What I like best about SentinelOne Singularity Endpoint is the autonomous threat detection and response capability it doesn't just alert you to a threat, it actively kills malicious processes and roll back changes in real time without requiring manual intervention or cloud connectivity. This alone sets it apart from traditional AV and even some other next-gen solutions.

The storyline feature is a particular standout. It automatically maps the entire attack chain process trees, file events, network connections, registry modifications into a single correlated timeline. what would otherwise take an analyst 30-40 minutes to piece together manually is presented instantly, which significantly accelerates investigation and response.

Policy management across large, distributed device fleets is also well thought out. Grouping devices, pushing configuration, and managing exclusions is intuitive from the console without needing to touch individual endpoints.

For an IT or security administrator handling endpoint protection at scale, having deep visibility, automated remediation, and a clean centralized console in a single lightweight agent is a genuine operational advantage that's hard to go back from. Review collected by and hosted on G2.com.

While SentinelOne Singularity Endpoint is a powerful platform, there are a few pain points worth mentioning from an administrator's perspective. The initial learning curve around policy configuration can be steep getting detection versus protection policies, exclusions, and Device Control rules dialed in correctly takes time and some trial and error, especially in environments with diverse device types and software stacks.

The console, while generally clean, can sometimes feel slow when pulling up large threat or activity logs across a big device fleet. filtering and searching through historical telemetry data isn't always as intuitive as it could be and exporting detailed reports require a bit of navigation.

Agent removal from endpoints is another area that needs improvement If a license has expired or a device is being decommissioned, removing the agent without the passphrase adds unnecessary friction to what should be a straightforward offboarding process.

Pricing and licensing tiers can also be confusing when you're managing multiple client environments as certain features like Ranger or the full storyline depth are gated behind higher tiers, which isn't always immediately clear during onboarding.

Overall, these are manageable pain points, but they are friction areas that admins will encounter in day-to-day operations. Review collected by and hosted on G2.com.

I really appreciate how autonomous and intuitive SentinelOne Singularity Endpoint is. It excels at detecting and responding to threats in real-time without the need for constant tuning or manual intervention. The storyline feature is fantastic, making investigations clear by showing exactly how events unfolded across an endpoint. The combination with MDR services feels like having an always-on extension of our security team that catches issues early, provides high-quality analysis, and gives us confidence that our critical energy sector systems are protected without adding unnecessary operational overhead. I also love how lightweight and stable the agent is across our environment. Even with a large number of endpoints, SentinelOne runs quietly in the background without causing performance issues. Review collected by and hosted on G2.com.

One area that could be improved with SentinelOne Singularity Endpoint is the overall usability and responsiveness of the management console, which can feel slow or occasionally unintuitive when navigating large data sets or drilling into detailed event timelines. Reporting is another place where there's room for enhancement. None of these are deal-breakers, but smoothing them out would make an already strong platform even more efficient for day to day operations. Review collected by and hosted on G2.com.

The best thing is how quickly it detects and blocks the threats without any manual work , agent is very light and doesn't slow down the system and it has very reliable real time threat monitoring. Another great part is Storyline, which shows the chain of events in a simple way Review collected by and hosted on G2.com.

Just a little complicated if you are new to the platform and some advanced options are hidden for the extra licensing which will increase the cost , and no readymade templates , customization is not easy Review collected by and hosted on G2.com.

Sentinel One has made significant progress and introduced a range of new features, setting itself apart from other solutions in the EDR space. Customer support has been great throughout the deployment process and after implementation. The ease of use can use some improvement as the UI can be convoluted making everyday use a bit complicated. Review collected by and hosted on G2.com.

Sentinel One's user interface is quite complicated and not very intuitive. Additionally, the agent often leads to noticeable performance problems on endpoints and tends to produce a large number of false positives. Review collected by and hosted on G2.com.

Autonomous AI response, a ransomware rollback storyline, Purple AI, SIEM solution, and data recovery—there are many SentinelOne endpoints giving the best antivirus. Review collected by and hosted on G2.com.

There’s really nothing to dislike about this product, although I do find the pricing to be a bit on the higher side. Aside from that, everything else is good. Review collected by and hosted on G2.com.

The incident analysis tool, such as the timeline, the Mitre TTPs used. Additionally, endpoint management provides a lot of useful data, also as an inventory. Review collected by and hosted on G2.com.

The dashboard widgets are limited. Additionally, the vulnerability section of the installed software is illustrative and cannot be integrated with other VA products. Review collected by and hosted on G2.com.

S1 has been pretty decent at catching things and it is pretty easy to use. I like the fact that I get plenty of details and that we get quick alerts. Review collected by and hosted on G2.com.

It catches normal IT admin tools still no matter what we whitelist. It gets annoying but we continue to live and ignore the alert. It is predictable so we know it is false. Review collected by and hosted on G2.com.

Some of the best things about the SentinelOne EDR is the cloud based management, easy to deploy clients, endpoint protection and the client performance. Review collected by and hosted on G2.com.

The SentinelOne Singularity EDR cloud based management portal could use a lot of work as it is often extremly slow and the new interface is full of bugs. Review collected by and hosted on G2.com.

SentinelOne is a best end point security tool. Using this tool we can easily analyse which assets contains malicious softwares and antivirus. SentinelOne supports blocking USB port also. Review collected by and hosted on G2.com.

Initial stage of configuration takes huge amount of time and need a technical support also. Some times sentinelone sends a false positive informations also. Review collected by and hosted on G2.com.

What I like best about SentinelOne Singularity Endpoint is its strong autonomous detection and response capabilities, which help quickly identify and contain threats with minimal manual intervention. The platform provides clear visibility into endpoint activities, an intuitive dashboard for investigation, and reliable real-time protection that supports efficient incident response in a SOC environment. Review collected by and hosted on G2.com.

One challenge with SentinelOne Singularity Endpoint is that alerts or events can sometimes reoccur even after they have already been mitigated, which may require additional verification and can add to alert noise for analysts. Review collected by and hosted on G2.com.