like more flexibility around dashboards and reporting. The data is there, but turning it into exactly the view you want can sometimes take more effort than expected.

Overall, I think the product is technically strong, but the interface and day-to-day workflows could be made more intuitive. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity Endpoint helps address the challenge of detecting and responding to endpoint threats before they cause serious damage. It gives me better visibility into suspicious activity across devices and reduces the time spent manually investigating alerts. The automated response capabilities are particularly useful because they help contain threats quickly and reduce the risk of them spreading across the environment.

Another major benefit is having related events connected during investigations, which makes it easier to understand how an attack happened instead of looking at individual alerts in isolation. Overall, it helps improve response times, reduce manual workload, and allows the security team to focus more on proactive threat hunting and higher-priority incidents. Review collected by and hosted on G2.com.

Sakshi D.

Infosec Associate

Mid-Market (51-1000 emp.)

10/22/2026

"Powerful Offline Protection, but False Positives Add Friction"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

I like the 1-click ransomware rollback because it restores compromised, encrypted files in minutes without a full device re-image, cutting recovery time and downtime. I also value the local AI processing, which provides autonomous, uninterrupted protection with zero latency—even when devices are disconnected from the network—and protects against fileless and zero-day threats. Initial setup is straightforward, with a lightweight, single-agent installation through MDM tools and immediate protection out of the box. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I get frequent false positives on benign custom scripts and internal software, so I have to keep managing exclusions. The management console has a steep learning curve, and agent upgrades across complex, mixed-OS fleets can occasionally cause friction. I also have to start in Detect-Only mode to baseline normal behavior and tune exclusions. AI-guided exclusion suggestions, better sandbox pre-testing for custom internal tools, and creating an exclusion in one click from alert details would make this easier. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

I use SentinelOne Singularity Endpoint to reduce alert fatigue by correlating events into context threads and cutting manual triage. Its local AI protects against fileless and zero-day threats even when devices are offline, and one-click ransomware rollback restores encrypted files in minutes without reimaging, reducing recovery time and downtime. Review collected by and hosted on G2.com.

Bornwell P.

Distribution Field Support Operations/Utility

Small-Business (50 or fewer emp.)

10/20/2026

"Powerful Threat Detection and Rollback, with Upfront Tuning"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

I like how smoothly SentinelOne Singularity Endpoint handles complex threat detection without bogging down everyday operations. Storyline connects related process events into a clear timeline, saving me hours of forensic guesswork and helping me see an event’s root cause and progression. Its behavioral AI analyzes processes in real time and catches novel or fileless threats without constant manual updates or slowing down system resources. I also value being able to isolate a compromised machine and roll back files to a clean state with one click, which makes incidents quicker and less stressful to fix. It cuts down on manual triage and friction, integrates smoothly with the broader security stack, and the initial agent deployment was straightforward and efficient. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I had to spend time tuning policies, custom rules, and exclusions at the start, and I saw some early false positives, especially in development or heavy testing environments. During deep behavioral scans or intensive remediation, it can also use more system resources than I expected on older endpoints or heavily loaded servers. The dashboard works well for high-level overviews, but customizable compliance and forensic reports can feel rigid and require extra manual formatting. Review collected by and hosted on G2.com.

ghazi m.

Small-Business (50 or fewer emp.)

10/20/2026

"Real-Time Protection, with Room to Improve Setup and Usability"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

I like SentinelOne Singularity Endpoint’s real-time threat detection and automated protection. It helps protect my devices from cyber threats, detect suspicious activity, and prevent malware and ransomware attacks. I like that it improves security while reducing manual work, and that the user-friendly interface helps me organize responses to cyber threats quickly and reduce security risks. I also appreciate the centralized management and detailed security reports, which make it easier for me to monitor devices, investigate threats, and manage endpoint security efficiently. The initial setup was easy and relatively straightforward, although configuring it and integrating existing security tools took some extra time. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I think the interface could be more intuitive, and false positives could be reduced. The setup and configuration process could be simpler for new users, with clearer setup guides and more tutorials. I’d also like more customization options. Some configuration and integration with existing security tools took additional time. Review collected by and hosted on G2.com.

Fanindra D.

Jr SOC Analyst

Mid-Market (51-1000 emp.)

11/3/2026

"Peace of Mind with Real-Time Threat Detection and Effortless Endpoint Management"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I really appreciate the strong real-time threat detection capabilities, which provide peace of mind. The AI-driven automation is incredibly efficient at blocking threats autonomously. Additionally, the platform is very easy to manage across all endpoints, making security operations much smoother. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Sometimes the initial setup and fine-tuning of policies can feel a bit complex and time-consuming. Also, during deep system scans, there can be a noticeable impact on system resources, which may slightly slow down older machines. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne addresses the issue of delayed threat detection by delivering real-time, autonomous protection, so threats are neutralized before they can cause widespread damage. Its automated remediation capabilities have significantly reduced the manual workload for our IT team. It has also helped us consolidate our security stack into a single agent, which gives us better visibility across all endpoints and ultimately saves us time and resources. Review collected by and hosted on G2.com.

Dr. Jagannath S.

Group CISO & DPO

Manufacturing

Enterprise (> 1000 emp.)

Originally submitted 4/29/2026

"Powerful AI Threat Detection with Fast, Autonomous Endpoint Response"

5/5

What do you like best about SentinelOne Singularity Endpoint?

AI-driven threat detection that effectively identifies ransomware, malware, fileless attacks, and suspicious behaviors in real time.

Autonomous response capabilities, including device isolation, remediation, and rollback for ransomware recovery, which significantly reduce manual effort.

User-friendly management console with centralized visibility across endpoints, making investigations and policy management straightforward.

Lightweight agent performance compared to many traditional endpoint tools, with minimal impact on end-user systems.

Strong visibility and forensic insights, helping security teams investigate incidents faster and improve overall security posture. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

SentinelOne Singularity Endpoint can be complex to learn initially, with a UI that isn’t always intuitive. It may require significant tuning to reduce false positives and optimize performance, and some users report occasional system slowdowns or legitimate processes being blocked. While powerful, it demands skilled management to get the best results Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

Advanced cyber threats (ransomware, malware, fileless attacks)

It uses AI and behavioral detection to identify and stop sophisticated attacks in real time, even previously unknown threats.

Benefit: Significantly reduces risk of breaches and improves overall endpoint protection.

Slow and manual incident response

Traditional security tools require manual investigation and remediation. SentinelOne automates detection, response, and even rollback.

Benefit: Faster containment and recovery, with reduced Mean Time to Respond (MTTR) and less dependency on manual SOC effort.

Lack of visibility across endpoints

Many organizations struggle with fragmented tools and limited insight into endpoint activity. SentinelOne provides centralized, real-time visibility across devices.

Benefit: Improved threat hunting, faster investigations, and better decision-making. Review collected by and hosted on G2.com.

Adaku O.

Cybersecurity Analyst

Small-Business (50 or fewer emp.)

Originally submitted 7/22/2026

"Real-Time Endpoint Visibility with AI-Powered Protection"

5/5

What do you like best about SentinelOne Singularity Endpoint?

What I find most helpful about SentinelOne Singularity Endpoint is its AI-driven endpoint protection, which leverages machine learning and behavioral analysis to detect and respond to threats in real time. It provides excellent visibility across endpoints, making it easy to investigate incidents and understand what's happening throughout the environment.

The user experience is easy to navigate and intuitive, and onboarding new endpoints is seamless. It also integrates well with other security tools to enable a centralized monitoring and streamlined workflow for IR. All of these ensure high performance. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

One downside I’ve noticed is the occasional false positives. They create a lot of noise in the environment, which ends up wasting time. Even when the same alert has been manually mitigated and flagged, it still repeats. Review collected by and hosted on G2.com.

Illia T.

Security Architect

Small-Business (50 or fewer emp.)

11/5/2026

"User-Friendly UI with a Smooth Path from EPP to SOC AI and CSPM"

5/5

What do you like best about SentinelOne Singularity Endpoint?

You can start with EPP and slowly progress from the basics to more advanced features such as SOC AI and CSPM. The UI is quite user friendly, it is hard to get lost, comparing with some competitors Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

No real disadvantages, more like a specificity of the EPP/EDR solutions - some clients don't understand the difference between EDRs and typical antiviruses and expecting to get a signature based scanning Review collected by and hosted on G2.com.

Ashim C.

Technical Support Engineer

Small-Business (50 or fewer emp.)

10/29/2026

"Easy-to-Use GUI with Efficient Tools and Flexible Policy Customization"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The GUI is easy to use, and the tools are efficient. I also like the flexibility to customize policies, including allowing or blocking specific file types and other categories. Another plus is that permissions can be divided easily based on hierarchy. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Sometimes support is delayed, and for P1 issues we sometimes need help ASAP. If an AI agent, chat agent, or KB article could at least help in the meantime, that would make a difference. Even a single email with clear communication on how much time it will take, along with an ETA, would be helpful. Review collected by and hosted on G2.com.