SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Verified User in Banking

Small-Business (50 or fewer emp.)

11/2/2026

"SentinelOne Singularity: Automatic Threat Defense and Clear Central Management"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

What I particularly like about SentinelOne Singularity Endpoint is the automatic detection and defense against threats. The central management is clear and allows for quick analysis and response to security incidents. I find the detailed information on processes and threats particularly helpful, as well as the ability to directly isolate affected devices. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

What I like less is that the uninstallation of the SentinelOne agent sometimes does not work properly. In some cases, the agent cannot be removed via the management console, which requires additional time and manual steps. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity Endpoint helps us protect our devices from malware, ransomware, and other cyber threats. The automatic detection and response to threats, as well as the central management of all endpoints, are particularly helpful. This saves us time in monitoring and analyzing security incidents and allows us to respond more quickly to potential attacks. Review collected by and hosted on G2.com.

Muralidharan k.

security engineer

Mid-Market (51-1000 emp.)

8/24/2026

Business partner of the seller or seller's competitor, not included in G2 scores.

"Powerful EDR and Automated Threat Response with Centralized Visibility"

5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like best about SentinelOne Singularity Endpoint is its strong endpoint detection and response capabilities, automated threat response, and centralized visibility. It makes it easier to identify suspicious activity, investigate incidents, and respond quickly while reducing the amount of manual effort required from security teams Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The main drawback is that some advanced features can take time to learn and configure properly. The platform is feature-rich, so administrators may need additional training and tuning to get the best results for their specific environment. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity Endpoint helps us improve endpoint security by detecting and responding to malware, suspicious activity, and other endpoint threats. Its automated response and centralized visibility reduce manual investigation time, improve incident response, and help the security team identify and contain threats more efficiently. Review collected by and hosted on G2.com.

Verified User in Manufacturing

Enterprise (> 1000 emp.)

10/28/2026

"Legacy OS Support, but High CPU and Unreliable Agent Reporting"

0.5/5

What do you like best about SentinelOne Singularity Endpoint?

Supports multiple operating system versions, including legacy. This was the only reason for us to replace our previous EDR to SentinelOne that was able to be deployed on legacy OS Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

We're experiencing major issues with SentinelOne that includes heavy impact on endpoint performance with high CPU usage and agents that stop reporting to the management console. Support were unable to resolve these issues. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

10/27/2026

"User-Friendly Interface with Powerful Detection and One-Click Rollback"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

The Sentinelone interface is user-friendly. Its detection capabilities are built into the agent itself, and the one-click rollback feature is very useful. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Wherever a system has a full drive and very high utilization, the agent disables itself. There are also a few false positives that require manual intervention. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity Endpoint helps us protect our endpoints from malware, ransomware, and other advanced cyber threats with real-time detection, behavioral analysis, and automated threat response. It has also reduced our overall operational workload by automating routine security tasks, cutting down on manual intervention, and making endpoint monitoring and incident investigation more straightforward. As a result, our security posture has improved, we can respond to threats faster, downtime is reduced, and our IT and security teams are able to focus on other critical tasks. Review collected by and hosted on G2.com.

Nancy U.

Administrator

Small-Business (50 or fewer emp.)

7/23/2026

"Storyline Visual Maps Make Threat Investigations Easy"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

Most helpful for me would be its storyline feature. It threads together process trees, network requests, registry and file changes into one visual map. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The SentinelOne query language used to threat hunt within Deep Visibility is a pain to use. It takes quite a toll to learn and use it efficiently and effectively. Else, you'll just keep getting 'No results found'. Review collected by and hosted on G2.com.

Verified User in Consulting

Mid-Market (51-1000 emp.)

10/23/2026

"Powerful Custom Hunting and Integrations, but Became Redundant Next to Defender"

3.5/5

What do you like best about SentinelOne Singularity Endpoint?

The customized hunting options and integrations with other applications. We were able to enter customized hash values that were from a TTPs list from the government and then search for those hashes amongst all devices loaded into SentinelOne Singularity Endpoint. This performed well at a reasonable price. We didn't use AI or Linux environments and support was pretty good. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Over time, the cost just didn't make sense when Microsoft Defender for Endpoint really covered everything and made SentinelOne Singularity Endpoint a bit redundant on our network. Review collected by and hosted on G2.com.

Greg H.

Director of Cyber Security Operations

Enterprise (> 1000 emp.)

10/21/2026

"Best-in-Class Telemetry and Detection for Stronger Endpoint Security"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The telemetry and detection engines exceed the capabilities I’ve seen in other EPP products. It provides relevant, timely endpoint data that helps us keep our network secure. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There is some discontinuity in the platform that prevents a seamless experience for our security analysts. The experience can cause inefficiencies with investigations Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

8/8/2026

"SentinelOne: Balanced Endpoint Security with Strong Visibility and Automation"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Overall, SentinelOne provides a good balance of security, visibility, automation, and ease of management, making it a valuable solution for protecting enterprise endpoints. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Some advanced configurations and investigations can also feel a little complex, especially for teams that are new to endpoint security platforms. Reporting and customization could be more intuitive as well.

Overall, these are relatively minor concerns, but simplifying the user experience and making advanced features easier to configure would make the platform even better. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

The automated detection and response capabilities are especially beneficial because they reduce manual effort and help minimize the time required to contain and remediate threats. The centralized management also makes it easier to monitor endpoint security, apply policies, and maintain consistent protection across the environment.

Overall, it helps improve our endpoint security posture, reduces operational effort, and provides greater visibility and confidence in detecting and responding to security threats. Review collected by and hosted on G2.com.

Suresh K.

Site Engineer

Mid-Market (51-1000 emp.)

8/29/2026

"Fast, Feature-Rich Endpoint Protection with Deep Visibility and Vulnerability Scanning"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

End Point detection and response to the alerts, additional features like deep visibility search and Vulnerability scanning on end points. Fast response. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

At present, I’m not seeing any cons with SentinelOne Singularity Endpoint Protection. It may be more expensive than some other EDR solutions, but in my experience it delivers better results and offers more features. Review collected by and hosted on G2.com.

Viral S.

IT SecOps Manager

Oil & Energy

Mid-Market (51-1000 emp.)

4/28/2026

"Autonomous Protection, Robust Security for Energy-Critical Systems"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I really appreciate how autonomous and intuitive SentinelOne Singularity Endpoint is. It excels at detecting and responding to threats in real-time without the need for constant tuning or manual intervention. The storyline feature is fantastic, making investigations clear by showing exactly how events unfolded across an endpoint. The combination with MDR services feels like having an always-on extension of our security team that catches issues early, provides high-quality analysis, and gives us confidence that our critical energy sector systems are protected without adding unnecessary operational overhead. I also love how lightweight and stable the agent is across our environment. Even with a large number of endpoints, SentinelOne runs quietly in the background without causing performance issues. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

One area that could be improved with SentinelOne Singularity Endpoint is the overall usability and responsiveness of the management console, which can feel slow or occasionally unintuitive when navigating large data sets or drilling into detailed event timelines. Reporting is another place where there's room for enhancement. None of these are deal-breakers, but smoothing them out would make an already strong platform even more efficient for day to day operations. Review collected by and hosted on G2.com.