SentinelOne Singularity Identity Reviews

SentinelOne identifies problems and fixes most of them without our involvement. 

SentinelOne helps us find issues that we would have never been aware of and resolve them with minimal effort on our part. It's generally easy to manage our environment from the SentinelOne console. The console can't show us the number of machines that do not have the SentinelOne agent installed, but it does a great job once the agent is deployed. Having a central console is nice because we can see the various makes and models of machines in the same place, but it isn't too critical.

SentinelOne protects identities against exploitation well. The solution provides visibility into attack surface risk. I typically use it to find things that have already happened, but the information is there. The threat detection is impressive. 

Behind the scenes, SentinelOne has real people who evaluate problems and mark them as false positives. That's what I find most helpful.

I don't like SentinelOne's reporting tools. Their reports seem fine theoretically, but the issue is the sample size. For example, it will report that there were four incidents, and that equals 25 percent fewer incidents compared to the previous months. It would be a great improvement if I could expand the range to see reports for the last six months, but it's always one month. That would be an easy thing for them to resolve.

It's also challenging to know how many licenses we have. That number changes every day. We'll remove a bunch of machines, and they'll automatically give up their license after three months. I can easily report today's number, but I can't report over time. For example, we have 500 licenses, and when I checked one day, I found out we were using 509. I thought that would be a problem. Now, we've dropped down below that, so I think they're giving us a little leeway, which is great. It's kind of a mystery to me how close we are to using 100 percent of our licenses.

I started my current job in June, and they already had SentinelOne installed. I've been using it since then.

I haven't experienced any stability issues. 

I believe SentinelOne is extremely scalable. We haven't done it, but it would be easy to scale. 

I rate SentinelOne support eight out of 10. I've only contacted them indirectly through a coworker, but it went well. They resolved our issue fairly quickly.

Before SentinelOne, we had a traditional antivirus solution. We have a Microsoft license for Windows Defender, which I also think is useful, but I still recommend SentinelOne. It's a broadly different level of protection.

I rate SentinelOne 10 out of 10. SentinelOne will make you aware of things you did not know were happening, and it requires minimal effort to resolve issues. That's the perfect combination. A lot of tools will find problems and tell you about them, whereas SentinelOne goes that extra step in resolving them.

We use SentinelOne Singularity Identity for monitoring and mitigating threats within our network. Controlling our surface visibility, and monitoring all of our endpoints for software and even hardware vulnerabilities.

Initially, we implemented SentinelOne Singularity Identity to prevent a ransomware attack reinfection, but it has been transformed into our most important, critical, cyberthreat identification, prevention and mitigation solution. 

SentinelOne Singularity Identity has helped make our organization more secure with enhanced built-in monitoring. Not only by AI, trained and developed by SentinelOne, but also by a 24/7 cybersecurity team that are always monitoring for incidents and are available for support when it is needed the most

SentinelOne Singularity Identity provides a unified view which is important to our organization, particular when there's an incident and time is of the essence. 

Managing our environment from the SentinelOne Singularity Identity console is easy from an IT professional standpoint. I would easily rate it a nine out of ten.

I fully researched several companies including SentinelOne before we invested our money into a cybersecurity solution. I discovered that there were many top, well-known companies using SentinelOne to safeguard their identities and assets from exploitation and compromise. 

The visibility of Singularity Identity is great. A full spectrum of information about each endpoint, threat or incident is available usually only one or two clicks away, which helps to quickly and more accurately determine everything needed to identify, mitigate and prevent or eliminate a threat. Singularity Identity also provides all the tools and functionality necessary to override if something is deemed a false positive.  

Perhaps the most valuable resource that SentinelOne Singularity Identity has to offer is the AI-based automated mitigation. let's be honest, even the best team of cybersecurity experts are no match for some of the automated ransomware bots that can spread through an entire network in mere minutes, and that is where the AI assisted mitigation is key to stopping threats dead in their tracks. Situations where a human could potentially take hours to identify the source and take mitigating actions, SentinelOne's Artificial Intelligence handles the identification and mitigation on your behalf in mere seconds, until a human can assess the situation, and make appropriate adjustments as needed, significantly reducing our MTTD. 

I have confidence in Singularity Identity's ability to identify and mitigate threats. This solution, in my opinion, ranks among the finest, most capable products currently available on the market today. 

The AI-based detection, scanning, prevention and mitigation features are the most valuable features. 

The UI could stand to be more user-friendly, specifically for users that are not in IT, or for smaller mom and pop sized companies that may not have a dedicated IT department or budget for a fully managed solution. 

I have been using SentinelOne Singularity Identity for two years. Most of that time was fully managed by a 3rd party SOC/MSP, and now more recently, we have migrated to a self-managed cloud solution. 

I haven't experienced any stability issues, whether through the server, the console, or the clients. I am impressed with the stability of SentinelOne Singularity Identity.

We are currently still utilizing all of our other solutions simultaneously, until their licenses run out which include, Webroot EPP, and Microsoft Defender and Defender for Cloud. SentinelOne works perfectly side-by-side with these others, however, we will soon be removing Webroot as it is a tertiary and an unnecessary redundancy and offers no real advantages or capabilities over what SentinelOne already provides. 

For the deployment, I uploaded the package to our Intune portal and distributed it to all of our endpoints and devices. For devices that were not accessible, we used a flash drive to install it manually. 

Initially, we utilized an MSP. Then, there were two distinct deployments. The first deployment took place two years ago when we experienced a cyber/ransomware attack on our network. Throughout that incident, a third-party company assisted us in restoring and wiping every one of our computers and installing SentinelOne client on them, among other tasks. So at this phase, were were using SentinelOne as a fully managed solution. 

Now, within the last month, we have transitioned to managing our system internally. The subsequent deployment was executed through Intune and manual solutions. The encryption keys were migrated from the previous MSP with the help of the SentinalOne migrations team. 

The return on investment is evident through the value provided by SentinelOne Singularity Identity and its protective features. While the cost is in the higher tier of solutions of similar products, ask yourself, can you really put a price on your ability to sleep at night? 

The price of SentinelOne Singularity Identity is relatively high, but it offers numerous features and capabilities that make it well worth the investment. Not to mention peace of mind. 

We absolutely evaluated other solutions. This is an important decision for the security of our network and IT infrastructure. 

I would rate SentinelOne Singularity Identity a 9 /10.

SentinelOne Singularity Identity can easily work alongside other security products, in my experience, including Microsoft Defender.

for anyne considering this as a solution, I would suggest conducting your own further research on alternative products to firmly establish whether or not SentinelOne Singularity Identity is indeed the appropriate product. In my view, the licensing model is geared more towards medium operations like ours, which have around two hundred endpoints, on up to large scale enterprise-sized companies. The licensing structured minimum of 200 endpoints may be a bit much for a small company with just a few endpoints. But, I in summary, I am happy with the choice to buy this product, and as our company grows SentinelOne will allow for that growth. 

We use SentinelOne Singularity Identity as our Extended Detection and Response solution. I engage with it daily since it's essentially one of my routine tasks. I access the platform to monitor our environment, check for any incidents, and address any related matters.

We began utilizing the solution primarily to manage response to detections, mainly for threat detection.

SentinelOne Singularity Identity has assisted our organization in reducing manual workload and providing alerts when issues arise in our environment.

It Identity provides a unified view.

Managing our environment using SentinelOne Singularity Identity console is easy. It is extremely easy to push agent updates using the console.

It does a great job protecting identities from exploitation.

Singularity Identity does a good job of providing us with visibility into our attack surface risk and where we should be looking.

SentinelOne does a good job of detecting and preventing threats.

SentinelOne Singularity Identity has helped reduce our MTTD by hours because we have moved from manual identification to automated.

All the features within the XDR are valuable as a whole for our organization.

The first-level support has room for improvement. We are consistently having to request escalations, particularly when we need to add exclusions for false positive readings. Their typical response is that we can create exclusions, but we disagree. For instance, if a manufacturer installs rpc.net or a similar locating device on our external laptop, that should be an exclusion handled on the SentinelOne side. It shouldn't be our responsibility. This is just one example. Additionally, SentinelOne often claims that their first-level support provides a dedicated exclusion, but we usually disagree with this assessment and push back.

I have been using SentinelOne Singularity Identity for three and a half years.

I give the stability of SentinelOne Singularity Identity a ten out of ten.

I give the scalability of SentinelOne Singularity Identity a ten out of ten.

The first-level support needs improvement but the other levels are great.

Positive

We have seen a return on investment.

The cost of SentinelOne Singularity Identity is better than CrowdStrike.

We also evaluated CrowdStrike but  SentinelOne Singularity Identity was a better fit for our environment.

I would rate SentinelOne Singularity Identity a nine out of ten. I recommend using SentinelOne Singularity Identity as an additional layer of security, which also aids in reducing manual workload.

I also recommend that those who are evaluating the solution ensure they complete their work on the front end so that the rest of the deployment proceeds smoothly.

We have deployed SentinelOne Singularity Identity across 3,000 endpoints spanning multiple clouds, departments, and users. 

We use SentinelOne Singularity Identity to gain visibility around our server.

What I appreciate about SentinelOne Singularity Identity is its capability to assist us with legacy servers, enhance visibility, and provide protection for them. We also utilize CrowdStrike for endpoint detection, and Rapid7 for incident response, protection, and Security Information and Management. However, SentinelOne stands out among these products because it effectively supports preexisting or older servers such as Microsoft Server 2005 and 2010. So far, our experience with SentinelOne has been entirely satisfactory, making it one of the top solutions.

SentinelOne Singularity Identity helps us protect our assets.

SentinelOne Singularity Identity offers a unified console. Managing our system through the console is straightforward. Interns can use it proficiently without any concerns or complaints. Generally, they become adept after undergoing onboarding training for approximately two to three weeks. When they have inquiries, we can guide them appropriately. I would describe it as relatively easy. The situation is progressively enhancing. It hasn't always been like this. There's a definite improvement, and I must acknowledge that. The user experience of the application is indeed getting better.

Singularity Identity does its job of protecting identities from exploitation. 

Singularity Identity provides visibility into our attack surface risk and we use them because they support legacy services.

Singularity Identity's ability to detect and prevent threats is good.

Singularity Identity has helped reduce our MTTD identity-based attacks.

The protection provided by SentinelOne Singularity Identity is the most valuable feature.

We haven't received the expected support whenever we've had questions. There are still gaps in our ability to obtain information from them, and some of their responses are unsatisfactory. Do they expect us to engage high-level consultants each time we have these questions about reporting? SentinelOne needs to thoroughly examine its competitors' actions. Companies like Trend Micro, McAfee, and CrowdStrike are their competitors. They should also take a look at Palo Alto and Symantec to understand their strategies and how they can attract more people. We are currently paying for CrowdStrike and Rapid7. Personally, I'm not very fond of Rapid7. I'm more accustomed to using Splunk. In my previous job, I used Splunk Enterprise for six years. This is the direction SentinelOne should take: enhancing user-friendliness and providing better support. For instance, if I need to generate a report and encounter clarity issues or gaps, how can they assist me in resolving these problems? Can they involve consultants or product managers? Because, in most cases, the feedback we receive after raising a ticket isn't what we hoped for. This lack of satisfaction also raises more questions for my leadership team. They are genuinely interested in understanding the situation better. This is the aspect that I believe needs attention. However, I think the responsibility lies primarily with SentinelOne to analyze their competition's practices. Perhaps they could consider organizing a pilot program or a webinar, where they can inquire about participants' preferences. This way, they could effectively engage with users, understand their needs, and tailor SentinelOne accordingly. Based on my experience with Apple over the years, I can attest that support plays a critical role. That level of engagement, human interaction – it's of paramount importance. SentinelOne needs to raise the bar when it comes to customer support and engagement.

SentinelOne Singularity Identity has the potential for improvement. It could offer a broader range of visibility and more accurate coverage, as the underlying functions of these tools are essentially the same, just applied in different use cases. Another tool to consider is SecurityScorecard. Questions arise about what they scan, how they conduct scans, and how reliable their results are, particularly in relation to bypassing firewalls. Trustworthiness of the provided information and its accuracy are concerns that require more customer engagement. This necessitates webinars and workshops to delve into their brand and product specifics. It's important to highlight what sets SentinelOne apart and why it's a favorable choice. While I do appreciate SentinelOne, I'm seeking reasons to fully commit and present these to my Chief Executive and the rest of the leadership team. Since they aren't well-versed in technical jargon but rather in business language, it's crucial to bridge the gap between technological details and business benefits. This alignment is vital for securing their buy-in, especially with the upcoming budget discussions. From my perspective, Customer Success Managers should play a significant role. I'm unsure whether the model followed is a Customer Success Leader or a Customer Account Manager. However, it's important for them to actively engage with all customers, arranging meetings and offering support. Comparatively, I hold great respect for Rapid7 and Splunk. During my interactions, while I worked with Rapid7's CSM I consistently engaged with my team and me, usually bi-weekly if not weekly. Their inquiries are insightful, although we might not always have immediate answers. Their proactive approach in assisting us to maximize the tool's utility, even accommodating missed training sessions by arranging new ones, greatly enhances user comfort. The analogy here lies in how tools like Microsoft Suite are used by everyone and Google came along with Sheets providing a user-friendly experience, effectively challenging Microsoft's dominance. A similar strategy should be pursued by SentinelOne - to compete while prioritizing user experience over just the interface. The tool should enable users to seamlessly accomplish tasks and yield outcomes. This is essential not just for experienced individuals like me, but also for less technically inclined individuals who may lack IT expertise and the patience for intricate inquiries.

I have been using SentinelOne Singularity Identity for one year.

SentinelOne Singularity Identity is stable.

SentinelOne Singularity Identity scales well and is load balanced.

The initial is straightforward. The deployment includes myself, another team member, server team members, networking members, and vendors. Our security architecture is fairly stable. We've invested time in constructing and establishing the architecture to bring it to its current state. This approach ensures that when the time comes to scale or onboard a new product or platform, the process is usually uncomplicated. We possess the network diagram.

We worked with a vendor for the implementation.

I would rate SentinelOne Singularity Identity as a seven out of ten, considering all the effort that SentinelOne invests in endpoint cloud and identity management. I'm also allowing room for growth. There's always potential for growth. It should never be perceived as a negative, but rather as an opportunity for growth, as we can continuously evolve and make improvements.

We are engaged in the manufacturing business. Consequently, we will inevitably have some outdated services due to the nature of our business. The application we employ is integral to our operations; it's an essential part of the adoption process and security measures. Implementing this specific application is costly, amounting to millions of dollars for companies. Therefore, we don't simply suggest discarding the application. Instead, we strive to find ways to safeguard these valuable assets. This is where SentinelOne comes into play. However, I would encourage SentinelOne to consider the available market. Why should we rely on two different tools when we could solely utilize their services? Why should we incur expenses with other providers when we could integrate SentinelOne across all our servers, workstations, and endpoints?

I'm curious about the quality of SentinelOne's vulnerability database. How far back does it provide coverage? What is the extent of its support for users? Can it be used on a Windows 2000 server? Is real-time coverage available?

It's a good idea to layer technology. Someone who already has a Microsoft license and is using Defender can still use Singularity Identity. I would recommend engaging with the Customer Success Managers at SentinelOne. Request a demo and a live presentation. Ask someone to guide them through the process and provide them with value propositions that will assist them in making well-informed decisions. Also, inquire about the security architecture, level of maturity, and existing environment. All of these aspects will help them find the best solution, even if it involves connecting with a consultant. Engagement is always crucial. Each organization's situation is unique, and its architecture varies. Architecture style, design, and communication practices differ among organizations. Consider how the organization would like the setup to be. What's their network configuration? How will different components communicate? Which parts are accessible, and which are restricted? Collecting all this information tailored to each organization will greatly enhance that organization's understanding.

We use SentinelOne Singularity Identity as our endpoint antivirus solution.

SentinelOne Singularity Identity has enabled us to safeguard all of our endpoints, as opposed to our previous solution, which only protected a portion of our endpoints and operating systems.

We are happy with the unified view that SentinelOne Singularity Identity provides. The Unified view is important to our organization.

Once we have overcome the learning curve, managing our environment from the console becomes straightforward, and transitioning between menus is not complicated.

SentinelOne Singularity Identity has assisted in decreasing our Mean Time to Detect. Microsoft Sentinel is ingesting data from SentinelOne to alert us about specific threats. Whereas in the past it used to take us a couple of days to detect these threats, we are now receiving proactive threat alerts promptly, thanks to the ingestion of logs into our SIEMs.

SentinelOne Singularity Identity has assisted in decreasing our Mean Time to Respond.

The threat detection capability is the most valuable feature.

Our engineers are dealing with issues to add exclusions to the antivirus for custom applications.

I have been using SentinelOne Singularity Identity for eight months.

The solution is extremely stable.

The solution is highly scalable.

The technical support is good.

Positive

We replaced ESET with SentinelOne Singularity Identity due to its compatibility with various versions of Mac and Windows and its ability to detect and respond to risks more efficiently.

The price is affordable.

We evaluated Darktrace and Defender.

I would rate SentinelOne Singularity Identity a nine out of ten.

We have an E5 license and Defender works well with Microsoft SIMs but SentinelOne is superior in detecting threats, especially zero-day threats.

Organizations should ensure they have staff that can support the solution before implementing it.

I use the solution in my company as an EDR product. In our company, we use it to protect our endpoints. The tool is pretty famous.

In terms of the most effective feature of the product when it comes to threat detection, I can say that it need not be connected to the management server as the agents work independently. The rollback feature offered by the product is good.

In the future releases of the product, it would be great if the solution allows the use of STAR Rules Engine during on-premises installations. Being able to use STAR custom rules would be wonderful. STAR Rules Engine is a feature that cannot be used during the tool's on-premises installations.

Agent connectivity can be improved, as it is one aspect of the product with certain shortcomings.

I have experience with SentinelOne Singularity Identity.

Stability-wise, I rate the solution an eight out of ten.

It is a scalable solution. Scalability-wise, I rate the solution a ten out of ten.

When it comes to SentinelOne Singularity Identity, I have designed it for multiple clients of our company. My company has clients with a range between 500 and 16,000 endpoints.

The solution's technical support is knowledgeable.

The product's initial setup phase is straightforward.

I am an architect, so I don't deploy any tools. I only design solutions.

The solution is deployed on an on-premises model.

There is a need to make yearly payments towards the licensing charges associated with the product. Whether the product is expensive or not is something that depends on what we need from it. SentinelOne offers multiple options. I think the prices associated with the product are okay and it is not too expensive.

Compared to the other solutions in the market, I can say that SentinelOne Singularity Identity does not work only based on signatures, and it works on API patterns and how a file or link behaves, it tends to catch zero-day attacks, the most advanced malware and ransomware attacks. The product has got less false positives, making it one of the better solutions.

I am an architect and not an administrator. I won't be able to provide details on how SentinelOne Singularity Identity's behavior-based detection impacted our company's response to an incident.

To those who plan to use the product, I would say that it is a straightforward and easy to use solution. Users of the product need to ensure that they maintain the connectivity with the agent.

The artificial intelligence feature in the product enhances the security capabilities very much because it provides alerts. The good part of the product is that our company gets treated as a part of its extended knowledge base, and so we get to know about the attacks that are happening elsewhere in the world.

Considering the agent connectivity keeps going offline, I rate the tool a nine out of ten.

We were using the solution more as an endpoint security. It protects against cyber threats and offers improved protection against particular cyber threats. It has SIM capabilities and XDR. We use the security based-incident management and the capabilities of XDR in terms of threat hunting and threat intelligence.

The XDR capabilities are very good. 

If you get attacks and need to cross-correlate across attacks, it's very helpful.

It offers quality threat intelligence. You can look into it very fast. 

If a threat has happened many times, we can automate remediation for that specific threat.

When it comes to security operations, we can show a complete integrated dashboard that shows risk, score, value, and threat status.

It provides us with a unified view. The cross-sectional correlation is good. That's technically what it is. It shows when attacks are happening or when attacks are happening. We can do comparisons and find resolutions or figure out a time to resolution. You can centralize it or use it from an endpoint. 

Managing the environment is okay. You can't manage it with one singularity console. It doesn't have observability capability or event correlation. As part of a bigger solution, it does its job. However, you need to use multiple solutions for a holistic approach. It will improve the visibility of threats, however, to eliminate blind spots and help you understand threats better.

The threat detection, investigation, response, and hunting are good. It helps provide visibility across the stack. 

Whenever a threat is detected, it can quickly find a resolution with respect to MTTR. It looks into the entire history of the logs and coordinates with the source system. There will be a resolution to resolve the root cause. Then, you can automate it, so that, in the future, if there are any similar attacks, the solution will get triggered. This helps with our overall mean time to resolve. When you have an SLA< you'll need to have a resolution within the SLA. It helps us to ensure there's a workaround so we can get a resolution within 30 minutes. You can achieve 99% of issues if it's already a part of the attack vectors. 

The root cause of automation could be better. If you have a complex ecosystem, you need an automated threat response mechanism. We'd like an automated correlation of threats.

The SOC efficiency could be better. It would help improve the MTTR.

I've been using the solution for the last three or four years.

They still need to work on a fully integrated solution, which they are planning to build over time. 

The solution has been scalable for me. However, it depends on how it is interacting with security-based orchestration. If an organization keeps expanding, there needs to be scalability between vendors in the case of third-party integration. 

Technical support knows the product and its functionality. The problem is during practical scenarios when the product is integrated with third-party products. It's very easy for Microsoft to say it's not their particular problem or that they can't pinpoint the problem due to the third party.

Neutral

There are a lot of good solutions, such as Elastic, which is open-source. With the same agent, you'd get search, security, et cetera, so you won't need multiple licenses. 

Sumo is another good tool that's good for both SMBs and enterprises. It has correlation and search capabilities. The events are correlated, and alerts are separated and that's given to you out of the box.

There are Microsoft solutions that don't have as many tools out of the box. 

Doing a business case analysis, retooling is required for an end-to-end scenario if you use Microsoft. 

I validated the design and configuration. I wasn't hands-on with the implementation. 

If it is a Microsoft shop, it's a straightforward setup.

Integrations make the setup more complex. If the customer has a hybrid scenario, you need to have certain configurations. When you get into SOAR, you may run into issues. Out-of-box integrations will not be clear. 

When you write workflows, these workflows have a breakage, or you have siloed data streams. You don't have a mechanism for monitoring these. There has to be a mechanism for monitoring, otherwise, you won't know something is not working until it has broken down. Microsoft does not offer something like this out of the box. 

We have various people qualified to handle implementations. We have our own integrators. 

It's hard to break down the ROI on an individual product with fewer capabilities. 

If a company is a Microsoft shop, it makes sense to stick with Microsoft tools. It doesn't have mature SIEM capabilities or root cause analysis. It does not have a seamless integrated log management solution within various environments. Large enterprises might have Linux and Unix-based solutions. Then it makes sense to look for solutions that offer more end-to-end security options. Microsoft may look like a cheaper solution; however, when you break it down, it won't be less expensive. You'll need more tools. 

Windows Defender comes by default with Windows. When you are using Sentinel One on top, it depends on the firewall solution you are using in between. From an endpoint perspective, if these are going to your endpoints, you may have a choice of having separate antivirus solutions, and Defender may be disabled. Singularity still works as it's a centralized solution. 

I'd rate the solution six out of ten. 

We use SentinelOne Singularity Identity for the security of our whole network environment. We use the solution to protect the identity of our company. Before using SentinelOne, we had an incident where we were compromised. We went with SentinelOne to overcome such compromise issues and the safety of our environment because it had some good reviews.

We have not been compromised because of the solution. We have not faced any issues of hacking or malicious incidents. With SentinelOne Singularity Identity, malicious files get directly detected, and the system gets quarantined. The solution keeps our work very smooth. We're not having trouble with it or because of it at all. On the contrary, the solution makes our work easier.

SentinelOne Singularity Identity is very lightweight as an agent or software. It's very lightweight and doesn't consume resources from any computer. It's not a burden on a system, which makes it a very good agent or product to use. It's an efficient solution.

The solution's support is available 24/7. I'm in touch with the solution's support team since we recently got their mobile application protection. SentinelOne's support, APIs, marketplace, and response time are amazing so far.

A query raised with the solution's support team takes a day or two to get resolved. The solution's query resolution time could be reduced further, and a faster resolution could be provided.

We've been using SentinelOne Singularity Identity for one year and two months.

So far, we haven't faced any bugs or stability issues with SentinelOne Singularity Identity. We've been really happy with the solution.

SentinelOne Singularity Identity is a scalable solution.

Before SentinelOne Singularity Identity, we were using CrowdStrike. We switched to SentinelOne Singularity Identity because of functionalities since we were compromised while using CrowdStrike.

SentinelOne Singularity Identity's implementation was simple.

The deployment was done with the assistance of SentinelOne's professional team, and it was not complex. The solution's deployment was done within a few hours, and only I was involved from our company in the deployment process.

It's only been a year since we started using SentinelOne Singularity Identity. Considering the services and peace of mind we are getting against the amount we paid for the solution, the return on investment has been good.

SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good.

SentinelOne Singularity Identity console provides a unified view. It makes your work faster and easier to get an overview of your whole organization. It helps us to see where the problems are, what needs to be fixed, or if everything's fine. It does help us save time.

It's very easy to manage our environment using the Singularity console.

SentinelOne Singularity Identity’s ability to protect identities from exploitation is very good. We had a few incidents where it blocked even ransomware attacks for us. It did a really great job of protecting us and keeping us safe.

SentinelOne Singularity Identity provides deep visibility into our attack surface risk.

SentinelOne Singularity Identity's ability to detect and prevent threats is really good. It blocks and notifies the IT team if it finds anything malicious or suspicious running in the processes. Then, we can assess whether it's malicious or not. If we analyze something as a false alarm, the solution keeps that thing in mind and does not bother us again for the same issues in the future.

Singularity Identity has helped reduce more than 50% of our mean time to detect identity-based attacks. It gives deep visibility on where and how something initiates so we can directly go to the root cause instead of finding out how or where it started. So, it does give us a boost in our time.

I have not used Windows Defender, so I cannot comment much on it. SentinelOne Singularity Identity has been much easier to use, understand, and contact support than the other third-party protection software we used. I would recommend others to try it at least for a week or a month to see the difference. They can observe how its AI learns, behaves, improves your work environment, protects it, and keeps it safe.

Based on my experience, I have been really enjoying this solution. I recommend that people try SentinelOne Singularity Identity for at least a week and then compare and evaluate it with other competitors. There will definitely be a huge change in their perspective.

Overall, I rate SentinelOne Singularity Identity ten out of ten.

We use SentinelOne Singularity Identity to end AD credential misuse when working from home. We wanted to make sure that our environment was secure and place any defection-based endpoints on lockdown. The solution ensured that we were able to detect AD attacks and steer attackers away. We also wanted to make sure we were hiding our local data.

We're a lot more secure with SentinelOne Singularity Identity. We're more confident that we're going to be on top of any threats, and we'll get alerted right away. Anytime a password expires, my coworker sets up a report. We're really on top of all our user AD accounts.

I was recently able to customize the UI, including the filters, based on my use case. Having high visibility into all of our network concerns and a customizable UI are the most valuable features. The solution only requires one reboot to finish the installation. The solution's real-time protection is also really beneficial for us.

The last time I called to receive support, it wasn't as fast as I wanted. The resolution turnaround from SentinelOne Singularity Identity's support should be improved.

I have been working with SentinelOne Singularity Identity since February 2022.

I found SentinelOne Singularity Identity a lot more friendly in terms of performance. The solution shows no lagging, and it works very well.

SentinelOne Singularity Identity has the ability to work with different operating systems devices.

I rate SentinelOne Singularity Identity's scalability an eight out of ten.

We raised a support case with the solution's technical support team. We called the support team and tried to get help to run a report to see which devices were actually utilizing SentinelOne. We also had another report question about how we could take a look at AD accounts with expired passwords.

The support agent on the other line didn't seem very familiar with the product, and that was pretty much it. When they told us they would get back to us with more information, it took a while. They got back to us three weeks later when we had already figured it out on our own.

Neutral

The solution's initial setup was very straightforward.

I was involved in the solution's deployment in our organization. The rest of our tier two team and I worked with the trainers, implementation coordinators, and agents at SentinelOne. They walked us through the setup, which took around three to four weeks. Since we deployed on the cloud, we didn't need to set up VMs for any SentinelOne servers. We just provided access to our AD and the information they needed, like our server names. We set them up with accounts with which they could get into our AD servers, and that was it.

We have seen a return on investment with SentinelOne Singularity Identity. The comfort level, the reports we get, and our confidence in the security of our AD accounts are definitely worth the investment in the solution.

The solution barely met the budget for this project. SentinelOne could find ways to help healthcare institutes by lowering the solution's cost for hospital implementations. The pricing is a bit high.

We didn't use a different solution before SentinelOne Singularity Identity, we just had an AD. One of the reasons why we chose to go with Singularity Identity is that we moved over our Outlook Mailbox 365 accounts to the cloud. Previously, we had on-site exchange servers with the mailboxes, and we moved all those mailboxes to the cloud.

Since they're all linked with the AD credentials, we needed something a lot more secure. We moved 800 mailboxes to the cloud, and Singularity Identity helped us with that transition. We never had a product like Singularity Identity just to monitor AD.

I would tell users to book a demo first. Then, if they do decide to implement SentinelOne Singularity Identity, they should work with support or even their vendor support for the network firewall.

We had to set up a lot of exclusions on our firewall and even Windows firewalls on our AD server to ensure we weren't blocking any network traffic when a rule was added or deleted. My advice to users would be to ensure they are careful with the network firewalls when deciding to move forward with implementation.

Singularity's console provides a unified view, which works very well. We're able to monitor all of the different areas in our infrastructure. We even have the ability to run reports where we're in touch with support and our trainers from SentinelOne. They ensure that we know how to use the product and show us how to make our infrastructure more visible.

This unified view is very important for our organization. We widened the net for compromised devices to include managed and unmanaged devices. Even if our server runs a different OS, we can get a lot of actionable information related to that asset. If I have a couple of MacBooks, it doesn't really matter what the OS is. I can store that information in Sentinel. The solution really allows us to have more functionality with an active directory.

SentinelOne Singularity Identity is doing a good job of protecting identities from exploitation. Identity-based threats are one of the biggest weaknesses of malicious attacks. We get a lot of spam emails, and at the end of the day, they're just trying to get AD credentials.

SentinelOne Singularity Identity really helps improve our identity security posture. We're able to provide the team and even the managers and IT director here with real-time alerting and deception capabilities. We really trust SentinelOne Singularity Identity.

We're really happy with Singularity Identity's ability to provide visibility into our attack surface risk. The amount of information the solution allows us to get and the real-time alerts are really helpful.

Singularity Identity helped reduce our mean time to detect identity-based attacks. We have reduced the time we take to jump into servers and then run reports on our own because we've got the dashboard on a monitor in our office. We have real-time alerts right on the monitor. Anytime we see a red alert, we're on top of it. It makes monitoring a lot easier.

I would tell someone researching SentinelOne Singularity Identity that they need to do a demo with SentinelOne. There, they will be able to see the solution's pros and cons. They can see for themselves how it's a much more effective tool than Windows Defender.

If they book a demo, they will be convinced to get hold of a SentinelOne agent to look at some cost agreements and implementation. The bottom line is that SentinelOne Singularity Identity is the best anti-malware. It is a lot better than Microsoft Defender, and they would be convinced after a demo.

Overall, I rate SentinelOne Singularity Identity an eight out of ten.

Cloud protection is very important to us. We have almost 400 applications and a lot of data, some on-premises and some in the cloud. We need to make sure that all of our data is protected, and SentinelOne Singularity Identity offers the data protection and identity protection that we need.

We are currently evaluating whether to continue with our current solution or switch to SentinelOne. We want to make sure that we are saving costs and resources, and that our data is 100 percent secure. SentinelOne seems to be able to offer us both of these things, so we are leaning towards switching to their solution.

Our top priority is to make sure that our data is safe. If something were to happen, we need to know that we have support from SentinelOne.

SentinelOne Singularity Identity provides a unified view of our security posture through its console. This unified view is important because it will make it easier for our security analysts to manage and own the product. As a result, we will need fewer resources to do a better job.

Managing our environment through the console has a learning curve. The more we use the solution, the more experience we gain. However, it is reassuring to know that SentinelOne is willing to provide support if needed. This is important to us because we want to be able to take over the management of our environment eventually without requiring too many resources. We believe that we are well-positioned to achieve this goal, but it will take time. We do not expect to be able to do it immediately, but we believe that it is possible within a few months to a year.

Although we are still evaluating the solution, we are hopeful that it will protect identities from exploitation. The reviews we have seen suggest that this is the case, and it is very important to us as a corporate law firm. We handle sensitive client data, and if an unauthorized user were to gain access to this data, we could be sued by our clients. We therefore need to protect our identities and our admin accounts, which have superuser access to the system. We are confident that Singularity Identity can do this, and we are currently evaluating its capabilities.

Singularity Identity provides good visibility into our attack surface, which helps us prevent unauthorized access. We do this by getting alerts or notifications about any suspicious activity and then investigating them. Even if we get a lot of false positives, it's worth it because the one time we uncover a real attack will make it all worthwhile. I think this is one of the key features of Singularity Identity, and I'm sure the developers would agree.

Singularity Identity's ability to detect and mitigate threats is one of its key features. I am not sure if it can prevent threats altogether. As a corporate billion-dollar law firm, we are always under attack, and there will always be threats. We receive phishing emails multiple times a month, a week, or even a day. Therefore, it is not about preventing threats, but rather detecting them and allowing us to respond and know how to handle them. I do not think we can prevent threats from happening, but Singularity Identity can give us the ability to prevent them from succeeding.

Although we are still evaluating Singularity Identity, I am confident that it will reduce the MTTD identity-based attacks.

SentinelOne Singularity Identity's support seems to be unmatched, at least according to what I was promised. This is very important to us. SentinelOne Singularity Identity has excellent reviews. We checked out the Gartner reviews of their offerings, and everything seems to be in order.

One of the top functions we're interested in is cloud protection. Whenever we talk about moving something from on-premises to the cloud, that's always the biggest concern of our executives. So, we're always very interested in offering them that kind of cloud security. So far, SentinelOne Singularity Identity seems to be a good option. However, we're still evaluating our options.

SentinelOne Singularity Identity could be more user-friendly. I had some questions that I had to go back to SentinelOne to try to understand. Therefore, for someone who is trying to get by with minimal experience, I believe it is very important to make it as simple as possible for consumers to have the best user experience.

SentinelOne Singularity Identity should be made more affordable so that organizations can better budget for it.

I have been evaluating SentinelOne Singularity Identity for three months.

SentinelOne Singularity Identity has been stable so far.

SentinelOne Singularity Identity is scalable and we have not encountered any issues as of yet.

The technical support has been very helpful and responsive. I had no issues, and I am very happy with the outcome.

Positive

We have not yet completed a full deployment into production, as we are still testing. However, the initial deployment for testing was simple.

We use a consultant called Blue Margin. They helped us with all of our Microsoft deployments and licensing, as well as when we got Power BI. We always run things by them. In this case, I'm not sure yet how much help we'll need when we go to production. So far, we haven't needed much help because it's been straightforward. However, we can engage Blue Margin if needed. The decision of whether or not to engage them typically comes down to whether we have enough resources to handle it ourselves or if we need more help.

The pricing for SentinelOne Singularity Identity is challenging. I understand that they put a lot of time and effort into developing this product, so it can't be too cheap. However, from our perspective, we need to get buy-in from our executives, and that means the price has to be within budget. The lower the price, the more likely it is that the software will be approved.

In a perfect world, the price would be within budget and it would be a great price. However, as long as SentinelOne's pricing is competitive with their top competitors, I think they have a great product that should be approved. I'm currently evaluating how their pricing compares to other products.

Ideally, I would like SentinelOne to lower their prices a little bit. This would make it easier to get buy-in from my executives and would allow us to afford the software. However, I understand that they can't give the software away for free.

I would rate SentinelOne Singularity Identity a nine out of ten.

We are a Microsoft shop. Most of our products are Microsoft, and we have the Microsoft licenses. I believe that SentinelOne Singularity Identity will eventually save us time, effort, cost, and resources. I am working to prove this with my research, and so far, I think the answer is yes. I wanted to share this feedback in case it helps someone else who is in a similar situation. So far, everything is positive. However, the next steps for me are to confirm this, compare SentinelOne Singularity Identity to other products, and then make a recommendation. Hopefully, I will get the buy-in and we can move forward.