SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Verified User in Insurance

Mid-Market (51-1000 emp.)

Originally submitted 8/29/2023

"A must have"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The incident analysis tool like the timeline, the Mitre TTs used. Additionally, the endpoint management provides a lot of useful data, also as inventory. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The dashboard widgets are limited. Additionally, the software vulnerability part is figurative and cannot be integrated with other VA products. Review collected by and hosted on G2.com.

Mukesh K.

Network Engineer

Enterprise (> 1000 emp.)

10/29/2026

"Easy Setup, Strong Threat Detection, but Resource-Heavy Scans"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

I like the detection rules and event search. The initial setup was so easy. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I find that SentinelOne Singularity Endpoint uses a lot of resources during a full disk scan. Review collected by and hosted on G2.com.

Victor Y.

Head Presales

Enterprise (> 1000 emp.)

7/24/2026

"Simply 1-Click Ransomware Rollback That Restores Files Fast"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Provides 1-click ransomware rollback capabilities, reverting unauthorized changes and restoring encrypted files from local shadow copies in the event of a ransomware attack. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

High Memory Usage: The agent can occasionally consume significant CPU and RAM resources, especially during full system scans or database operations, which can cause my laptop to slow down. Review collected by and hosted on G2.com.

Harshul S.

Sr tech support

Information Services

Enterprise (> 1000 emp.)

1/13/2026

"Strong - Reliable Endpoint Protection with Automation"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The best thing is how quickly it detects and blocks the threats without any manual work , agent is very light and doesn't slow down the system and it has very reliable real time threat monitoring. Another great part is Storyline, which shows the chain of events in a simple way Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Just a little complicated if you are new to the platform and some advanced options are hidden for the extra licensing which will increase the cost , and no readymade templates , customization is not easy Review collected by and hosted on G2.com.

Verified User

Small-Business (50 or fewer emp.)

10/25/2026

"Easy to Use and Set Up, but Log Retrieval Is Capped"

4/5

What do you like best about SentinelOne Singularity Endpoint?

I like the interfaces because they make everything really easy to do and interact with. I found the initial setup quite easy; it only took about five minutes. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I find the data and log retrieval limits a bit limited. The log query features have a hard cap, and I think I only get 10,000 columns or records at a time. Review collected by and hosted on G2.com.

Joevanne V.

Principal Security Architect and Engineer

Enterprise (> 1000 emp.)

1/6/2026

"Innovative Features That Set Sentinel One Apart"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Sentinel One has made significant progress and introduced a range of new features, setting itself apart from other solutions in the EDR space. Customer support has been great throughout the deployment process and after implementation. The ease of use can use some improvement as the UI can be convoluted making everyday use a bit complicated. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Sentinel One's user interface is quite complicated and not very intuitive. Additionally, the agent often leads to noticeable performance problems on endpoints and tends to produce a large number of false positives. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

Endpoint detection, combined with their managed detection and response service, has been beneficial for us. The S1 team handles and triages the large volume of alerts generated by the tool, which enables us to concentrate on other projects and our daily responsibilities. Review collected by and hosted on G2.com.

Shashank K.

Sales Account Manager

Mid-Market (51-1000 emp.)

Originally submitted 11/20/2025

"Autonomous AI Response and Ransomware Rollback Are Game-Changers"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Autonomous AI response, a ransomware rollback storyline, Purple AI, SIEM solution, and data recovery—there are many SentinelOne endpoints giving the best antivirus. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There’s really nothing to dislike about this product, although I do find the pricing to be a bit on the higher side. Aside from that, everything else is good. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

This platform offers a single dashboard to manage all endpoints and servers, making it easy to monitor everything in one place. Its storyline analysis feature is helpful, and I haven't experienced any system lag. The tool also consolidates various functions and includes ransomware rollback, which adds an extra layer of security. Review collected by and hosted on G2.com.

Verified User

Small-Business (50 or fewer emp.)

10/27/2026

"Easy Setup and Automated Threat Detection for Lab Security"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I like SentinelOne Singularity Endpoint's automated threat detection. I use it to automate scripts on lab computers. Setup was very easy, and everything is working perfectly. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Everything like Review collected by and hosted on G2.com.

Ben S.

Senior Systems Engineer / Infrastructure Architect

Information Technology and Services

Enterprise (> 1000 emp.)

2/19/2026

"SentinelOne EDR: Cloud-Based Management with Easy Deployment and Strong Protection"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

Some of the best things about the SentinelOne EDR is the cloud based management, easy to deploy clients, endpoint protection and the client performance. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The SentinelOne Singularity EDR cloud based management portal could use a lot of work as it is often extremly slow and the new interface is full of bugs. Review collected by and hosted on G2.com.

Jeevanandham R.

Systems Engineer

Information Technology and Services

Mid-Market (51-1000 emp.)

4/10/2026

"SentinelOne: Powerful Endpoint Security with Easy Threat Analysis"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

SentinelOne is a best end point security tool. Using this tool we can easily analyse which assets contains malicious softwares and antivirus. SentinelOne supports blocking USB port also. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Initial stage of configuration takes huge amount of time and need a technical support also. Some times sentinelone sends a false positive informations also. Review collected by and hosted on G2.com.