We use the product across all of our entities for EDR, threat detection, and response methods.
External reviews
External reviews are not included in the AWS star rating for the product.
Easy to use with good historical data and real-time detection
What is our primary use case?
How has it helped my organization?
We wanted a solution for protection. We had a number of entities with various EDR solutions. We wanted to centralize under one EDR solution, and we wanted one that was efficient and easy to manage with a small team.
The biggest thing for us was getting to a single platform. A single pane of glass has been nice. The ability to segment various sites out. The R-Back involved is super helpful for us as we are a multi-company organization. In general, the time has been greatly reduced for incidents.
What is most valuable?
The ease of use of the platform is very nice. The console provides excellent visibility into events that occur and, in general, the wide range of tools that are built into the agent itself.
My impression of the product's real-time detection and response capabilities is good. It definitely is a little bit different. It takes a little bit more time to learn than some of the other solutions that we have worked with in the past. Once you do understand it and once you're capable of running through the GUI and you understand what the logs and various windows they're trying to tell you, it's fairly straightforward.
The solution's automated remediation is good. I like that you can segment it into four options. You can choose to kill it at any time in the kill chain, so you can choose to quarantine it, you can choose to remediate, you can choose to roll back, you can choose to let it run. Being able to choose how far along you want those events to get is pretty nice.
The historical data record provided by the solution after an attack is decent. It gives you a flowchart of the attack. All along the processes you get good visibility and see all that were detected. Definitely, from a post-incident analysis perspective, it's very strong.
The solution has helped reduce our organization's mean time to detect by 20% to 30%. Given that extra 20% to 30%, it frees us up to focus on other items.
The solution's impact on our organization's productivity is good. It provides robust whitelisting capabilities and improves our productivity.
What needs improvement?
Agent releases need to be more stable before being pushed out.
Bugs need to be disclosed quickly.
The reporting, and the logging visibility, are not there. It's very, very crude and simple. It needs to be drastically expanded.
They need to expand their third-party integrations with SIM tools, and sites need to be given the option to expire at the end of the contract as well.
They could expand their integration with Kubernetes. They are trying to build out their third-party integrations. It does work well on Windows and Mac.
For how long have I used the solution?
I've used the product for three and a half years.
What do I think about the stability of the solution?
Agent stability and communication with the console and agents going offline can be an issue. It can be time-consuming to coordinate and fix. However, the cloud console is very resilient. It's mostly the agent releases where we might have issues. CrowdStrike agents seem a little more stable.
What do I think about the scalability of the solution?
We have about 3,000 users using the solution.
Scaling is no issue.
How are customer service and support?
Technical support is hit or miss. We have worked with some good agents and some less knowledgeable.
Which solution did I use previously and why did I switch?
We have used different solutions, including the fact that we still CrowdStrike at a couple of companies. We are now moving more fully towards SentinelOne.
The simplicity and ease of use were big and where SentinelOne stands out. It's a set-and-forget policy. Based on what we saw in testing, it was the best option.
In terms of telemetry data, we were all over the board.
How was the initial setup?
The initial setup was a little more complex when we first started. However, they've smoothed a lot of their implementation out and so it's gotten easier over time. It took us a couple of weeks to a month to deploy. About 20 were involved in the deployment. We have 30 to 40 companies around the world and it's across every company and every department.
The solution does require maintenance. You need to have agents up to date and cases closed properly. It does require you to be invested.
What was our ROI?
We have witnessed ROI. It's comprehensive in its detection capabilities and has saved us from multiple attacks. We've likely saved 30% based on prevented attacks.
What's my experience with pricing, setup cost, and licensing?
The solution is relatively cheaper and is willing to work with companies on pricing.
What other advice do I have?
We are customers.
For those who believe they already have a continuous monitoring solution in place, I'd advise that SentinelOne knows its own product. They can provide that extra confidence that nothing gets missed. And if you see a high number of alerts, they're able to really help you discern those and get down to the ones that matter most.
The solution doesn't affect our ability to innovate one way or another. It doesn't hold us back.
I'd recommend the solution and advise running a POC in your environment. It's good to run against CRowdStrike. They are seriously contending against CrowdStrike.
I'd rate the solution eight out of ten.
Helps keep the environment safe and is easy to deploy and maintain
What is our primary use case?
SentinelOne Singularity Cloud is on our computers and servers, mainly for threat hunting. I use it to ensure our devices remain healthy and are virus-free, ransomware-free, and threat-free.
How has it helped my organization?
We've felt more comfortable having SentinelOne Singularity Cloud because we've had a safer environment. The benefits from the platform were immediate.
What is most valuable?
What is most valuable in SentinelOne Singularity Cloud is that it can detect any threat on a machine or is being installed on a machine, so it is a platform that helps keep the environment safe.
I also found the real-time detection and response capabilities of SentinelOne Singularity Cloud impressive because it is a platform that uses artificial intelligence to determine what is normal and what is abnormal and can lock down any virus it may encounter.
SentinelOne Singularity Cloud has good automated remediation capabilities. It can catch threats that other antiviruses do not.
The platform also has a very good deep visibility feature, enabling you to run scans and find what you need.
SentinelOne Singularity Cloud provides excellent historical data to find what you need.
The platform reduced my organization's mean time to detect and mean time to remediate anywhere from a week to sixty days.
SentinelOne Singularity Cloud also helped free up SOC staff, enabling staff to work on other projects or tasks. Through the platform, the team does not have to spend as much time trying to go through different objects on the machines manually.
SentinelOne Singularity Cloud hasn't had a direct, everyday impact on my organization's productivity. What it has an impact on is uptime whenever there is a threat on a computer because it blocks it.
The platform has good interoperability with third-party solutions and integrates smoothly.
SentinelOne Singularity Cloud is able to support my organization's ability to innovate. It is good in that aspect, though I have yet to work with that extensively.
What needs improvement?
SentinelOne Singularity Cloud sometimes has false positives, but the main area for improvement I want to see is for it to become less resource-intensive. Right now, it can slow down processes on the machine, and it would be a massive improvement if it were more lightweight than it currently is.
For how long have I used the solution?
I've been working with SentinelOne Singularity Cloud for about three years.
What do I think about the stability of the solution?
I found SentinelOne Singularity Cloud stable.
What do I think about the scalability of the solution?
SentinelOne Singularity Cloud is scalable, and it is pretty seamless in terms of autoscaling based on my organization's workload demands.
How are customer service and support?
I have not contacted the SentinelOne Singularity Cloud technical support team.
Which solution did I use previously and why did I switch?
My organization used Windows Defender but switched because SentinelOne Singularity Cloud was more robust.
Due to its notifications, you can also have the turnout time of obtaining telemetry data from SentinelOne Singularity Cloud automatically, so you do not have to watch it constantly to see the data. The platform automatically shuts down the computer, takes it off the network, and then reports to you versus Windows Defender, which requires you to do a little more research into the items, as it did not provide as much information.
How was the initial setup?
I was involved in the initial setup of SentinelOne Singularity Cloud, which I found pretty straightforward.
What about the implementation team?
We worked with a consultant in implementing SentinelOne Singularity Cloud.
Only two people were involved, and the process took about two weeks.
What was our ROI?
I believe there is ROI from SentinelOne Singularity Cloud because of its impact on productivity through its ability to remediate and self-resolve some of the items.
What's my experience with pricing, setup cost, and licensing?
I have no information on how much SentinelOne Singularity Cloud costs.
Which other solutions did I evaluate?
We did not evaluate other options before choosing SentinelOne Singularity Cloud.
What other advice do I have?
If someone were to tell me that they do not believe they need SentinelOne Singularity Cloud because they have a continuous security monitoring solution in place, I would disagree because, with the SentinelOne Singularity Cloud platform, you can allow or disallow items within the machine. It automatically disconnects the machine from the network, helping you determine what is happening.
My organization works with the cloud version of the platform. It is deployed in multiple departments, and about four hundred users work with the endpoints.
SentinelOne Singularity Cloud requires maintenance, but it's not difficult to maintain.
Only one person takes care of the maintenance of the platform.
My advice to other users who would like to start working with SentinelOne Singularity Cloud is that I would highly recommend it based on its abilities and what it can find and remediate for you. It is easy to deploy and maintain, so I would tell others it is a solid platform.
My rating for SentinelOne Singularity Cloud is eight out of ten.
Offers a highly intuitive management console, easy to deploy, and saves us time
What is our primary use case?
We utilize SentinelOne Singularity Cloud to safeguard our clients and servers from viruses and to perform forensic analysis on threats.
We are a service integrator in the public sector in Italy, and we implemented SentinelOne Singularity Cloud because we lacked an antivirus solution.
How has it helped my organization?
The real-time detection and response capabilities of SentinelOne Singularity Cloud are excellent. We have implemented automated remediation on the Singularity platform. I have tested this on both our tenant and our customers' tenant, and we haven't encountered any issues with this method.
Singularity offers profound forensic visibility, which proves highly advantageous for in-depth analysis of events. Through a single console, we can observe comprehensive event details from start to finish.
The historical data record provided by Singularity after an attack is valuable. It allows us to identify any misconfigurations and has assisted us in rectifying errors during the deployment of group policies in Active Directory. This capability helps us manage group policies more effectively, particularly in terms of security policy deployment.
SentinelOne Singularity Cloud has been immensely helpful in mitigating issues for us. Our organization consists of approximately five hundred employees, including technicians and administrators, and Singularity has played a vital role in safeguarding our organization.
It has helped us reduce our MTTD.
Singularity helps us reduce our MTTR.
We have saved time. The automatic remediation helped me a lot when an event occurred, as it analyzed and remediated the issue automatically. This saved a significant amount of time.
Singularity operates smoothly and does not cause our laptops to experience any performance degradation, which has been very beneficial.
What is most valuable?
Deploying SentinelOne Singularity Cloud is a simple process that requires only three clicks.
The management console is highly intuitive to comprehend and operate.
What needs improvement?
The cost has the potential for improvement. I would appreciate it if the full edition could be made more affordable, allowing me to upgrade from the intermediate version.
For how long have I used the solution?
I have been using SentinelOne Singularity Cloud for more than three years.
What do I think about the stability of the solution?
SentinelOne Singularity Cloud is incredibly reliable. I have never come across a crash or experienced any downtime. I have never needed to initiate a support case.
What do I think about the scalability of the solution?
The SentinelOne Singularity Cloud exhibits high scalability. We only need to incorporate licenses to facilitate scaling, eliminating concerns regarding servers or databases, as it functions as a cloud-based platform.
How was the initial setup?
The initial setup is straightforward because the platform is cloud-based, allowing accessibility from anywhere, and deploying the agent is as easy as clicking three times.
Two people were involved in the deployment.
What about the implementation team?
We are a system integrator and we implemented the solution in-house.
What's my experience with pricing, setup cost, and licensing?
As a partner, we receive a discount on the licenses. Currently, we possess over 250 licenses, but there is potential for the licenses to become even more affordable.
Which other solutions did I evaluate?
We evaluated various products such as Trend Micro, Symantec, and Sophos. SentinelOne Singularity Cloud stood out among the solutions we evaluated as the easiest to manage and with the best performance.
What other advice do I have?
I rate SentinelOne Singularity Cloud a nine out of ten.
SentinelOne is a novel form of endpoint detection and response that has assisted us in effectively managing our clients and servers. It provides us with substantial visibility and aids in safeguarding our infrastructure against emerging threats.
Regarding maintenance, I check the event logs every two weeks, in addition to reviewing emails, and I update the schedule to manage the agents.
The interoperability with third-party solutions is good. We don't have any compatibility issues.
SentinelOne Singularity Cloud is updated bi-weekly or monthly and the signature to the client is updated every two days.
Evaluating SentinelOne Singularity Cloud is made simple by installing the client and logging into the console.
SentinelOne Singularity Cloud Review
Sentinel for cloud
A Comprehensive Cloud Security Platform.
CSPM, CWPP & CNAPP with Compliance Monitoring
100% cloud visibility for security
Offensive security with attacker’s intelligence
Shift-left security
The best CNAPP for multi-cloud environment
Solid security platform, easy integrations & more
Due to the ease of integration of the platform our team has been able to quickly implement and manage our cloud assets. This has further helped us prioritize our efforts in securing and hardening our infrastructure. Highly recommend PingSafe!