SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

3/24/2026

"Autonomous Threat Detection with Clear Visibility and Real-Time Protection"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like best about SentinelOne Singularity Endpoint is its strong autonomous detection and response capabilities, which help quickly identify and contain threats with minimal manual intervention. The platform provides clear visibility into endpoint activities, an intuitive dashboard for investigation, and reliable real-time protection that supports efficient incident response in a SOC environment. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

One challenge with SentinelOne Singularity Endpoint is that alerts or events can sometimes reoccur even after they have already been mitigated, which may require additional verification and can add to alert noise for analysts. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

It helps solve problems related to malware detection, ransomware prevention, and unauthorized endpoint activities. This benefits me as a SOC Analyst by providing real-time threat detection and automated response, which improves incident handling efficiency and strengthens overall endpoint security. Review collected by and hosted on G2.com.

Colin B.

Software Engineering consultant

Small-Business (50 or fewer emp.)

12/11/2025

"Outstanding Security Solution with Seamless Compliance"

5/5

What do you like best about SentinelOne Singularity Endpoint?

SentinelOne was the only player in the market willing to sign a business associate agreement and ensure HIPAA compliance. I also appreciate the really great price they offer considering these features. SentinelOne Singularity was willing to work with us despite our smaller size and heightened compliance requirements, whereas some other companies wouldn't even quote us given our limited number of users. I found the initial setup to be very easy. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

None, we love it. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

I use SentinelOne Singularity to fulfill compliance requirements, protect endpoints and our network. It offers great pricing and signed a business associate agreement. They were one of the only vendors in the space that would sign a BAA and for HIPAA compliance, and one of the only vendors willing to quote us despite our small size. Review collected by and hosted on G2.com.

SAM B.

Director of Technology

Mid-Market (51-1000 emp.)

Originally submitted 9/30/2025

"Inheritly powerful, and a feeling of being protected."

5/5

What do you like best about SentinelOne Singularity Endpoint?

That when necessary, I don't require to be attentive to the platform. But when I need to be on it or want to learn more, the possibilities are endless. I can go as far as I want. The platform is feature-rich. The use of Purple AI and the real language searching, you can go in depth with the threats. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

In the beginning, there was a bit of a learning curve. Review collected by and hosted on G2.com.

Sahil K.

Technical Support Engineer

Mid-Market (51-1000 emp.)

6/10/2025

"Singularity Unleashed : One platform for all threats & Autonomous security"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Best thing in sentinelone have autonomous threat detection and response. single unified console for Endpoint ,identity and cloud security . User friendly console you can easily manage all the assets easy to deploy policy.Single policy for window ,mac and linux .and auto response also available one click kill & quarantine , remediate and best feature is one click rollback .Rollback feature helps you to revert back impact of ransomware in attack condition. and much more features like device control and patient feature storyline star custom rule.Ease to implementation for all types of OS ,legacy os also supported. Frequently usable and ease to integrate with other vendors. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

device control policy is bit confusing some time for cutomers. Review collected by and hosted on G2.com.

Rafal S.

Agile Coordinator

Enterprise (> 1000 emp.)

8/1/2025

"Almost perfect"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The reliability and certainty of protection while being simple to install and manage. The implementation was extremely fast and easy. The support is top class in comparison to other brands I have experience with. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There is no such thing. Maybe one - it happens that I have to log in to the console a few times before I am granted access. I am not sure where the issue is. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

It is an important element of our security stack. Moving to SentinelOne from another platform was a perfect choice in terms of: detection reliability, low false positives ratio, easy SIEM integration, easy management even in huge environments, low consumption of the endpoint resource by the agent. Review collected by and hosted on G2.com.

Nick L.

Owner/General Manager

Information Technology and Services

Mid-Market (51-1000 emp.)

Originally submitted 11/4/2025

"Effortless Deployment and Outstanding Support"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy to deploy and use. Very responsive to config changes. Support team is amazing. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I have not found anything I don’t like. The platform is very user friendly. Review collected by and hosted on G2.com.

Parag R.

Sr. System Administrator

Small-Business (50 or fewer emp.)

12/10/2025

"Effortless to Use with an Informative, Well-Designed Dashboard"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy to use, well-designed, and informative dashboard. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

I don't have any particular dislikes, though I do think certain areas could definitely be improved. Review collected by and hosted on G2.com.

Umar T.

Senior Information Technology Consultant

Mid-Market (51-1000 emp.)

1/5/2026

"User-Friendly, But Integration Needs Improvement"

2.5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like about SentinelOne Singularity Endpoint is how user friendly it is and how easy it is to get in touch with someone Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

What I dislike about SentinelOne Singularity Endpoint is that it is a bit hard to integrate and implement Review collected by and hosted on G2.com.

rohit y.

administrator

Small-Business (50 or fewer emp.)

6/25/2025

"Review For SentinelOne"

5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like best about SentinelOne Singularity is its autonomous threat detection and response capabilities. It provides excellent visibility across endpoints with minimal manual effort. The rollback feature is especially valuable for ransomware recovery. The platform is fast, lightweight, and easy to manage through a clean interface. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

One drawback of SentinelOne Singularity is that its advanced features can be overwhelming for new users. The alert classification could be more granular to reduce noise. Reporting customization options are somewhat limited. Occasionally, support response times can be slower than expected Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity is solving the problem of advanced threat detection and rapid incident response. It automatically identifies and mitigates malware, ransomware, and zero-day threats. The platform’s autonomous response reduces the need for constant manual intervention. This has improved our security posture and saved valuable analyst time. Review collected by and hosted on G2.com.

Verified User in Financial Services

Mid-Market (51-1000 emp.)

6/4/2025

"Good EDR product with bad customer support team."

4/5

What do you like best about SentinelOne Singularity Endpoint?

it's Detection capability when the malicious process is running. it is easy to use. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

detects only if the particular process is running. if the process is sitting dormant in the device then it won't detect unless it is running. full disk scan has to be done manually. there is no automation to do full disk scan in the UI. Bad customer support. they take months to solve a simple issue. they hide behing the chat and they are reluctant to come on call to fix certain issue. Review collected by and hosted on G2.com.