SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Nitesh R.

Administrator

Mid-Market (51-1000 emp.)

Originally submitted 5/22/2024

"Protect threat hunting"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

SentinelOne helps us understand threats and against new threats.

Here are some points.

1. Endpoint Protection.

2. Automates Response.

3. Ease of Use

4. Integration and Compatibility.

5. Ease of Implementation.

6. Protect Threat huntings. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

SentinelOne is costly rather than some other security tools. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

Manual threat response is very slow, prone to error, and increases the risk of damage and data loss during a threat. But SentinelOne automates threat response, decreases the number of affected devices, and remediates threats without human intervention. SentinelOne reduces the number of attacks. Review collected by and hosted on G2.com.

Goodness I.

Information Security Analyst

Financial Services

Mid-Market (51-1000 emp.)

6/20/2024

"The best in business"

5/5

What do you like best about SentinelOne Singularity Endpoint?

What I like most is the one thing other security solutions do not have, and that is, the ability to rollback a machine to the last known stable state after a Ransomware infection. This entirely sets S1 apart from anything else in the market. It just gives you that extra level of comfort that whatever happens, you can always go back. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Absolutely NOTHING!

It is everything I need in an XDR Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

11/15/2024

"Anti-Virus Security"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Love the notifications of suspicious activity that most times gets resolved by the team at SentinelOne Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The portal has loads of features that can sometimes be overwhelming the navigate through, however all of these features are what make this product great. Review collected by and hosted on G2.com.

Daniel d.

Senior IT Engineer

Small-Business (50 or fewer emp.)

7/29/2024

"Hassle free protection withEDR"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy deployment and monitoring, Easy manageble by technical staff and secure. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The solution works, So no negativity on the product. Review collected by and hosted on G2.com.

Ronnie D.

IT Administrator

Mid-Market (51-1000 emp.)

8/7/2024

"Great customer support and response"

3.5/5

What do you like best about SentinelOne Singularity Endpoint?

their response time and action against threats Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

sometimes our portal doesn't work or getting too many false positives Review collected by and hosted on G2.com.

Amit B.

CISO

Mid-Market (51-1000 emp.)

Originally submitted 1/28/2024

"SentinelOne is The Future of Endpoint Security"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Proactive Hunting: The platform provides tools for security teams to proactively hunt for threats hidden within their network. This proactive approach can help prevent attacks before they happen. Rapid Response: Singularity can take action to respond to threats in seconds, reducing the time it takes to contain and mitigate an attack. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Cost: As a comprehensive XDR solution, Singularity can be more expensive than traditional endpoint protection or EDR tools. Organizations on a tight budget might find it cost-prohibitive. Server cpu can be sometime very High , aroud 17%. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Small-Business (50 or fewer emp.)

6/5/2024

"EDR Solution"

3.5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy to roll out and install

Not resource intensive on machines

Console is easy to use and configure/troubleshoot issues. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

You will need to fine tune it, you cannot just install and forget. It does block some legitimate applications.

It does cost more. Review collected by and hosted on G2.com.

Jason P.

Mid-Market (51-1000 emp.)

3/21/2024

"Best EDR we have used by far!"

5/5

What do you like best about SentinelOne Singularity Endpoint?

EDR that constantly updates without intervention. Scans attached drives, and computers when files are downloaded with automatically. Onboarding walks you step by step to get setup and using the portal quickly and efficiently. Support is always available. Threats are stopped automatically and restored back to normal if set to protection mode vs just detection mode. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

threat hunting has a lot of information to digest. If computers have small harddrives sometimes the agent is disabled because it cannot update the database file needed. Review collected by and hosted on G2.com.

Shanmugasundaram P.

Technical Support Engineer

Enterprise (> 1000 emp.)

Originally submitted 3/13/2024

"SentinelOne Singularity Endpoint & XDR"

5/5

What do you like best about SentinelOne Singularity Endpoint?

Easy to understand and use. It detects threats and provides visibility over the network. It also does threat hunting. Implementing it with other security devices is also feasible. SLA is up to mark and has strong customer support. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

New dashboard is a bit difficult to understand compared to the older versions. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

By using it across all platforms from servers to workstations, to MACs, to Windows, to Linux, VDI and embedded systems and on-premise. It improved operational efficiencies and saves time. Effortless operations are performed. Visibility over the network is better. Updated features give an extra add-on. Review collected by and hosted on G2.com.

Jay L.

System Administrator

Mid-Market (51-1000 emp.)

8/23/2023

"Very powerful end point protection feature sets including file roll back, threat hunting, etc..."

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

We especially like this end-point protection that comes with the feature that we can roll back files even in case of a ransomware attack. This can be a lifesaver to get back files during a ransomware attack in case not covered by backup software. In addition, S1 has been a lightweight software with powerful protection against anything it scanned. The cloud portal also has a lot of info for reports, thread hunting, etc... Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There were quite a bit troubles with the VSS occupying 100% space instead of the default 10% on a few agent versions. Some of our VMs went out of space due to this issue and we had to apply manual fixes for each affected server. It took a while for this issue to be fixed. There was an agent software claim that would fix the issue, but in fact, it didn't. The VSS space issue was completely resolved after two or three software releases since the problematic one. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

SentineOne is a strong end-point protection that can provide day-to-day protections for end-user workstations and servers. SentineOne provided us extra protection against ransomware attacks where some up-to-date data may be without backup. SentineOne provided us a centralized management portal where we can find everything we need from managing end-points to visibility of threats, reports, etc... Review collected by and hosted on G2.com.