SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Verified User in Hospitality

Enterprise (> 1000 emp.)

9/30/2025

"Great security"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

easy to use and setup the agents in your environment Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

a little expensive, the DFIR team hasn't been useful so far Review collected by and hosted on G2.com.

Ankit A.

Security Engineer

Mid-Market (51-1000 emp.)

10/7/2024

"Single Visibility Platform (SVP)"

5/5

What do you like best about SentinelOne Singularity Endpoint?

So, First of all SentinelOne Singularity provides the best visibility of all the threats, covering network to every connectivity layers with very Easy and Simple GUI. Singularity not only covers the Endpoint but also covers the Infection Layers if any attack or malware is detected. You can integrate this Singularity with multiple threat analytics and threat feeders, also with your On-going SIEM/SOAR platform. If i talk about implementation it's basically SaaS, so you dont need to worry about the complex and lengthy process while implementing SentinelOne Singularity. We all know this SentinelOne is amongst the Market LEADER, hence it's customer support is really quick and effective. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Personally I don't dislike anything in SentinelOne Singularity as it provides numerous beneficial features which will help and sort out the complex scenarios in multiple organizations. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentinelOne Singularity is not only a generic EDR, in fact, it's a bundle of EDR, Advanced Threat Detection, XDR, VA Scan, EPP which covers each and every unique and important cybersecurity portfolio. This will help not only me but many organizations as I have pitched this product to multiple customers and they're already very much satisfied with this Singularity solution as they don't need multiple products to be managed separately. This is a USP of SentinelOne Singularity which benefits the customer with the ease of usage. Review collected by and hosted on G2.com.

Moe F.

Owner

Computer Networking

Small-Business (50 or fewer emp.)

1/31/2025

"Excellent EDR solution"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Gives us good visibility to our endpoints and threats as they arise. Deployment was able to be integrated into our RMM solution. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The deployment was a little difficult the first time we ran through it but quickly became easier once we understood the process. Review collected by and hosted on G2.com.

Kyle M.

Core Services Leader

Mid-Market (51-1000 emp.)

12/13/2024

"Secure and gives the sense that our endpoints are protected"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

The amount of data that SentinelOne collects about each action on an endpoint gives us full visibility into possible threats. As something we use daily, the console is intuitive and easy to use. We have very rarely used customer support, but when we have, they have been great. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

One thing it lacks is a content filtering system Review collected by and hosted on G2.com.

Alejandro C.

Analista de ciberseguridad

Small-Business (50 or fewer emp.)

9/2/2024

"EDR with a quick and efficient response, easy to operate and manageable"

5/5

What do you like best about SentinelOne Singularity Endpoint?

The average response time it has against infected files is 5 seconds, which reduces the risk of infection on workstations. Additionally, its management console is quite intuitive, which facilitates use and support for the user or client through its manuals section. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

While it is an easy solution to integrate into devices manually, when performing mass integration, additional configurations are needed that must be carried out by trained personnel. Review collected by and hosted on G2.com.

Verified User in Telecommunications

Mid-Market (51-1000 emp.)

6/24/2025

"Sentinel One Singularity"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Installer file is small, Threat detection and Automation is very good. Purple AI is really good feature to have for SOC. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Should have capability to uninstall existing AV while time of installation. Review collected by and hosted on G2.com.

Shiju C.

System Administrator

Mid-Market (51-1000 emp.)

Originally submitted 9/11/2024

"Lightweight and Fast Agent to Deploy"

4/5

What do you like best about SentinelOne Singularity Endpoint?

S1 is very lightweight and easy to use to console. Updates to agent takes very less time as compared to other product we use earlier. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

S1 does not have basic web reputation option to block in case user clicks on unknown link. S1 also does not block Mobile devices that connect by users. Mass-Storage block is a challenge and hope they come with update soon for our issues. Review collected by and hosted on G2.com.

Emmanuel G.

IT Team Leader

Mid-Market (51-1000 emp.)

11/26/2024

"Best EDR"

5/5

What do you like best about SentinelOne Singularity Endpoint?

It's really easy to use and I love the platform. Every time we have a question, the support is always there to help us. I use this tool daily and it has a good number of features. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There's nothing bad I have to say against SentinelOne. Review collected by and hosted on G2.com.

Romil T.

IT Helpdesk

Mid-Market (51-1000 emp.)

4/4/2024

"Best AI antivirus I have ever seen"

5/5

What do you like best about SentinelOne Singularity Endpoint?

It is an AI antivirus that monitors behavior. We use this everyday and is easy to implement. It detects any chances of getting infected and quarantines/kills malware right away. If someone tries to run a script from an elevated shell, it detects it within seconds. No one can remove it or disable it. It requires admin approval from the web console. You just click on the threat file from the web console, and we can see everything malicious about it. It has a deep visibility feature as well. Also, it offers seamless integration for ease of use. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

It might be annoying due to the number of false positives, but we can always whitelist the software if necessary. Once I had a real hard time to remove this software because it went into offline mode. I tried many things even contacted support to remove the software but no luck. We need to manually restart the devices in order to get latest update the antivirus. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

It solves advanced threat detection, provides unified endpoint security, offers real-time visibility, automates response and remediation, and integrates with existing security infrastructure, benefiting our school by enhancing security posture, reducing response times, and simplifying management. Review collected by and hosted on G2.com.

Eric H.

IT Team Lead

Small-Business (50 or fewer emp.)

8/15/2024

"Great Tool"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy to use and easy to implement, the system just works. We have had excellent customer support and this is used daily on hundreds of endpoints within our organization. We found Sentinel One to be feature rich and easy to integrate with our Nable RMM. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Sometimes endpoints will drop out of the management even though they are connected. Review collected by and hosted on G2.com.