Try our new research platform with insights from 80,000+ expert users

SentinelOne Singularity Cloud Security vs Sysdig Falco comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Ranking in Container Security
3rd
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
118
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Observability (2nd)
Sysdig Falco
Ranking in Container Security
17th
Average Rating
10.0
Reviews Sentiment
8.3
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Container Security category, the mindshare of SentinelOne Singularity Cloud Security is 4.2%, up from 1.9% compared to the previous year. The mindshare of Sysdig Falco is 1.7%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity Cloud Security4.2%
Sysdig Falco1.7%
Other94.1%
Container Security
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
Patrik Gunnersten - PeerSpot reviewer
Pre-Sales Manager at Conoa AB
Has delivered real-time insights for detecting runtime vulnerabilities and improving response speed
The runtime security part of Sysdig Falco has been the most valuable over the years. They do extensive monitoring, and you can get many insights and an overview and drill down into connections, but it's the runtime security that sets them apart from the competition. Sysdig Falco's real-time monitoring feature for anomaly detection is very high quality. They lean on the Falco project, which is an open-source project that is an excellent source of finding vulnerabilities. They have AI capabilities to set a baseline of the traffic that the client usually has, and then they find anomalies where things start to deviate from the baseline, and they do that exceptionally. The flexibility of Sysdig Falco's rule-driven engine for meeting security policies for customers is very good because you can have the standard features that are already out-of-the-box ready, and then you can tailor your own rules freely and create any type of rules desired.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"SentinelOne Singularity Cloud Security improved our risk posture significantly, helped reduce our mean time to detect and mean time to remediate, and enabled collaboration across cloud security, development, and AppSec teams, saving engineering time by approximately three to four hours."
"The cooperative nature of SentinelOne has influenced our decision not to shift."
"I rate SentinelOne Singularity Cloud Security ten out of ten."
"The SentinelOne Singularity Cloud Security has substantially affected my risk posture, as it was the first tool that notified me of the public exposure of a repository by a developer, allowing me to resolve the issue within minutes."
"SentinelOne Singularity Cloud Security is excellent, and I highly recommend it."
"The cloud misconfiguration is the most valuable feature."
"SentinelOne Singularity Cloud Security has a dashboard that can detect the criticality of a particular problem, whether it falls under critical, medium, or low vulnerability."
"We like the platform and its response time. We also like that its console is user-friendly as well as modern and sleek."
"We've had incidents with clients where high-impact CVEs were published, and I know comparisons where one client said if they didn't have Sysdig Falco in place, what took them about a day would have probably taken one or two months to resolve."
 

Cons

"We recently adopted a new ticket management solution, so we've asked them to include a connector to integrate that tool with Cloud Native Security directly. We'd also like to see Cloud Native Security add a scan for personally identifying information. We're looking at other tools for this capability, but having that functionality built into Cloud Native Security would be nice. Monitoring PII data is critical to us as an organization."
"One potential drawback is the cost of SentinelOne Singularity Cloud Security, which may be prohibitive for smaller businesses or startups, particularly those in regions with lower average incomes, such as India."
"They could generally give us better comprehensive rules."
"In terms of ease of use, initially, it is a bit confusing to navigate around, but once you get used to it, it becomes easier."
"I export CSV. I cannot export graphs. Restricting it to the CSV format has its own disadvantages. These are all machine IP addresses and information. I cannot change it to the JSON format. The export functionality can be improved."
"There's an array of upcoming versions with numerous features to be incorporated into the roadmap. Customers particularly appreciate the service's emphasis on intensive security, especially the secret scanning aspect. During the proof of concept (POC) phase, the system is required to gather logs from the customer's environment. This process entails obtaining specific permissions, especially in terms of gateway access. While most permissions for POC are manageable, the need for various permissions may need improvement, especially in the context of security."
"SentinelOne currently lacks a break glass account feature, which is critical for implementing Single Sign-On."
"The dashboard can be more detailed."
"One area for improvement would be having predefined security standards for measuring compliance reports."
 

Pricing and Cost Advice

"PingSafe falls within the typical price range for cloud security platforms."
"The features included in PingSafe justify its price point."
"While SentinelOne Singularity Cloud Security offers robust protection, its high cost may be prohibitive for small and medium-sized businesses."
"Singularity Cloud Workload Security's pricing is good."
"For pricing, it currently seems to be in line with market rates."
"Pricing is based on modules, which was ideal for us."
"PingSafe is less expensive than other options."
"The pricing for PingSafe in India was more reasonable than other competitors."
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
884,797 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
10%
Government
6%
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
10%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business49
Midsize Enterprise22
Large Enterprise55
No data available
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.
What is your experience regarding pricing and costs for PingSafe?
Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.
What needs improvement with PingSafe?
I do not see room for improvement in SentinelOne Singularity Cloud Security. In the future, I would like to see the identity feature with two-factor authentication. It would be good if they could a...
What needs improvement with Sysdig Falco?
Sysdig Falco is probably the most complete security solution for container-type workloads today. One area for improvement would be having predefined security standards for measuring compliance repo...
What is your primary use case for Sysdig Falco?
The primary use case for Sysdig Falco is to find vulnerabilities in real-time. It helps us find CVEs in the runtime part of a container environment, so not just scanning the code before it's deploy...
What advice do you have for others considering Sysdig Falco?
I work with many different products in the open-source world relating to containers and Kubernetes, not just Prisma Cloud by Palo Alto Networks. We work with the big ones, such as Red Hat, VMware, ...
 

Also Known As

PingSafe
No data available
 

Overview

Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Container Security. Updated: February 2026.
884,797 professionals have used our research since 2012.