No more typing reviews! Try our Samantha, our new voice AI agent.

OPSWAT Filescan Sandbox vs SentinelOne Singularity Endpoint comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OPSWAT Filescan Sandbox
Ranking in Anti-Malware Tools
31st
Average Rating
8.0
Reviews Sentiment
7.5
Number of Reviews
1
Ranking in other categories
No ranking in other categories
SentinelOne Singularity End...
Ranking in Anti-Malware Tools
2nd
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
257
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Endpoint Detection and Response (EDR) (2nd), Extended Detection and Response (XDR) (2nd), AI-Powered Cybersecurity Platforms (3rd), AI Observability (2nd)
 

Mindshare comparison

As of June 2026, in the Anti-Malware Tools category, the mindshare of OPSWAT Filescan Sandbox is 1.6%, up from 0.9% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 2.9%, down from 4.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Endpoint2.9%
OPSWAT Filescan Sandbox1.6%
Other95.5%
Anti-Malware Tools
 

Featured Reviews

reviewer2390334 - PeerSpot reviewer
Cyber Security Engineer at a security firm with 11-50 employees
An easily integratable solution that helps scan files
I recommend leveraging the data and using case transcripts to understand how the tool can address your needs. Additionally, testing the solution in your environment can be helpful. If we keep it updated and ensure that the engines and the latest definitions are up-to-date, the solution functions without problems. It continues scanning without any delays. I rate the product an 8 out of 10. With OPSWAT Filescan Sandbox, we can scan various file types, including IOCs, Python compressors, and QR codes from images. All the configuration settings are user-dependent and can be modified over time. It's highly configurable—you can easily navigate to the console, click on any option, and quickly adjust settings, including the default size.
Vaibhav Mahendra Kolhe - PeerSpot reviewer
Soc Analyst at Softcell Technologies Limited
Automation has reduced alerts and freed the soc team to focus on faster incident response
Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I find most valuable about it is the design interface."
"My advice would be to implement SentinelOne immediately; it is one of the top things that we've implemented and it has saved us countless hours."
"SentinelOne Singularity Endpoint helps reduce alerts by approximately 40%, as it streamlines the analysis process for alerts we receive, and it helps free up about 70 to 80% of our time when managing alerts."
"The Ranger feature is valuable."
"I can say just go for SentinelOne Singularity Endpoint, it is the best investment, so do not look at the price and go for it."
"Once it fully adapts to the environment, customers don't even need to monitor their endpoint protection landscape, as it can automatically learn and mitigate any threats or problems with minimal human interaction."
"Most of the features are valuable. As a system integrator, agent deployment is valuable. It also fits the requirements of most of the clients."
"The offline protection offered by SentinelOne Singularity Complete for my devices is valuable."
"Provides rich forensic data and automated root cause analysis cuts down investigation time from hours/days to minutes, improving SOC efficiency."
 

Cons

"There's a size limitation, allowing us to scan only small files."
"In terms of areas for improvement in SentinelOne Singularity Complete, it needs to give more straightforward directions or communication about detection or what has been detected."
"The ease of use can be better in Deep Visibility. It is not always the easiest. If I have not been in there in the Deep Visibility module for a long time, I do not always find it that easy to use. I tend to go and have to consult the help quite often if I have not been in there a long time."
"The automation of certain features could use improvement. For example, it seems common sense to me that if a threat was executed out of a task in your task scheduler that part of neutralizing the threat would be removing that task from the scheduler."
"The "false positive" detection rate could be improved, if possible, but this should not increase the risk of the endpoint being breached."
"SentinelOne makes it more difficult to define users. It is more granular than CrowdStrike, but it is not preferred because you have to check hundreds of roles."
"One of the things they could do is extend the product range to include Android and iPhone so that you could have the app on your phone as well. There is probably something going on there with that, but that's something that they're lacking at the moment. For instance, if I was to have to recommend a client to protect their phone, I'd have to recommend Norton or something else. I don't have an answer within the SentinelOne solution."
"Managing the false positives creates additional management overhead. The behavioral analysis engine might misinterpret real user behavior as malware. For example, a drafter was cleaning up a Revit folder and deleting 4,000 files. That looks like ransomware. The SentinelOne agent kicked his computer off the network."
"I would like to see a better mobile app so that I could look through my phone at the alerts and not have to go to the website. They should make it a little more mobile-accessible."
 

Pricing and Cost Advice

"The tool is free, but there's a size limitation, allowing us to scan only small files."
"It is very competitive with other solutions that are on the market. At least the last time we renewed, it was very competitive."
"We are on a subscription model by choice. Therefore, we are paying a premium for the flexibility. We would have huge cost savings if we committed to a three-year buy-in. So, it's more expensive than the other solutions that we were looking at, but we have the flexibility of a subscription model. I think the pricing is fair. For example, if we had a three-year tie-in SentinelOne versus Cylance or one of the others, there is not that much difference in pricing. There might be a few euro or dollars here and there, but it's negligible."
"I find the licensing cost for SentinelOne Singularity Complete fair."
"The pricing and licensing make sense."
"I don't deal with the cost side of things, but the licensing, as far as endpoints go, is a pretty straightforward and simple process."
"SentinelOne makes licensing easy by reducing the number of modules or packages that they have to offer. A lot of other vendors make licensing very complicated with separate modules or separate costs. By bundling necessary features, SentinelOne ensures that security leaders are not left confused by options. This bundling of necessities has served our needs well."
"The pricing is reasonable."
"The pricing appears to be pretty affordable."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Manufacturing Company
11%
Financial Services Firm
8%
University
7%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
8%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business118
Midsize Enterprise67
Large Enterprise88
 

Questions from the Community

Ask a question
Earn 20 points
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What is your experience regarding pricing and costs for SentinelOne Singularity?
It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the pricing.
 

Also Known As

No data available
Sentinel Labs, SentinelOne Singularity, Singularity Platform
 

Overview

 

Sample Customers

Information Not Available
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about Microsoft, SentinelOne, Check Point Software Technologies and others in Anti-Malware Tools. Updated: June 2026.
900,644 professionals have used our research since 2012.