SentinelOne Wayfinder Threat Detection and Response Reviews

My primary use case for SentinelOne Wayfinder Threat Detection and Response is to proactively detect, investigate, and respond to security threats across our environment. In my day-to-day work, I use it to monitor alerts, investigate suspicious activity, identify indicators of compromise, and prioritize incidents based on risk. It helps me reduce false positives, speed up investigation, and improve our overall security posture by providing actionable threat intelligence and response guidance.

SentinelOne Wayfinder Threat Detection and Response has become an important part of my daily security operations, providing me better visibility, helping me prioritize incidents effectively, and speeding up investigation by providing the context I need.

SentinelOne Wayfinder Threat Detection and Response has improved our security operation by helping us detect and investigate potential threats more quickly. The centralized visibility and automated threat analysis have reduced the time required to triage alerts and investigate incidents, allowing my team to focus on higher-priority tasks. I have also seen improvements in our security efficiency because analysts spend less time manually correlating events across different tools. The additional context provided with alerts helps us make faster and more informed response decisions, improving our overall security posture and reducing the likelihood of important threats being overlooked.

The features I find most valuable are the automated threat detection, endpoint visibility, and incident timeline. Automated threat detection helps identify suspicious activity quickly without requiring constant manual monitoring. The endpoint visibility provides detailed information about affected devices, processes, and user activity, making investigation much easier. The incident timeline is another standout feature because it presents events in chronological order, allowing me to understand how an attack progressed and identify the root cause more efficiently. Having these capabilities available from a centralized console helps my team investigate and respond to incidents faster while reducing the time spent correlating information from multiple security tools.

One additional strength is the platform's usability, as the interface is intuitive, making it easier for security analysts to navigate alerts, investigate incidents, and find the information they need without a steep learning curve. It also integrates well with other security tools, streamlining workflow and reducing the need to switch between multiple consoles. Overall, the combination of ease of use, strong visibility, and efficient investigation capabilities makes it a valuable addition to our security operations.

SentinelOne Wayfinder Threat Detection and Response helps my team prioritize incidents based on risk and reduce false positives by centralizing threat detection and providing clear visibility into suspicious activities across endpoints. The platform correlates security events, prioritizes high-risk alerts, and provides context that makes investigation faster. Features such as automated threat detection, incident timelines, and detailed endpoint visibility help us quickly understand what happened and determine the appropriate response. This reduces manual effort, shortens investigation time, and enables us to respond to potential threats more efficiently.

SentinelOne Wayfinder Threat Detection and Response's AI capabilities provide strong governance and security by helping analyze large volumes of security data, identify suspicious patterns, and support faster investigation. The AI-driven insight helps security teams make better decisions while maintaining control through visibility, monitoring, and human oversight. From a security perspective, the AI capabilities are valuable because they help reduce manual analysis, improve threat detection accuracy, and provide additional context during investigations. However, our organization should continue to follow proper governance practices, including access control, monitoring, and documentation, to ensure responsible usage.

The AI capabilities of SentinelOne Wayfinder Threat Detection and Response provide accurate and reliable insights for security investigations. The automated analysis and threat correlation help reduce manual analysis of suspicious activity and provide useful insights. While AI-generated insights are valuable, I still validate critical findings as part of my security workflow. The combination of AI-driven analysis with analyst review provides a good balance between automation and accuracy, helping improve incident response without removing human oversight.

SentinelOne Wayfinder Threat Detection and Response is a strong platform overall, but there are areas for improvement. The reporting and dashboard customization could be more flexible to better suit different teams' needs. In some cases, having more detailed investigation guidance and clearer explanations for complex detections would help analysts, especially those who are new to the platform. I would also like to see broader integration with third-party security tools and additional customization options for alerts and workflows. These improvements would make it even easier to fit the platform into different security environments and operational processes.

One area that could be improved is the availability of more advanced training resources and practical documentation. While the platform is user-friendly, having more detailed use case-based guides, troubleshooting examples, and hands-on learning materials would help teams get more value from the solution. Additional best practice documentation around threat investigation, workflow integration, and advanced features would also be helpful. Regular training sessions or updates with learning context would make it easier for administrators and analysts to stay current with new capabilities and improve their overall usage of the platform.

One additional area for improvement would be providing more customization options for dashboard, reports, and workflow to better match different organizations and requirements. Enhanced automation options and more detailed guidance for complex threat investigation would also help teams get even more value from the platform. More frequent advanced training materials, real-world use cases, and updated documentation would be beneficial as new features are introduced. Overall, the platform is effective, but continued improvements in customization, learning resources, and investigation capabilities would make it even stronger.

I have been working in my current field for about one year.

SentinelOne Wayfinder Threat Detection and Response is stable and reliable in my experience. The platform provides consistent monitoring and accurate threat detection, making it a dependable platform during security investigations. The cloud-based architecture helps with scalability and availability, while regular updates improve capabilities without requiring major maintenance efforts from my team.

SentinelOne Wayfinder Threat Detection and Response has good scalability. The cloud-based architecture allows it to scale as our organization grows without requiring significant changes to infrastructure. Adding more endpoints or expanding coverage is straightforward through centralized management. It can support organizations with different environment sizes while maintaining visibility and consistent security operations. The ability to manage a large number of endpoints from a single console helps reduce administrative overhead and makes it easier to scale security coverage as requirements change.

The customer support for SentinelOne Wayfinder Threat Detection and Response has been supportive and responsive. They provide useful guidance during troubleshooting, configuration, and security-related questions. The expertise of the support and threat response team helps in understanding the incident and resolving issues efficiently. The availability of knowledgeable security professionals is a value, especially during critical events when timely analysis and recommendations are important. Overall, the support experience has been reliable and has contributed positively to my security operations.

I previously used another endpoint security and threat monitoring solution before moving to SentinelOne Wayfinder Threat Detection and Response. I switched because I was looking for stronger threat visibility, faster investigation capabilities, and better automation for detecting and responding to security incidents. SentinelOne Wayfinder Threat Detection and Response provided improved endpoint visibility, more efficient incident investigation, and more streamlined workflows through its centralized platform. The ability to automate detection and response while still providing detailed investigation context was a key factor in my decision to move.

The integration process of SentinelOne Wayfinder Threat Detection and Response with my existing security operations was straightforward and required minimal disruption, fitting well into my security workflow by providing centralized monitoring, threat investigation support, and additional visibility into endpoint activity. The platform helped complement my existing security tools by improving alert triage and providing expert analysis for suspicious activities. The onboarding process was smooth, and the available integration and management capabilities made it easier for my team to incorporate SentinelOne Wayfinder Threat Detection and Response into my daily security operations.

The customer support for SentinelOne Wayfinder Threat Detection and Response has been supportive and responsive. They provide useful guidance during troubleshooting, configuration, and security-related questions. The expertise of the support and threat response team helps in understanding the incident and resolving issues efficiently. The availability of knowledgeable security professionals is a value, especially during critical events when timely analysis and recommendations are important.

I have seen a positive return on investment, mainly through improved efficiency rather than direct cost reduction. SentinelOne Wayfinder Threat Detection and Response has helped reduce the time my team spends on manual investigation and analysis. While I have not directly reduced headcount, the platform allows my existing security team to handle more events effectively without needing additional resources. The automated detection, investigation support, and centralized visibility help save time during security investigations and improve response efficiency. As a rough estimate, I have seen meaningful time savings on investigations, allowing my team to handle more alerts with the same team size. The biggest value has been faster response to critical threats and less time spent on routine monitoring tasks.

My experience with SentinelOne Wayfinder Threat Detection and Response pricing, setup costs, and licenses has generally been positive. The licensing model is straightforward, and the subscription-based approach makes it easier to plan costs based on the number of protected endpoints and required capabilities. The initial setup was relatively smooth for a cloud-based solution. The overall value provided through improved visibility, threat detection, and operational efficiency justifies the investment.

I evaluated other security solutions before choosing SentinelOne Wayfinder Threat Detection and Response, comparing options based on threat detection capabilities, endpoint visibility, incident response features, ease of management, investigation, and overall value. Some of the alternatives I considered include other leading EDR and XDR platforms such as Microsoft Defender for Endpoint, CrowdStrike Falcon, and similar security solutions. SentinelOne Wayfinder Threat Detection and Response stood out because of its strong automation and investigation capabilities, centralized management, and ability to provide faster response with less manual effort.

SentinelOne Wayfinder Threat Detection and Response has improved the efficiency of my security incident response by providing expert monitoring, investigating support, and timely analysis of alerts. The service helps reduce the time my team spends on initial triage and allows us to focus on remediation and follow-up actions. The resolution time depends on the severity and complexity of the incident, but routine alerts are typically analyzed and addressed much faster compared to a fully manual investigation process. Having SentinelOne Wayfinder Threat Detection and Response provide additional context, validation, and recommendations helps accelerate decision-making and improves my overall incident response efficiency.

SentinelOne Wayfinder Threat Detection and Response has helped my team spend more time on strategic security initiatives by reducing the amount of time required for routine alerts, monitoring, and initial investigation. With expert threat monitoring and analysis support, my team can focus more on improving security processes, strengthening controls, and planning proactive security improvements rather than spending most of the time on reactive incident handling. It has also helped improve efficiency by providing additional context around alerts, which allows us to make faster decisions and prioritize high-value security tasks.

For organizations considering SentinelOne Wayfinder Threat Detection and Response, clearly evaluating their security requirements, endpoint coverage needs, and existing security workflow before deployment is important. The platform provides strong threat detection, investigation capabilities, and automation, but getting the value requires proper configuration and alignment with your security processes. I would recommend investing time in initial setup, policy tuning, and team training to fully utilize the platform's capabilities. Organizations should also take advantage of the threat response intelligence reporting features to improve their overall security posture. Overall, SentinelOne Wayfinder Threat Detection and Response is a strong solution for teams looking to improve visibility, accelerate threat response, and reduce manual security operations efforts.

My impression of SentinelOne Wayfinder Threat Detection and Response breach response and security researchers is positive, as their expertise provides valuable support during security investigations by helping validate threats, analyze suspicious activity, and provide guidance on the appropriate response actions. Their knowledge and experience help improve my security operations by adding an additional layer of expertise that complements my internal teams, allowing us to handle complex incidents more effectively, reducing investigation time and making more informed decisions during critical security events.

SentinelOne Wayfinder Threat Detection and Response influences my decision-making process by providing additional context, expert analysis, and recommendations during security investigations. The insights from their breach response and security research help me better understand the severity, scope, and potential impact of threats before taking action. This allows my team to make faster and more informed decisions, prioritize the most critical incidents, and choose the appropriate response steps with greater confidence. It also helps reduce uncertainty during high-priority security events by combining automated detection with expert human analysis.

I gave this review a rating of 9 out of 10.

The main use case for SentinelOne Wayfinder Threat Detection and Response is to detect advanced threats and automate incident response in case of any specific abnormalities across the environment, as well as to enable rapid proactive response if any threat is occurring. These are the main use cases we have focused on.

One scenario involves an attacker gaining access through a phishing email when an employee mistakenly clicks on it and quietly installs a script that runs at an odd time. For example, a PowerShell script might run at night when the employee won't notice. We expect SentinelOne Wayfinder Threat Detection and Response to observe this activity, find the abnormality, and immediately isolate that specific machine or environment.

Automated incident response is another way this tool can help us greatly. For example, when laptops get infected with ransomware, the SentinelOne agents installed on the laptops will find abnormal encryption or unknown processes modifying files. The agents will then isolate that device from the network and terminate the malicious process. The most important aspect is that SentinelOne Wayfinder Threat Detection and Response should not affect the laptop or device performance. The agent should be able to monitor everything and proactively isolate and stop attacks without compromising device performance.

The best features of SentinelOne Wayfinder Threat Detection and Response are obviously the AI-powered threat detection, which is the most sophisticated I have seen with any other tool. I also noticed that it does not affect the performance of the device, which is something great. I do not know how they have developed it, but it is really impressive. Additionally, I noticed deep visibility into the environment where we can track everything. If something is found, we can easily track it and get a bird's eye view of the overall attack visibility.

The visibility feature allows us to easily provide root cause analysis to the respective people, which helps in faster incident investigation.

We have seen great outcomes with SentinelOne Wayfinder Threat Detection and Response. First, we conducted a pilot proof of concept and noticed that SentinelOne Wayfinder Threat Detection and Response is very fast. Within a small amount of time, it is able to detect everything and protect the environment. The mean time to detection has been reduced drastically.

For example, with other tools, when a phishing email comes in and an attack starts, we learn about these details later and cannot take a proactive approach. With SentinelOne Wayfinder Threat Detection and Response, the tool monitors registry changes and any suspicious executable files continuously. In our pilot use case, within five minutes it reported one suspicious activity involving high encryption from a phishing email. This is something amazing considering all the other tools in the market.

The response capability is great. Earlier, we would learn about phishing and threats after two to three days. After conducting the proof of concept, we found that within hours we are notified about threats.

From an area of improvement, I understood that SentinelOne should add more training in the form of an academy where people can learn more about the tool and gain understanding of advanced features. This would allow people to log in to the academy, learn, and implement these features. Additionally, the dashboard can be improved significantly.

Overall, I felt SentinelOne Wayfinder Threat Detection and Response is a great tool. Dashboard improvement is required along with training. They should also tune some of the reduced false positive alarms, which is common for all tools.

In the current field, I have been working for more than twelve years.

Accuracy is pretty good but obviously it needs improvement. There are some false positives, but overall it is great.

I conducted a comparison with Defender. We are currently using Defender, and compared to Defender, SentinelOne Wayfinder Threat Detection and Response is an amazing tool and uses AI. SentinelOne Wayfinder Threat Detection and Response is better than all the other tools. The proactive approach and very early detection are standout features. Defender takes one to two days to find suspicious activity, but SentinelOne Wayfinder Threat Detection and Response finds threats in one to two hours instead. This is something amazing. Overall, SentinelOne Wayfinder Threat Detection and Response is a great tool and highly recommended for everyone.

The previous solution was Microsoft Defender, which we are currently using. The reason we tried to switch is because after conducting the proof of concept, our analysis showed that SentinelOne Wayfinder Threat Detection and Response has more AI capability in detecting threats in a very short period of time. We also implemented some automated responses. Overall, we found that SentinelOne Wayfinder Threat Detection and Response is better.

The setup is pretty easy since it is cloud-based.

We have started onboarding the tool. We conducted a proof of concept, and the leadership is currently negotiating pricing with the SentinelOne Wayfinder Threat Detection and Response team. Currently there is no return on investment yet.

The pricing discussion is still ongoing. I heard that the pricing is on the higher side. However, when we consider the features provided, it justifies the pricing. The pricing is a bit expensive, but it is justified by the features that SentinelOne Wayfinder Threat Detection and Response is providing.

I would definitely recommend SentinelOne Wayfinder Threat Detection and Response for everyone. I would definitely recommend SentinelOne Wayfinder Threat Detection and Response to all organizations that are leaning towards the AI-driven approach and want to make use of artificial intelligence. The overall review rating for this product is nine out of ten.

SentinelOne Wayfinder Threat Detection and Response is mainly used for Active Directory and configuration changes, which is the primary reason for adoption.

The biggest benefit of SentinelOne Wayfinder Threat Detection and Response is the Active Directory module. Active Directory is a neglected area where people configure it and start using it without proper oversight. When someone touches it, the system pops up an alert, notifying about the changes. This is crucial because customers can get admin access and be hacked at the admin level using Active Directory, which is a serious security risk. This is how I sell and promote it.

The annotations and insights from SentinelOne Wayfinder Threat Detection and Response do not influence decision-making in my experience. It functions as more than a break-fix service because it alerts us and then we fix things, but it has not contributed to any decisions at any organization I work with.

The product is not 100% complete. The monitoring, alerting, and reports are adequate enough to sell but have room for improvement. The product works well, but it does not show enough value to the customer. Eventually, when customers need to save money, they may say they do not see anything happening with this solution and cancel it. SentinelOne has an opportunity to make the product more valuable from the customer's perspective. Technically, I have no complaints, but from a customer perspective, it lacks value.

SentinelOne could improve monitoring, alerting, and reporting by providing better reports and better alerting with executive summary reports that could be more polished. We can then create a schedule to send these to customers.

The installation process could be more fluid and easier. People need a learning curve to install the product, and simplification would be beneficial.

Configuration and Active Directory integrations with SentinelOne Wayfinder Threat Detection and Response are the biggest challenges during deployment. This is where the complexity is most apparent.

I have been working with SentinelOne Wayfinder Threat Detection and Response for three or four years, and I have been in the MSP environment for more than 25 years.

SentinelOne Wayfinder Threat Detection and Response is in good shape and is 99% reliable.

When deployed, SentinelOne Wayfinder Threat Detection and Response is very easy to scale.

I do not believe SentinelOne's customer service is good. They do not meet their SLA commitments. You need to chase after them for responses. Although I am in a good position today and do not need them frequently, when I do need support, it takes longer than expected in every case I have dealt with.

I am not working with anything similar to SentinelOne Wayfinder Threat Detection and Response.

I am working with SentinelOne, and my experience is quite extensive as I manage various aspects of the product. I work with SentinelOne Control, Complete, and various add-ons including the orchestration module and remote operations.

The product is good, but it does not show enough value to the customer. I think the price for SentinelOne Wayfinder Threat Detection and Response represents fair value. My assessment of the digital forensics services provided was good.

SentinelOne Wayfinder Threat Detection and Response has been used for the last one and a half years. The main use cases are to identify suspicious activity, investigate potential security incidents, and accelerate response across our environments. Its threat hunting capabilities and contextual insights help our team quickly prioritize alerts, understand attack paths, and contain threats before they can impact our business operations.

SentinelOne Wayfinder Threat Detection and Response has a positive impact on our organization by improving our ability to detect, investigate, and respond to security threats more efficiently. It has increased visibility across our environment, reduced the time it requires to triage alerts, and helped our security team to prioritize high-risk incidents with greater confidence.

Since implementing SentinelOne Wayfinder Threat Detection and Response, we have seen noticeable improvements in the efficiency of our security operations. Alert triage and investigations are faster because analysts receive better context, reducing the time spent on them. We have experienced quicker incident response, improved analyst productivity, and fewer hours investigating low-priority alerts, allowing the team to focus on higher-risk incidents.

The best features of SentinelOne Wayfinder Threat Detection and Response are its AI-powered threat detection, automated investigation capabilities, and rich contextual insights for security analysts. Its threat hunting tool makes it easier to identify suspicious behavior, while automated correlations of alerts help to reduce investigation time and prioritize the most critical threats. Centralized visibility and streamlined incident response workflow are especially valuable for improving the efficiency of our security operations.

The feature that has made the biggest difference for our team is the AI-powered threat detection and alert correlations. It automatically prioritizes high-risk activity and provides the context needed to investigate the alert quickly.

The AI capabilities of SentinelOne Wayfinder Threat Detection and Response provide strong support for governance and security by helping security teams to analyze threats, prioritize risks, and make faster decisions. The AI capabilities provide accurate and reliable insights that help our team to identify and prioritize potential threats more efficiently. The AI-generated analysis and context are useful for accelerating investigations and reducing the time spent reviewing alerts.

SentinelOne Wayfinder Threat Detection and Response is a strong solution, but it could be enhanced with more customizable dashboards and reporting, deeper integrations, third-party security rules, and additional automation options for incident response workflow. Enhancements to alerts and more investigations could also help security teams to reduce noise and resolve incidents even more efficiently.

SentinelOne Wayfinder Threat Detection and Response has been used for the last one and a half years.

SentinelOne Wayfinder Threat Detection and Response is stable.

SentinelOne Wayfinder Threat Detection and Response has good scalability. As our security needs have grown, it can support expanding environments by providing centralized visibility, consistent threat detections, and response capabilities across increasing numbers of endpoints, workloads, and data resources.

The customer support for SentinelOne Wayfinder Threat Detection and Response is good, and I would rate the customer support an eight.

No different solution was used previously.

The integration process of SentinelOne Vigilance with our existing security operations was relatively smooth and straightforward. It helped extend our security capabilities by providing additional monitoring, expert analysis, and incident response support without requiring major changes to our existing workflow. The services integrated well with our security process, improved visibility into potential threats, and allowed our team to focus more on high-priority tasks while leveraging SentinelOne expertise for the investigation and response.

SentinelOne Vigilance has helped us to resolve security incidents more quickly by providing expert monitoring, investigation support, and actionable guidance.

It has helped our team to spend more time on strategic security initiatives by reducing the workload associated with the continuous monitoring, alert triage, and initial investigations. With expert support handling routine analysis and providing actionable insights, our security team can focus more on improving security architecture, strengthening controls, and proactively addressing long-term risks rather than spending most of their time on reactive tasks.

Activities that previously required several hours of manual review can now be accelerated through the SentinelOne expert analysis and recommendations. This allows our security team to focus more time on strategic initiatives while maintaining strong incident detection and response capabilities.

Our experience with the SentinelOne Vigilance pricing, setup cost, and licensing has generally been positive. The licensing model was straightforward to understand, and the initial setup process was manageable with proper planning. While overall cost is an important consideration, the value provided through the continuous monitoring, expert threat analysis, and reduced operational effort has helped justify the investment.

No other options were evaluated before choosing SentinelOne Wayfinder Threat Detection and Response.

I advise those considering SentinelOne Wayfinder Threat Detection and Response to clearly define their security goals and evaluate how the platform fits into their existing environment and operations. They should take time to properly configure alerts, integrate with current tools, and establish workflows to get the most value from its detection and response capabilities.

Our impression of SentinelOne Vigilance's breach responders and security researchers is very positive. The team provides valuable expertise, timely communication, and detailed analysis during security investigations.

The 24/7 monitoring from SentinelOne has had a positive impact on our overall security operations by providing continuous visibility and reducing the risk of threats going unnoticed outside normal business hours. It has helped to improve our ability to detect, investigate, and respond to suspicious activity. For example, when an alert was generated outside of regular working hours, SentinelOne monitoring and analysis helped identify the activity, provide context around the potential risk, and guide our team on the appropriate response steps. This reduced the time needed for investigations and allowed us to address the issue before it could develop into a larger security incident.

I rate this solution an eight overall.

I primarily use SentinelOne Wayfinder Threat Detection and Response for endpoint protection including real-time threat detection, automated response to malware and ransomware, and continuous monitoring of endpoint activity to prevent breaches.

Day to day, I focus on analyzing alerts, investigating suspicious activities, and ensuring that endpoints remain secure.

Recently, SentinelOne alerted me to unusual behavior on an endpoint that indicated a potential ransomware attack. Using SentinelOne Wayfinder Threat Detection and Response's real-time threat detection and automated response, I was able to isolate the affected device quickly, stopping the ransomware from spreading. After that, I used Wayfinder threat detection and response to perform a deeper investigation, correlating threat intelligence and analyzing the attack pattern.

Beyond incident response, I use SentinelOne Wayfinder Threat Detection and Response proactively to enhance our overall security posture. This includes regularly tuning detection rules to reduce false positives, conducting threat hunting exercises to uncover hidden threats, and integrating SentinelOne Wayfinder Threat Detection and Response with other security tools for a comprehensive defense strategy.

The feature I rely on most often is SentinelOne Wayfinder Threat Detection and Response's real-time threat detection and automated response. This stands out because it allows me to quickly identify and contain threats as they happen, minimizing the risk of damage or spread.

The best features I find most valuable for SentinelOne Wayfinder Threat Detection and Response are real-time threat detection and automated response, behavioral AI-based detection, endpoint visibility and continuous monitoring, integration capabilities, and reporting and analytics. For Wayfinder Threat Detection and Response, I benefit from advanced threat hunting capabilities, threat intelligence correlation, incident investigation tools, and automated workflows and response orchestration.

SentinelOne Wayfinder Threat Detection and Response has had a significant positive impact on my organization by enhancing our overall security posture and incident response capabilities. It has reduced the time to detect and contain threats. The automated response feature with the integration and scalability, along with Wayfinder's advanced threat hunting and investigation tools, have improved our ability to uncover hidden threats and understand attack patterns.

Since implementing SentinelOne Wayfinder Threat Detection and Response, I have observed several measurable improvements, including faster response time, reduction in security incidents, improved detection accuracy, increased operational efficiency, and enhanced visibility and reporting.

SentinelOne Wayfinder Threat Detection and Response is a powerful platform, but there are a few areas where improvement could enhance its effectiveness, including user interface enhancement, integration expansion, advanced AI tuning, and incident response playbooks with training and documentation.

SentinelOne Wayfinder Threat Detection and Response is robust, but specific pain points that stand out are complexity for new users, alert overload, customization limits, performance on large environments, and support response times.

My experience with pricing, setup cost, and licensing of SentinelOne Wayfinder Threat Detection and Response has been generally positive and straightforward. The combination of cost-effectiveness and ease of setup has been beneficial.

I rate SentinelOne Wayfinder Threat Detection and Response at eight out of ten. I chose this rating because SentinelOne is a very strong and effective platform overall, but there are a few areas that could be improved, including user interface, alert overload, customization of playbooks, performance delays, and support response times.

Regarding SentinelOne Wayfinder Threat Detection and Response AI capabilities, its governance and security are generally strong but could benefit from further enhancements. The AI models are well-designed to detect sophisticated threats with high accuracy. Governance controls are in place to monitor the AI decision-making processes. However, there is room to improve in providing more granular user control and customizable AI behavior.

The integration of SentinelOne Vigilance with my existing security operations has been generally smooth and effective. The process and my experience include initial setup, integration with SIEM, visibility and threat correlation, response automation, collaboration, and challenges.

SentinelOne Vigilance is quite efficient at resolving security incidents. I assess it through incident detection and evaluation time, response timeframes, resolution impact, expert support, efficiency metrics, and continuous improvement.

I have two years of working experience in the cybersecurity field.

SentinelOne Wayfinder Threat Detection and Response is very stable. Based on my experience, the platform runs reliably with minimal downtime or disruptions.

SentinelOne Wayfinder Threat Detection and Response demonstrates strong scalability with no significant issues.

My impression of the SentinelOne Vigilance team support is very positive. Their breach responders and security researchers bring deep expertise that significantly enhances our security operations in several ways, including expert incident analysis, proactive threat hunting, rapid response guidance, knowledge sharing, confidence, and assurance.

The 24/7 monitoring by SentinelOne Vigilance has a profound positive impact on our overall security operations, including continuous threat detection, rapid incident response, reduced operational stress, improved compliance and reporting, and proactive threat hunting.

Before choosing SentinelOne Wayfinder Threat Detection and Response, I evaluated several other options to ensure I selected the best fit for our security needs.

My advice for others looking to use SentinelOne Wayfinder Threat Detection and Response would be to leverage the digital forensics feature fully. Take advantage of the support team. Evaluate your scalability needs upfront. Consider the ease of integration.

I am using the digital forensics feature provided by SentinelOne Wayfinder Threat Detection and Response. The features have been very helpful in our incident investigation, including detailed evidence collection, timeline reconstruction, root cause analysis, support for compliance, and improved response coordination.

I rate this product at eight out of ten.

SentinelOne Wayfinder Threat Detection and Response is used for threat detection as a centralized log monitoring solution. It collects logs from firewalls, correlates the data, and enables proactive searching for threats before alerts are triggered.

SentinelOne Wayfinder Threat Detection and Response offers AI-powered threat hunting, which eliminates the need for KQL knowledge. Complex queries are not required; instead, you can interact with SentinelOne Wayfinder using basic chat functionality.

The AI-powered threat hunting feature has made day-to-day work easier and has saved time by removing the need to write complex KQL queries. Since implementing SentinelOne Wayfinder Threat Detection and Response, the response time has reduced to within one hour.

Our organization takes threat hunting very seriously, and this has positively impacted our use of SentinelOne Wayfinder Threat Detection and Response.

SentinelOne Wayfinder Threat Detection and Response is working well overall. The UI and UX could be simpler, as they are currently very complex. The AI accuracy can be overly generic, which causes it to miss context and requires some manual work to validate findings.

SentinelOne Wayfinder Threat Detection and Response has been used for around two years.

SentinelOne Wayfinder Threat Detection and Response is stable.

SentinelOne Wayfinder Threat Detection and Response is very scalable. Scalability depends on the endpoint, and advanced features incur additional costs.

The customer support is very good. The team of breach responders and security researchers at SentinelOne Vigilance is very helpful and responds quickly. Tickets are typically resolved within a day.

CrowdStrike was previously used for threat detection. The switch to SentinelOne Wayfinder Threat Detection and Response was made because the team is excellent, and the solution detects threats, takes action, kills the process, and quarantines the process.

SentinelOne Wayfinder Threat Detection and Response is very smooth to integrate, and no organization should face any problems with the integration process.

The annotation and insights provided by SentinelOne Vigilance analysts on detected threats completely influence our decision-making process. The findings are somewhat genuine, though some manual work is required to verify if something is truly a threat.

A return on investment has definitely been realized. SentinelOne Wayfinder Threat Detection and Response reduces incident impact, saves SOC effort, enables faster detection, and results in less downtime and cost savings.

The experience with pricing, setup cost, and licensing for SentinelOne Vigilance was smooth overall. The pricing can be expensive, and licensing depends on the endpoint.

Before choosing SentinelOne Wayfinder Threat Detection and Response, other options were not evaluated. Market research was conducted, and SentinelOne was definitely on top of the list.

SentinelOne Wayfinder Threat Detection and Response is rated at an eight out of ten. The UI and UX are not particularly simple, and the threat information provided is overly generic, which influenced this rating.

Regarding governance and security, SentinelOne Wayfinder Threat Detection and Response provides real-time threat protection with in-house AI behavior detection. It detects malware, ransomware, and fileless attacks. PowerShell misuse is detected instantly, and the process is killed immediately.

The AI capabilities are accurate at around 92 percent. SentinelOne Vigilance resolves security incidents with efficiency and speed compared to manual work, though some manual work is still necessary because the AI-powered review is overly generic.

SentinelOne Vigilance has facilitated a positive shift by enabling more investigation through its proactive approach to finding threats, which has enhanced learning opportunities. The 24/7 monitoring by SentinelOne Vigilance not only flags threats but also takes action, which has positively impacted the work of SOC analysts.

SentinelOne Wayfinder Threat Detection and Response is a great tool that detects all suspicious processes, investigates them, takes action, and provides a process tree. Organizations should move forward with SentinelOne Wayfinder Threat Detection and Response, as it is an excellent tool for threat detection and response. Overall, I would rate SentinelOne Wayfinder Threat Detection and Response at an eight out of ten.

My experience includes working with SentinelOne Wayfinder Threat Detection and Response MDR for four plus years. Regarding the capabilities of SentinelOne Wayfinder Threat Detection and Response MDR or Threat Detection and Response, I have experience with all of the above.

Among the features I find most valuable in SentinelOne Wayfinder Threat Detection and Response are the rollback feature and the use of AI and machine learning to assist with threat detection and remediation. The MDR is a good solution.

Using SentinelOne Vigilance has contributed to my team's focus on strategic initiatives. Basically, it's a foundation for all our solutions because we're a security-first organization.

There is always room for continuous improvement for SentinelOne Wayfinder Threat Detection and Response. Continuing their use of AI and machine learning to cut down noise, to reduce false positives and to provide more detailed remediation actions would be beneficial. In terms of their current offerings, it's good.

My experience includes working with SentinelOne Wayfinder Threat Detection and Response MDR for four plus years.

I would rate their technical support around seven out of ten. I don't deal with it on a daily basis, but certainly our engineers work closely with the SentinelOne team, and they've all been trained up by the SentinelOne team along with the SentinelOne certifications and activities that they have access to. I haven't heard any of our engineers complain about the technical support from SentinelOne.

When it comes to response time, I don't deal with that side of the technical team, so I can't give a definitive assessment either way. However, from our engineers, there hasn't seemed to be any concerns with their technical support.

My experience with the deployment of SentinelOne Wayfinder Threat Detection and Response was that it was straightforward. Our engineers are all certified and trained, so it's very straightforward.

We did it by ourselves with our team. We are a reseller partner of SentinelOne, so we have engineers that we have certified and trained up in the product along with SentinelOne as a part of our partnership. We can do it for our customers.

I have seen a return on investment because it's a solution that works. It protects our customers' environments well. The return on investment is having a tool that's not overly expensive but provides peace of mind and a good, secure solution.

Regarding the pricing of SentinelOne Wayfinder Threat Detection and Response, in comparison to others, it's absolutely reasonable.

SentinelOne Wayfinder Threat Detection and Response has some good competition out there, but certainly for us, in our investigations, there's been nothing to make us change. Nothing out of the ordinary or nothing jumping out at us from another solution wanting to make us want to change.

SentinelOne Wayfinder Threat Detection and Response is a foundation for all our solutions because we're a security-first organization.

My impression of the annotation and insights provided by SentinelOne Vigilance analysts on detected threats looks good. From our use of it, it's worked really well. It's a very comprehensive tool that we use as our basis for our MSP solutions.

I would describe the integration process of SentinelOne Vigilance with our existing security operations as well-integrated with other solutions, providing good visibility. It's easy to manage, monitor and keeps us across everything that's happening in our environment and our customer environments.

I can assess the impact of 24/7 monitoring by SentinelOne Vigilance on my organization's overall security operations by stating that it's an important piece of what we do, and it adds to our capability. It means that we're not relying on just our team. It's a tool that helps our team do their job.

Regarding the need to use the malware analysis feature, I'm not certain off the top of my head. As for using the digital forensics features provided by this solution, I believe so, but I'm not on the engineering or technical side of it. I'm not running it day to day.

I would rate SentinelOne Wayfinder Threat Detection and Response as an eight or a nine, with my overall rating being nine out of ten. From what I've been told by the engineers and our use of the solution as a basis for our managed service offerings, we've had no issues with it, and it's easy to deploy and manage.

Regarding additional features I would like to see in the future to make it closer to ten, I don't have specific suggestions. It's a good solution. When thinking about automation, AI capabilities, machine learning, and remediation actions, I would say all of the above would be beneficial.

SentinelOne Wayfinder Threat Detection and Response's main use case is to detect any suspicious activity, investigate it, and respond accordingly to security threats by monitoring across our clients' endpoints and the whole environment in real-time.

In using SentinelOne Wayfinder Threat Detection and Response to respond quickly, the response is not totally automated; we use a combination of both automated and manual response actions, with automated capabilities for predefined actions such as killing malicious processes, while critical incidents still require manual investigation.

One of the best features SentinelOne Wayfinder Threat Detection and Response offers is the Purple AI and behavioral detection capability, which is superior to traditional EDRs that rely solely on signatures.

I frequently use the Purple AI feature for in-depth analysis and if I receive any suspicious alerts; it helps by summarizing the whole alert without diving deep into it, making my work easier.

SentinelOne Wayfinder Threat Detection and Response positively impacts our organization by improving threat visibility and reducing investigation time, enabling us to identify suspicious activities faster due to AI capabilities.

Technically, using Purple AI has helped reduce incident response time and manual workload for analysts, making investigations faster.

SentinelOne Wayfinder Threat Detection and Response can improve by addressing lag issues in the UI and dashboard performance, especially during heavy investigations when alerts are high.

Overall, I rate the integration features of SentinelOne Wayfinder Threat Detection and Response around eight to nine because they support a wide range of security tools; I do not see any major improvements needed otherwise.

I have been working in my current field for around two years and nine months.

Most of the time, SentinelOne Wayfinder Threat Detection and Response is stable, but there are instances where it becomes laggy when many alerts are detected.

SentinelOne Wayfinder Threat Detection and Response is mostly stable, though it can be laggy with many alerts.

The scalability of SentinelOne Wayfinder Threat Detection and Response is quite good, as it works well in enterprise environments without major performance issues.

The scalability of SentinelOne Wayfinder Threat Detection and Response is pretty good, as it handles security device integration and endpoint increases efficiently without major performance issues.

I have not found any major issues with customer support; the team is responsive and helpful during troubleshooting, and their documentation is very useful for understanding the platform better.

I have not encountered any significant issues with customer support; they provide excellent documentation and knowledge to help analysts.

We previously used Defender and CrowdStrike, but SentinelOne Wayfinder Threat Detection and Response stood out due to its AI-driven threat detection and behavioral analysis.

I can say that we see a return on investment with SentinelOne Wayfinder Threat Detection and Response, as it has reduced incident response time and manual workloads for analysts, thanks to AI.

My advice for others considering SentinelOne Wayfinder Threat Detection and Response is that it is a good tool with strong AI capabilities that can significantly reduce incident response times for analysts, especially in environments with large endpoint infrastructures. I rate this solution an eight overall.

We have been using SentinelOne Singularity MDR for threat hunting and correlation, particularly when we identify if some kind of IOCs has been detected or if processes are found malicious. We then analyze it across the entire network for similar behaviors in other systems or processes. Accordingly, we curate responses, which can involve isolating those systems or conducting further investigation through back-end analysis, digging into command line consoles, or deleting files. This is the primary use case I can think of.

When discussing features in SentinelOne Singularity MDR, I find integration with third-party solutions and APIs very valuable because it eases management and response processes. With a robust library, it is easier to manage integrations with other technologies, such as the Check Point sandboxes, which we have found very useful.

In terms of minimizing false positives and delivering accurate detections, I have observed that the false positive rate in SentinelOne Singularity MDR is considerably lower compared to other solutions we have evaluated, thanks to the exceptions or policy changes that allow modifications to baseline policies hardcoded within the solution.

Regarding threat hunting capabilities, I assess that the threat hunting capability in SentinelOne Singularity MDR is quite good because their EDR collects extensive telemetry data, and the backend search engine processes this data quickly. This speed is crucial for our large-level customers who have around 50,000 inputs and multiple gigabytes of data daily. Therefore, threat hunting becomes easier due to the significant amount of telemetry data gathered and the fast processing time when firing queries.

The main benefits that clients receive from SentinelOne Singularity MDR, from an operational perspective, include ease of deployment, where the installation process across various operating systems and different hardware configurations goes smoothly with minimal impact on end users. It is important that end users have a smooth experience during deployment. Besides the navigation issue I mentioned, policy configurations and other processes are straightforward, similar to a plug-and-play setup that is easy to manage. Furthermore, the detection rate is very good compared to other solutions, and as previously mentioned, the false positive rate is low, making the workload for the SOC team much easier after implementing SentinelOne Singularity MDR at our customers.

I would like to improve the dashboard in SentinelOne Singularity MDR, as it could be much better, along with the reporting structure. The granularity of policies and ease of policy management from the console could be made better, while my experience from a feature standpoint has been good overall.

Regarding summary reports provided from SentinelOne Singularity MDR, I find the reporting structure could be much better in terms of granularity. Additionally, for C-suite executives, there can be more non-technical content that provides a bird's eye view of organizational risk posture, rather than just detailed technical analyses. This high-level perspective on the organization's risk would be highly beneficial at the management level.

I have been with SentinelOne Singularity MDR since around December 2020, so it has been one and a half years.

The initial setup for SentinelOne Singularity MDR is simple; there are not many complexities involved unless you encounter unsupported third-party integrations, which can introduce some challenges. However, if you are using compatible data sources, the setup process is generally smooth.

The stability of SentinelOne Singularity MDR deserves a rating of eight.

The scalability rates at nine because they are quite scalable; being a cloud solution means we do not have to worry about scalability issues.

The technical support from SentinelOne Singularity MDR rates at 7.5 out of 10.

The initial setup for SentinelOne Singularity MDR is simple; there are not many complexities involved unless you encounter unsupported third-party integrations, which can introduce some challenges. However, if you are using compatible data sources, the setup process is generally smooth.

I can compare SentinelOne Singularity MDR to CrowdStrike as the main competitor in the market.

When comparing the two vendors, I feel that neither one is clearly better than the other, as both provide their own strong points and necessary features as part of their MDR solutions. Although I have not found significant differences, I do perceive that CrowdStrike has a slight edge regarding support and turnaround time for issue resolution, and they tend to introduce new features more regularly than SentinelOne Singularity MDR.

We currently work with multiple vendors since I work for a cybersecurity solution company, and in the EDR space, we are engaged with CrowdStrike and SentinelOne Singularity MDR.

We work with SentinelOne Singularity MDR as it is similar to SentinelOne Vigilance, and I specifically use Singularity only. I use every module of SentinelOne Singularity MDR, including EDR, NGAV, ASM, and Identity.

I have not specifically worked on the solution's proactivity and branch readiness features to state how they help in preparing for incidents. I have not encountered any use case that has not been covered by SentinelOne Singularity MDR, but since I have not explored the entire range of products they offer and they introduce new features quarterly, I cannot provide specific suggestions at this time.

Pricing for SentinelOne Singularity MDR varies on a case-by-case basis, and I notice that they have flexibility when it comes to pricing. On a scale where one is high and ten is low, I would place it around six.

My overall rating for SentinelOne Singularity MDR is 8 out of 10.

I deal with the MDR.

Some of the most valuable features of the SentinelOne Singularity MDR are its capabilities, and there are areas they can develop further.

My experience with the ability of SentinelOne Singularity MDR to minimize false positives and deliver actionable reports is positive, and I am speaking about SentinelOne Singularity MDR's support for that.

The impact of the threat hunting capabilities on detecting known and emerging threats in real-time is notable, and with the AI, it helps for real-time threat hunting. Their proactive breach readiness features have helped in preparing my team for incidents, and we have dealt with some of the proactive breach readiness features.

I assess the effectiveness of the managed detection and response services in protecting my organization as significant, especially since we did not use an MDR before and just relied on antivirus tools.

I have experience with the Singularity's ability to integrate with third-party services, and my impression is that it does a decent job.

The approximate reduction of the time to respond to incidents has been considerably improved, and it has really helped to reduce that time. We utilize the monthly summary reports provided by their MDR team.

I don't have any concerns about the setup process. It was pretty simple to do aside from setting up site locations within the admin portal, and it took just myself to deploy it. I was the only one involved in the deployment process.

I don't have any comments on the service's ability to provide incident reports and detailed investigation notes and recommendations, although some of my team might.

I rate their support very good, and their threat detection capability positively influences our security operations.

Positive

When we were deciding on SentinelOne Singularity MDR, we evaluated other options. There was a short list of solutions we were comparing it to, and there are clear differences between Field Effect and SentinelOne Singularity MDR.

The initial setup was straightforward and not complex to set up.

The pricing, setup costs, and licensing are similar in price to Field Effect.

The integration with Microsoft 365 for SentinelOne Singularity MDR isn't quite as effective as with Field Effect.

I have experience with SentinelOne Singularity MDR and other MDR solutions, and I would be willing to provide a review for one of the products that I'm familiar with.

We are not utilizing the DFIR, digital forensics and incident response, feature.

I don't have a comment on the hands-on coverage by global MDR analysts.

On a scale of 1-10, I rate SentinelOne Singularity MDR a 10.