SentinelOne Singularity Endpoint Reviews & Product Details

The automated remediation and 1-click ransomware rollback are unmatched. Having the agent kill malicious processes, isolate the endpoint, and revert encrypted files on its own—even when offline—eliminates hours of manual incident triage and machine reimaging. Storyline also stitches attack events together clearly, making root-cause analysis fast and painless. Review collected by and hosted on G2.com.

Initial onboarding requires disciplined policy tuning, as benign administrative scripts and developer utilities can trigger false positives until exclusions are properly configured. Agent version upgrades across large fleets also require careful scheduling to avoid unexpected reboot prompts. Review collected by and hosted on G2.com.

What I like best about SentinelOne Singularity Endpoint is its behavioral threat detection and automated response. It detects suspicious activity quickly, isolates infected endpoints when needed, and provides a clear investigation timeline that makes it easier to understand and respond to security incidents. The management console is also easy to navigate, which simplifies day to day security operations. Review collected by and hosted on G2.com.

I think the sentinelone singularity endpoint platform is a great security solution, however fine tuning policies and creating exclusions for trusted applications can take some time, especially for larger environment. This can be improved on. Review collected by and hosted on G2.com.

I like SentinelOne Singularity Endpoint’s behavioral threat detection, automated response, and user-friendly console. The Storyline feature makes threat investigation faster and easier. I also appreciate the centralized management console, detailed threat analysis, and easy policy configuration, which make endpoint management and troubleshooting more efficient. It helps me detect and respond to threats quickly, reduces manual investigation time, improves threat visibility, and the initial setup was straightforward. Review collected by and hosted on G2.com.

I sometimes have to investigate false positive alerts. Policy and exclusion management could be more intuitive, and agent troubleshooting could be easier with more detailed tools. Review collected by and hosted on G2.com.

We’ve deployed SentinelOne across multiple MSP clients, and overall, it’s been a solid solution. Easy to deploy and flexible enough to tune policies based on customer needs especially around rule tuning and exclusions.

The license we leverage and provide have full Device Control, Network Control, and Deep Visibility for detailed log analysis. From a performance and detection standpoint, SentinelOne scores well on independent benchmarks like Gartner and MITRE ATT&CK.

We’ve been using it for over 5 years without any major issues. Our clients are satisfied, and our security engineers are fully comfortable working with it. No strong reason so far to look elsewhere. Review collected by and hosted on G2.com.

For now, it has been pretty good. I could not think straight on top of my head what one feature could be added. But for now, the features that SentinelOne Singularity Endpoint offers are pretty great. However, I wish there could be patching that could be happening through the EDR so that we would not need to manage any other separate tool for patching those vulnerabilities since it actively identifies vulnerabilities. Maybe that feature could be helpful. I am not sure whether the single agent can uplift the bulk activity or not. That is one thing I wish I could add in SentinelOne Singularity Endpoint. We need to set the guardrails for the Prompt AI because it actually queries the logs directly for whenever we want to search in the endpoint logs. Whenever we give a prompt to actively look for something, it actively queries directly inside the logs and returns the output directly instead of just giving a suggestion to go this way or do that way. It actively interacts with the application inside itself and provides results directly without showing the backend process. I am not sure about how the guardrails were set, but setting the guardrails for the AI needs to be taken care of. Since it has pretty much direct access to the endpoints and there are agent capabilities through SentinelOne Singularity Endpoint, we have to take care while handling or implementing AI. Review collected by and hosted on G2.com.

SentinelOne Singularity Endpoint is one of the most effective and efficient EDR solutions I've used. It's highly proactive, with excellent real-time threat detection and automated response capabilities. The platform is reliable, easy to use, and provides great visibility into endpoint security. Review collected by and hosted on G2.com.

One area for improvement is the blocklist functionality. Currently, it only supports blocking file hashes, whereas I would like to see support for a broader range of indicators of compromise (IOCs), such as IP addresses, domain names, and URLs. Review collected by and hosted on G2.com.

The forest detection feature is top-notch, which makes deployment easier and the integration smoother. For Azure users, it’s one of the best options for turning even the hardest tasks into something much easier to handle. Review collected by and hosted on G2.com.

It’s a little hard to handle because the person who takes responsibility for it doesn’t have in-depth knowledge of security and analytics, even though that’s a crucial part of it. Overall, the security side is a serious concern. Review collected by and hosted on G2.com.

Ease of use, a strong management platform, solid endpoint performance, and a high level of protection—S1 is a top-tier, complete solution for any company looking to improve team productivity and automation without sacrificing protection. Review collected by and hosted on G2.com.

The uninstall process is easy, and the console reporting could be better. Overall, S1 is a strong, mature solution. Year after year, they have improved both the platform and the agent. Review collected by and hosted on G2.com.

The storyline is always a life-saver for SOC analyst. Helping map out child processes associated with a process has helped us uncover many issues.

Secondly, The automated mitigation makes ensures a threat does not execute within the oversight of the Analyst Review collected by and hosted on G2.com.

It is not easily to work with the queries. For example, inability to open some critical pages in a new tab or group related values makes it a bottleneck except for the use of purple AI, I really hate that for the tool . Review collected by and hosted on G2.com.

Ease of deployment and great at protection from Ransomware. Very easy to install SentinelOne endpoint on machines in the workplace. We have had complete protection from Ransomware and other threats since using it. Review collected by and hosted on G2.com.

One of the things I dislike about using SentinelOne Endpoint is that from the user side of things, there are very little options. You have to manage everything from the web GUI. Review collected by and hosted on G2.com.

I like SentinelOne Singularity Endpoint because it provides strong real-time threat detection and automated response to protect against cyberattacks. Its centralized dashboard makes it easy to monitor endpoints, investigate threats, and manage security efficiently. Review collected by and hosted on G2.com.

The platform can sometimes be complex to configure and navigate, especially for new users. Additionally, some advanced features and detailed threat investigations may require extra time and technical expertise. Review collected by and hosted on G2.com.