No more typing reviews! Try our Samantha, our new voice AI agent.

Sentinel vs SentinelOne Singularity AI SIEM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.5
Sentinel boosts ROI by tracking user behavior and reducing security costs, with returns often seen within three years.
Sentiment score
5.2
SentinelOne SIEM enhances SOC efficiency, reduces investigation times over 50%, and offers value despite higher pricing.
SentinelOne Singularity AI SIEM has reduced our response time to true positive alerts by approximately forty percent through automation.
IT Security Analyst at a tech consulting company with 11-50 employees
At the moment, I feel the pricing is a little bit on the higher side, but the tool is positioned in a place where risk is very high, and we do not want to take chances, so we are prepared to pay the premium.
Group Chief Information Officer at NeST Information Technologies Pvt Ltd
The effect of SentinelOne Singularity AI SIEM on our customers' SOC efficiency in investigating alerts and responding to incidents is significant.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
 

Customer Service

Sentiment score
5.8
Sentinel's customer service is highly rated for quick, effective support, though low-priority and backend support may vary.
Sentiment score
7.6
SentinelOne Singularity AI SIEM's support is highly rated for responsiveness, AI-based help, and effective problem resolution.
The customer support for Sentinel is very good; any tickets logged will be answered immediately within the given timeframe.
Senior Specialist at a tech vendor with 10,001+ employees
SentinelOne Singularity AI SIEM has AI-based technical support available.
IT Security Analyst at a tech consulting company with 11-50 employees
Based on my experience with the technical support of SentinelOne Singularity AI SIEM, I would rate them a ten.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
I would rate the technical support of SentinelOne Singularity AI SIEM a nine.
IT Security Consultant at Systemhaus for you GmbH
 

Scalability Issues

Sentiment score
7.8
Sentinel is highly scalable, integrating with devices and servers easily, though setup challenges exist due to skill gaps.
Sentiment score
5.7
SentinelOne Singularity AI SIEM scales efficiently with proper configuration and management, though implementation can be challenging.
With any AI adoption, the end goal should be more governance and data security and safety.
Associate Vice President at Novac Technology Solutions
The performance depends on the configuration.
IT Security Analyst at a tech consulting company with 11-50 employees
It is scalable, and we can increase the compute size. It can scale. There are no challenges.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
 

Stability Issues

Sentiment score
8.2
Sentinel is rated highly for stability, though Java RAM issues and network sensitivity sometimes affect its seamless 5,000 events/second performance.
Sentiment score
7.7
SentinelOne Singularity AI SIEM is generally praised for stability and fast log searches, though some report past issues.
When it comes to stability, I would give SentinelOne Singularity AI SIEM a nine.
IT Security Consultant at Systemhaus for you GmbH
In terms of performance stability, I have never had any crashes, downtimes, or performance issues.
Cyber Security Engineer at a retailer with 201-500 employees
Even the data lake feature they have, in terms of keeping all the logs intact, those log searches are extremely fast on SentinelOne Singularity AI SIEM, even though the data is very high.
Technical Lead at CloudBolt Software
 

Room For Improvement

Sentinel's unclear security, complex interfaces, and integration issues hinder user experience and compliance, demanding improved customization and dashboards.
SentinelOne Singularity AI SIEM struggles with stability, integrations, UI issues, high pricing, and requires improved support and automation.
Price is always a consideration, so the price would be nice if it were lower.
Manager, Customer Success at Coltek Business Soltuions
The adoption rate will be less compared to other products, as this can be a time-taken process because all my data needs to be offloaded and the system needs to understand my existing alerts, logs, and other things.
Associate Vice President at Novac Technology Solutions
The interface flickers frequently, and sometimes it does not load properly.
IT Security Analyst at a tech consulting company with 11-50 employees
Whenever OT security comes into the picture, the customers do not allow us to integrate their OT devices on a cloud. It should be available on-premises because the OT SIEM market, in the India market for instance, is something around a four to eight billion dollar market.
Vice President Cyber Security Practice Head at orbit techsol w pvt.ltd
 

Setup Cost

Sentinel offers flexible subscription pricing with discounts, yet costs align with competitors, suitable for enterprises but pricey for small businesses.
They nearly always bill it in dollars, so if it can be billed in our currency, that would be helpful and fixed in our currency.
Manager, Customer Success at Coltek Business Soltuions
My experience with pricing, setup cost, and licensing shows that while it is a little on the higher side, since it is part of a package for all Microsoft products, I feel it is a better choice comparatively than other SIEMs in the market.
Senior Specialist at a tech vendor with 10,001+ employees
I find SentinelOne's pricing to be reasonable and competitive.
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
 

Valuable Features

Sentinel provides comprehensive threat detection and analysis with seamless Microsoft integration, offering real-time insights and scalable security solutions.
SentinelOne Singularity AI SIEM enhances threat detection and response efficiency with AI-driven insights and flexible integrations.
Sentinel's best features include that it's a very easy product to use.
Manager, Customer Success at Coltek Business Soltuions
In terms of metrics showing how Sentinel has helped, as part of log filtering, we have reduced around thirty to thirty-five percent of false-positive incident creation.
Senior Specialist at a tech vendor with 10,001+ employees
We finally have visibility into things that were never visible before.
IT Security Consultant at Systemhaus for you GmbH
It employs a combination of AI and ML to check for viruses or any other malicious processes, including fileless attacks.
Cyber Security Engineer at a retailer with 201-500 employees
The AI-driven threat detection capabilities improve our overall security posture.
Associate Vice President at Novac Technology Solutions
 

Categories and Ranking

Sentinel
Ranking in Security Information and Event Management (SIEM)
16th
Average Rating
7.6
Reviews Sentiment
6.8
Number of Reviews
18
Ranking in other categories
No ranking in other categories
SentinelOne Singularity AI ...
Ranking in Security Information and Event Management (SIEM)
13th
Average Rating
8.8
Reviews Sentiment
6.5
Number of Reviews
8
Ranking in other categories
AI Observability (10th)
 

Mindshare comparison

As of June 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Sentinel is 2.7%, down from 3.5% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.4%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity AI SIEM1.4%
Sentinel2.7%
Other95.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

Simon Johnston - PeerSpot reviewer
Manager, Customer Success at Coltek Business Soltuions
Simple antivirus solution integrates well but could improve pricing and currency options
I don't really have experience working with these solutions. I promote them for our clients, but I don't work with them. I can't share my experience with these tools as I make assumptions about that. For both Adlumin and CrowdStrike, both confirm that they're scalable and enterprise-ready and all those kinds of things. We haven't had any specific problem with either of those. We just have a preference for which one we would prefer. If somebody says they want to use a different one from the one that we prefer, then we have to find reasons why they aren't. But scalability is not one of the reasons that one is better over the other. I don't really have advice for people that are looking into using Sentinel; just do your research across what is available. On a scale of one to ten, I rate Sentinel a seven.
MM
Information Security Principal at a venture capital & private equity firm with 1,001-5,000 employees
Consolidated security operations have improved detection speed and reduced SOC costs
There is room for improvement when it comes to the technical support quality and expertise of SentinelOne. Sometimes, the technical support team does not know how to resolve certain issues and takes time to respond, often requiring follow-up interactions within 24 hours. SentinelOne Singularity AI SIEM can be improved in terms of support capabilities. Some logs from the server side need to be ingested. Secureworks was integrating with domain controllers and other systems, but SentinelOne still has some gaps. Some vendors cannot be integrated directly. For example, we are using Cisco Umbrella for DNS security, and we have to integrate it through an Amazon S3 bucket where we dump the logs and SentinelOne reads them from that location. For some Microsoft integrations, we must enable certain storage components and pay Microsoft directly to retrieve logs. There is no direct integration, so we must access the logs through that workaround. Previously with Secureworks, we had direct integration with Microsoft. Direct integration with Microsoft is not available now. SentinelOne needs to work on many product integrations to enable direct connectivity.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Manufacturing Company
8%
Computer Software Company
8%
Comms Service Provider
7%
Outsourcing Company
11%
Construction Company
8%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise3
Large Enterprise8
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
 

Questions from the Community

What is your experience regarding pricing and costs for NetIQ Sentinel?
I don't have too many comments overall about pricing as we're in South Africa, so it makes more sense if it's billed in rand. They nearly always bill it in dollars, so if it can be billed in our cu...
What needs improvement with NetIQ Sentinel?
I'm not sure what the room for improvement is for Sentinel. It needs to stay current, and it does, so I suppose that's fine. I don't have a high demand for what it should do. Price is always a cons...
What is your primary use case for NetIQ Sentinel?
It's our go-to choice for antivirus. I use Sentinel a lot.
What needs improvement with SentinelOne Singularity AI SIEM?
I would want the false positive ratio to be lower and would want to improve that aspect so the true will be more, and the false will be lesser. Other than false positives, the true will be increase...
What is your primary use case for SentinelOne Singularity AI SIEM?
We discuss with customers whether they want to go on a cloud or on-premises for the usual use cases of SentinelOne Singularity AI SIEM that I work with mostly. If a customer has a SentinelOne EDR, ...
What advice do you have for others considering SentinelOne Singularity AI SIEM?
Correlation, alerting, reporting, and helping with the AI-based alerts generated by the AI are the usual use cases. The parsing is already built into SentinelOne Singularity AI SIEM. There is no ch...
 

Also Known As

NetIQ Sentinel, Novell SIEM
No data available
 

Overview

 

Sample Customers

Faysal Bank, GaVI, Handelsbanken, ISC Mªnster, Lambeth Council, Swisscard, The Municipality of Siena, Tukes, University of Dayton, University of the Sunshine Coast
Information Not Available
Find out what your peers are saying about Sentinel vs. SentinelOne Singularity AI SIEM and other solutions. Updated: June 2026.
900,747 professionals have used our research since 2012.