Try our new research platform with insights from 80,000+ expert users

SentinelOne Singularity Cloud Security vs Sysdig Falco comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Ranking in Container Security
3rd
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
116
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Software Development (1st), AI Observability (2nd)
Sysdig Falco
Ranking in Container Security
19th
Average Rating
10.0
Reviews Sentiment
8.3
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of SentinelOne Singularity Cloud Security is 3.5%, up from 1.7% compared to the previous year. The mindshare of Sysdig Falco is 1.8%, down from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security3.5%
Sysdig Falco1.8%
Other94.7%
Container Security
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
Patrik Gunnersten - PeerSpot reviewer
Pre-Sales Manager at Conoa AB
Has delivered real-time insights for detecting runtime vulnerabilities and improving response speed
The runtime security part of Sysdig Falco has been the most valuable over the years. They do extensive monitoring, and you can get many insights and an overview and drill down into connections, but it's the runtime security that sets them apart from the competition. Sysdig Falco's real-time monitoring feature for anomaly detection is very high quality. They lean on the Falco project, which is an open-source project that is an excellent source of finding vulnerabilities. They have AI capabilities to set a baseline of the traffic that the client usually has, and then they find anomalies where things start to deviate from the baseline, and they do that exceptionally. The flexibility of Sysdig Falco's rule-driven engine for meeting security policies for customers is very good because you can have the standard features that are already out-of-the-box ready, and then you can tailor your own rules freely and create any type of rules desired.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"SentinelOne Singularity Cloud Security provides email alerts and ranks issues based on severity, such as high, critical, etc., that help us prioritize issues."
"The most valuable feature of SentinelOne Singularity Cloud Security is its advanced AI and machine learning capabilities, which allow it to identify and respond to threats in real time."
"The monitoring tool has comprehensive monitoring features."
"We use the infrastructure as code scanning, which is good."
"SentinelOne Singularity Cloud Security is better than other vendors because we get all the cloud-related, data center-related information."
"The multi-cloud support is valuable. They are expanding to different clouds. It is not restricted to only AWS. It allows us to have different clouds on one platform."
"All the features we use are equal and get the job done."
"The ease of use of the platform is very nice."
"We've had incidents with clients where high-impact CVEs were published, and I know comparisons where one client said if they didn't have Sysdig Falco in place, what took them about a day would have probably taken one or two months to resolve."
 

Cons

"Whenever I view the processes and the process aspect, it takes a long time to load."
"A beneficial improvement for SentinelOne Singularity Cloud Security would be integration with Jira, allowing for a more streamlined ticketing system."
"I would like additional integrations."
"In addition to the console alerts, I would like SentinelOne Singularity Cloud Security to also send email notifications."
"One of our use cases was setting up a firewall for our endpoints, specifically for our remote users... We were hoping to utilize SentinelOne's firewall capabilities, but there were limitations on how many URLs we could implement. Because of those limitations on the number of URLs, we weren't able to utilize that feature in the way we had hoped to."
"SentinelOne Singularity Cloud Security has limited legacy system support and may not fully support older operating systems or legacy environments."
"Sometimes the Storyline ID is a bit wacky."
"In terms of ease of use, initially, it is a bit confusing to navigate around, but once you get used to it, it becomes easier."
"One area for improvement would be having predefined security standards for measuring compliance reports."
 

Pricing and Cost Advice

"SentinelOne provided competitive pricing compared to other vendors, and we are satisfied with the deal."
"Its pricing was a little less than other providers."
"SentinelOne offers excellent pricing and licensing options."
"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."
"It is cost-effective compared to other solutions in the market."
"While I'm slightly out of touch with pricing, I know SentinelOne is much cheaper than other products."
"We found it to be fine for us. Its price was competitive. It was something we were happy with. We are not a Fortune 500 company, so I do not know how pricing scales at the top end, but for our cloud environment, it works very well."
"It's not cheap, but it is worth the price."
Information not available
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
10%
Government
6%
Computer Software Company
14%
Financial Services Firm
14%
Manufacturing Company
10%
Comms Service Provider
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise20
Large Enterprise54
No data available
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
We did not try to use the threat investigations feature from SentinelOne Singularity Cloud Security.Drift detection with respect to infrastructure code is important. When somebody makes changes to ...
What needs improvement with Sysdig Falco?
Sysdig Falco is probably the most complete security solution for container-type workloads today. One area for improvement would be having predefined security standards for measuring compliance repo...
What is your primary use case for Sysdig Falco?
The primary use case for Sysdig Falco is to find vulnerabilities in real-time. It helps us find CVEs in the runtime part of a container environment, so not just scanning the code before it's deploy...
What advice do you have for others considering Sysdig Falco?
I work with many different products in the open-source world relating to containers and Kubernetes, not just Prisma Cloud by Palo Alto Networks. We work with the big ones, such as Red Hat, VMware, ...
 

Also Known As

PingSafe
No data available
 

Overview

Find out what your peers are saying about Palo Alto Networks, Wiz, SentinelOne and others in Container Security. Updated: January 2026.
881,082 professionals have used our research since 2012.