The most valuable thing about SentinelOne Singularity Endpoint is how much it can handle on its own. Its autonomous detection and response catches threats in real time and can roll back malicious changes without anyone needing to step in, which saves a lot of manual cleanup. I also like that the single console provides clear visibility across all our endpoints, and the behavioral AI flags suspicious activity that signature-based tools often miss. On top of that, the lightweight agent has very little noticeable impact on device performance, and the process-level storyline view makes it much faster to investigate an alert and understand what happened. Review collected by and hosted on G2.com.

While SentinelOne Singularity Endpoint is a robust and highly capable XDR and endpoint protection platform, there are a few areas that could be improved for a smoother administrative experience:

UI / UX and Navigation: The management console can occasionally feel dense and overwhelming. Finding specific historical telemetry or deep-dive threat details across multiple endpoints sometimes requires navigating through a steep learning curve, and the layout could benefit from a more streamlined, intuitive information architecture.

Performance and Resource Impact: Although lightweight compared to legacy antivirus solutions, initial full-disk scans or heavy behavioral monitoring spikes can occasionally lead to noticeable CPU utilization bumps on older or resource-constrained endpoints.

Support and Onboarding: Initial onboarding and policy fine-tuning require a steep learning curve. While the technical documentation is comprehensive, reaching tier-two support for complex configuration queries during high-pressure incidents can sometimes experience minor response delays. Review collected by and hosted on G2.com.