SentinelOne Singularity Endpoint Reviews & Product Details

SentinelOne® Singularity™ Endpoint is an autonomous endpoint security platform that stops threats in real-time. It unifies endpoint protection (EPP), endpoint detection and response (EDR), and autonomous remediation to stop ransomware, zero-day exploits, supply chain attacks, and fileless malware. Singularity Endpoint protects workstations, mobile devices, servers, and cloud workloads across SaaS, on-premises, hybrid, and air-gapped environments. Behavioral and static AI detection models stop known and unknown threats by identifying how threats behave, not just what they look like. SentinelOne catches what signatures miss, without waiting on updates. Storyline® automatically correlates telemetry into one visual attack story, and patented one-click rollback restores systems to a trusted state in seconds. The result is stronger protection with fewer incidents and less operational overhead: lower dwell time, fewer false positives, and faster response. With Purple AI™, teams accelerate triage, threat hunting, and investigation. From alert to verdict without manual investigation. Purple AI's Agentic Investigation runs the analysis, surfaces the evidence, and tells your team exactly what to do next. The same SentinelOne agent that protects endpoints also defends every identity behind them. Detect credential abuse, shrink your attack surface, and contain identity threats from one console. Seamless integration of endpoint, identity, cloud, and third-party telemetry eliminates blind spots. Built AI-native from day one, Singularity Endpoint delivers best-in-industry coverage across Windows, macOS, Linux, and mobile operating systems, including legacy OSes. Trusted by more than 11,500 customers, SentinelOne is a six-time Gartner® Magic Quadrant™ Leader for Endpoint Protection.

Seller

SentinelOne

Discussions

SentinelOne Singularity Endpoint Community

Languages Supported

English

Solution Type

All-in-One

Overview by

Lindsay Durfee

Used by Zippin and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

2 months

View More Pricing Information

SentinelOne Singularity Endpoint Integrations

(88)

Verified by SentinelOne Singularity Endpoint

Show More Integrations

SentinelOne Singularity Endpoint Reviews FAQs

Generated using AI

Last updated: Nov 04, 2026

What is SentinelOne Singularity Endpoint, and what problem is it built to solve?

SentinelOne Singularity Endpoint is part of SentinelOne’s security platform, which is designed to address threats across endpoints, identity, cloud, and AI. Its stated purpose is to use AI and automation to help defenders stop attacks and manage security risk.

What languages does SentinelOne Singularity Endpoint support?

SentinelOne Singularity Endpoint supports 1 language: English.

What company sizes and industries is SentinelOne Singularity Endpoint the best fit for?

SentinelOne Singularity Endpoint has positive feedback from organizations across small, mid-market, and enterprise settings, with users especially represented in mid-market and enterprise organizations. The industries represented span several sectors, with recurring presence in technology and security, manufacturing, financial services, healthcare, education, and government.

Company size — Mid-market: A prominent segment among positive users.
Company size — Enterprise: Also strongly represented, including large endpoint environments.
Company size — Small business: Positive experiences also come from smaller organizations.
Industries — Technology and security: Includes information technology, computer and network security, and related services.
Industries — Manufacturing and financial services: Both appear regularly among positive users.
Industries — Healthcare, education, and government: These sectors are also represented.

How long does it take to implement SentinelOne Singularity Endpoint across a team?

Implementation can be quick for straightforward deployments, while larger or more involved rollouts may take longer. The reported time-to-go-live ranges cluster around the first few months.

Time to go live	Relative frequency
Less than 1 month	Most common
1–3 months	Also common
3–6 months	Less common
6–12 months or longer	Occasional

What customer support options does SentinelOne Singularity Endpoint provide, and how do users find the overall support experience?

Support can be responsive and knowledgeable, especially during deployment and escalations, but the experience is not always consistent. Users also describe delayed responses or resolutions that did not fully address the underlying issue.

What is the experience like for teams switching to SentinelOne Singularity Endpoint from another tool?

Switching to SentinelOne Singularity Endpoint is often motivated by a need for stronger behavioral detection, faster response, better endpoint visibility, or a more manageable alternative to traditional antivirus and other endpoint suites. Previous tools named include Microsoft Defender, CrowdStrike, Sophos, Symantec, Carbon Black, Trend Micro, ESET, and Kaspersky, among others. The change can bring more automated remediation and investigation context, although migration and early policy tuning may take work, and false positives or compatibility issues can add friction.

What features or capabilities could make SentinelOne Singularity Endpoint even more useful?

The product could be more useful with smoother day-to-day administration and clearer reporting. Recurring improvement requests focus on making common workflows easier and reducing the effort needed to tune and manage the platform.

Expand customizable reporting and dashboard options, including easier sharing and management-ready views.
Simplify policy and exclusion management, with safer ways to preview or test changes before applying them across endpoints.
Make the console, navigation, alerts, and threat-hunting queries more intuitive for newer or occasional users.
Streamline agent updates and upgrades, with less manual work and clearer troubleshooting feedback.

How useful do SentinelOne Singularity Endpoint users find its AI features in everyday use?

AI is useful in everyday work when it helps detect suspicious behavior, automate response, or speed up investigations, though its value depends on the task and the team’s tuning and familiarity. Purple AI is used to assist with threat searches and investigations, while behavioral AI is valued for flagging or stopping suspicious activity and reducing manual triage; experiences with AI-generated guidance are not uniformly positive.

Is SentinelOne Singularity Endpoint considered safe and secure for handling data?

SentinelOne Singularity Endpoint gives users confidence through endpoint monitoring, threat detection, and response actions such as isolating affected devices and recovering from ransomware-related changes. That confidence can be tempered by false positives that need investigation and tuning, and by occasional reports of resource strain or operational issues. The available experiences support a view of it as a security tool for endpoint protection, but do not establish a blanket assurance for every data-handling or compliance requirement.

G2 reviews are authentic and verified.

Here's how.

Siddhesh R.

Enterprise (> 1000 emp.)

8/21/2023

"SentinelOne Review: A Powerful Security Solution"

5/5

What do you like best about SentinelOne Singularity Endpoint?

AI-Driven Threat Detection: SentinelOne's AI-powered threat detection capabilities are undoubtedly its strongest suit. The platform employs behavioral analysis and machine learning algorithms to identify and stop advanced threats in real-time.

Multi-Platform Coverage: SentinelOne provides protection across a wide range of platforms, including Windows, macOS, Linux, and even cloud environments. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Resource Intensive: One notable downside of SentinelOne is its resource consumption. While the advanced features are impressive, they can come at the cost of system performance.

Limited Reporting: Although the dashboard offers a good overview, I found that the reporting features could be more comprehensive. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

Threat Hunting and Investigation - The product's ability to facilitate threat hunting and investigation has empowered me to delve deeper into potential threats. This has allowed me to better understand attack patterns and take preventive measures.

Advanced Threat Detection and Prevention - The product's AI-driven approach to threat detection has given me a heightened sense of security. Its ability to proactively identify and halt advanced threats in real-time ensures that I am shielded from evolving cyber risks. Review collected by and hosted on G2.com.

Juan I.

System Engineer

Small-Business (50 or fewer emp.)

3/5/2024

"S1 has been amazing"

5/5

What do you like best about SentinelOne Singularity Endpoint?

How easy it is to manage end points and complete responses. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

How it sometimes it flags legitimate software. Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

12/15/2023

"S1 customer success is amazing"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I like the different offerings that S1 offers. The product just works, we are able to navigate easily and find what we are looking for quickly. We implemented our S1 instance for 6,000 machines within a few weeks with very little issues. The biggest reason for us staying with S1 is our customer success team, they go out of their way often to try and find solutions or help with anything we bring to the table. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

There isn't much that I dislike, its a great tool and our customer success team is amazing. Review collected by and hosted on G2.com.

Robert B.

Vice President, Information Security & Technology Risk Management

Enterprise (> 1000 emp.)

Originally submitted 7/31/2023

"SentinelOne EDR Customer review"

5/5

What do you like best about SentinelOne Singularity Endpoint?

We initial conducted a POC with SentinelOne and other ERD solutions in the market. After developing a business driver and functional requirements tracking sheet we found Sentinelone to be the clear winner, meeting all of our requirements. Since that time we have consolidated on one standard EDR solution of the enterprise, removing four EDR soloutions leveraged by multple technology groups within the organization. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

No downsides to date. We are very happy with the solution and support. Easy to use and does a great job in blocking potential malware, C2 attacks and other security related attacks on endpoints. Review collected by and hosted on G2.com.

Erick Salvador P.

Enterprise (> 1000 emp.)

Originally submitted 5/16/2023

"excellent XDR"

5/5

What do you like best about SentinelOne Singularity Endpoint?

It is a very complete tool and in comparison with other products its cluster is very organized and intuitive, in addition to having a very effective response capacity, easy to install and uninstall Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Being an agent who is constantly monitoring on occasions for in-house development applications, she detects a lot of false positives. The offline uninstallation should be better, adding some tool in the central console that can be executed on the computers and the Firewall should add categories to be able to make it a little more granular and not be entering the urls one by one Review collected by and hosted on G2.com.

Aaron R.

Systems Administrator

Mid-Market (51-1000 emp.)

Originally submitted 7/26/2023

"SentinelOne Singularity Modern Security Platform"

4/5

What do you like best about SentinelOne Singularity Endpoint?

The most helpful part of SentinelOne Singularity is the ease of use, modern and current real-time capabilities of the platform. The biggest upside is to be able to detect, deter, or respond to active threats across the network. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

The least helpful part of SentinelOne Singularity are the consistent site changes and updates to the URL that a site logs into. The biggest downside I have experienced is login issues due to these site changes, which requires authentication e-mail verification. Review collected by and hosted on G2.com.

Kyle R.

Systems Administrator

Mid-Market (51-1000 emp.)

3/14/2024

"Absolutely Love SentinelOne!"

5/5

What do you like best about SentinelOne Singularity Endpoint?

This is the best solution out on the market! Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

SentinelOne blocks ALOT of batch files or "automated" processes which can be a pain at times but once you know how to exclude these, it makes it so much easier! Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Enterprise (> 1000 emp.)

8/23/2023

"Best XDR solution I've used"

4.5/5

What do you like best about SentinelOne Singularity Endpoint?

I've been using SentinelOne Singularity XDR solution for the past 4 months, and I can already see the difference between this and our previous XDR solution. SentinelOne is much more robust and has been gathering and reporting us a lot of alerts on the endpoints. Extremely satisfied. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Considering the fact that it alerts a lot more considerably, there is a requirement of fine tuning a lot of it. One can't just install this and let it do the work on its own. Also, it can be a little pricey for some organizations. Review collected by and hosted on G2.com.

What problems is SentinelOne Singularity Endpoint solving and how is that benefiting you?

A lot of it is based on the amount of endpoints that we have in our organization. We have about 10,000 employees all over the world, at in order to manage a large organization like this, SentineOne XDR has helped me and my team to maintain the security posture and work on the areas that require attention. Review collected by and hosted on G2.com.

Darold S.

Enterprise (> 1000 emp.)

8/23/2023

"SentinelOne Sets the Standard for Endpoint Protection"

5/5

What do you like best about SentinelOne Singularity Endpoint?

User friendly management console, phenomenal machine learning capabilities, knowledgeable support, not resource intensive, rollback feature, thorough threat hunting process tree - very few exclusions needed to run in our environment. Ability to initiate a full scan from the management console. Open to customer feedback with a spot for feature requests. Simple, yet intuitive policy tuning and setting. Grouping/Policy hierarchy is user friendly. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

Inability to set up specific notifications to a specific - that is different from the main email address listed. Inability to downgrade agents from the management console. Overall, the product is great, just a few feature requests. They are always striving to improve their product, i.e. the recent implementation of OS vulnerability scanning. Review collected by and hosted on G2.com.

Adam M.

Director of IT

Small-Business (50 or fewer emp.)

9/1/2023

"Long time user of Sentinel One"

5/5

What do you like best about SentinelOne Singularity Endpoint?

I have been using Sentinel One Singularity for over 6 years and with multiple companies and roles. Using Sentinel One Singularity on our endpoints gives us confidence that our end points are secure. The granularity we have when customizing our deployment of our agents is very important to us. Review collected by and hosted on G2.com.

What do you dislike about SentinelOne Singularity Endpoint?

We do occasionally get false positives, and we have experienced some difficulty whitelisting certain legacy applications. I think this is to be expected with any XDR product though. Review collected by and hosted on G2.com.