SentinelOne Singularity Complete vs Symantec Endpoint Detection and Response comparison

SentinelOne Singularity Complete vs. Symantec Endpoint Detection and Response

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Com...

Ranking in Endpoint Detection and Response (EDR)

2nd

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

198

Ranking in other categories

Endpoint Protection Platform (EPP) (3rd), Anti-Malware Tools (2nd), Extended Detection and Response (XDR) (2nd)

Symantec Endpoint Detection...

Ranking in Endpoint Detection and Response (EDR)

28th

Average Rating

7.6

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of SentinelOne Singularity Complete is 5.8%, down from 7.1% compared to the previous year. The mindshare of Symantec Endpoint Detection and Response is 0.5%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Asim Naeem

Principal IT Security & Compliance at IBEX Holdings Ltd

It integrates well with other platforms, is user-friendly, and is stable

SentinelOne Singularity Complete integrates with our other security solutions, correlating data from NDR, ADR, SIEM, and XDR tools. All this information is consolidated within SentinelOne, providing a centralized access point. SentinelOne Singularity Complete has helped us streamline our security operations by consolidating multiple solutions into a single platform. We are currently in the process of acquiring a threat intelligence platform to complete our security stack. We use Ranger to monitor our network and track connected devices. This is crucial because it helps us quickly identify unauthorized machines connected to our infrastructure, including personal devices. We have additional security measures in place, but Ranger provides an extra layer of protection. It also alerts us if the SentinelOne Singularity Complete agent is missing from any new or existing machines, allowing us to take appropriate action. SentinelOne Ranger's agentless and hardware-independent nature is crucial for our environment with 26,000 endpoints, as manual management of such a large number would be extremely challenging. Ranger uses a multi-layered approach to prevent vulnerable devices from being compromised. We employ scanners, network configurations, and a risk scanner to assess devices, endpoints, servers, and cloud infrastructures. Vulnerability reports and timelines for remediation are shared with device owners or custodians. This proactive strategy enables us to address vulnerabilities efficiently and secure our infrastructure. SentinelOne Singularity Complete has significantly enhanced our security posture. While no system is impenetrable, this solution has brought us closer to achieving a high level of protection, ensuring we maintain at least a 90 percent security level. Our team is dedicated to refining alerts and eliminating false positives from our solutions. Additionally, a team is responsible for identifying and excluding alerts from the solution. We can manually expedite this process by reviewing these elements and utilizing our security tools. We have been able to reduce the alert volume by 20 percent. Our 30-member Security Operations Center team has been able to redirect their focus to other tasks due to the time saved after implementing SentinelOne Singularity Complete. SentinelOne Singularity Complete has helped us improve our mean time to detect threats, which we accomplish using the Vigilance service for detection and response. SentinelOne Singularity Complete has helped us decrease our organizational risk. We utilize the Security Scorecard to manage our security posture, which has remained steady at 90 percent.

Read full review

YusufAhmed

Information Security Specialist at IHV-Nigeria

Easy to use and competitively priced

Honestly, the product needs to continue the way it is, and I feel that everything will be fine. I haven't had any reasons to complain about the product. The product doesn’t offer MDM functionality under its current licensing model. In the future, I want the product to offer MDM. It can allow me to manage my mobile device more efficiently and effectively. Currently, there is a need for a separate license to be added to Symantec Endpoint Detection and Response to be able to use the MDM part. If both are bundled up under the same license, the administration part can be made easier.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"In incidents, SentinelOne's remediation is excellent; we can immediately see if the threat type is dynamic or static."

"Previously, we had some processes related to incident response which required more steps. We needed to upload to VirusTotal, Sandbox, et cetera. Now, this process is shortened because all of the information we need is already in SentinelOne. We can briefly analyze and even respond from one management console. If someone has SOC, using the API, they can control everything. It's very cool. I think this is the future."

"The ability to quickly and easily identify threats on our machines is valuable. The fact that it protects the environment as a whole is also valuable. They have the ability to identify network nodes, and they have Ranger as a component of the solution that allows us to see the whole picture. We can see on what we have SentinelOne and on what we do not."

"We are freeing up our resources and our security analysts' time to focus on the most critical threats to our landscape by not having to chase down false positives."

"APT and ransomware protection is valuable."

"All of the features are valuable. The way that it integrates into management with fault correction capabilities over is especially valuable. Any of the full gamut of the features that it provides are useful to us."

"The Ranger feature is valuable."

"The most valuable feature is the machine learning capability, as opposed to the traditional rule-based antivirus."

More SentinelOne Singularity Complete pros

"The most valuable feature is that the same agent can act as the endpoint detection and response agent."

"The most valuable features are that it is easy to connect and global settings are good."

"The most valuable features of this product include network isolation for machines and the ability to work with a consistent and defined set of virtual machines."

"The security is good."

"The solution is stable."

"I have had absolutely no problem with using this solution, it really works well."

"The setup is quite easy."

"The solution is scalable."

More Symantec Endpoint Detection and Response pros

Cons

"The grouping feature needs improvement."

"One way to improve and get additional benefits would be for SentinelOne to host the updated installer files for us, rather than us having to download and host them ourselves."

"The solution’s distributed intelligence at the endpoint is pretty effective, but from time to time I see that the agent is not getting the full execution history or command-line parameters. I would estimate the visibility into an endpoint is around 80 percent. There is 20 percent you don't see because, for some reason, the agents don't get all of the information."

"My biggest complaint is that when you're logged into the console there is the Help section where you can review all the documentation. But when you log in to the support portal, there is documentation there as well. They need to sync those two into one place so that I don't have to search in two different locations for an answer."

"It's fine. It's correcting all the EFC files with a virus. All the achievements, maximum EFC files. Many EFC files will be flagged as a virus. Some virus databases need to be updated. The model is good at finding many EFC files. The trouble is it needs to be updated."

"The improvement could be in terms of reducing more noise and continuing to cut that down. AI seems to be the big thing with Purple. We are excited to get our hands on that."

"SentinelOne's phishing feature could be improved."

"While SentinelOne Singularity Complete effectively visualizes security data across our solutions, requiring extensive manual effort for analysis limits its effectiveness. I would therefore rate it a seven out of ten."

More SentinelOne Singularity Complete cons

"Its UI could be more user-friendly."

"In the future, it would be nice to have playbooks in the tool, to allow for some of the common activities to be automated. For example, some of the scannings of the malware can be too manual for a specific device. Additionally, a vulnerability manager would be beneficial."

"The network forensics feature could be improved."

"Technical support is not as good as we expect, and resolving problems should be more timely."

"It would be beneficial to have more integration and compatibility with other platforms."

"I would like to see better scanning capabilities."

"The solution’s scalability and stability could be improved."

"It would be nice to see more granular timeline analysis."

More Symantec Endpoint Detection and Response cons

Pricing and Cost Advice

"I do not know much about the pricing. What I do know is that the person who negotiates most of the pricing is quite a hard bargainer. In that regard, he often says that he managed to get a very good deal. When we first looked at replacing our old system with Singularity Complete, its price was definitely a big factor. Back then, Singularity Complete was fairly new to the marketplace. We got quite a good deal as an early adopter. They have honored that and respected that we were an early adopter, and I feel we are still getting a very good price."

"The pricing for SentinelOne Singularity Complete is competitive."

"SentinelOne Singularity Complete is reasonably priced."

"SentinelOne is significantly less expensive than CrowdStrike. I recently did a price comparison between CrowdStrike and SentinelOne to determine where we are going for the next three years. CrowdStrike is 200% to 300% the cost."

"We pay $30,000 a year for 275 endpoints. We're growing, so I plan to buy another 75 endpoints. There is still a year and a half left in my three-year subscription, so I'm going to increase my endpoint count by 30 percent."

"I rate Singularity Complete four out of 10 for affordability. SentinelOne costs more than traditional antivirus solutions, but we get more out of it. It hasn't saved us any money, but it's an EDR solution, so we get a lot of value from it."

"The solution's pricing is not too bad for what it's offering, like the documentation that comes with it."

"It is not sold as a consumer product. It is only sold based on the number of licenses. So, as an MSP, you're probably going to pay about three and a half dollars per license, per month to have SentinelOne."

More SentinelOne Singularity Complete pricing and cost advice

"We pay around $100,000 for 5000 licenses every year."

"The price is really high and it should be lower."

"The price is okay, but it really depends on the customer's requirements."

"The price is reasonable."

"We have a yearly subscription, and the pricing is fair."

"The product is cheap."

"We are satisfied with the pricing."

"Compared to the tools of competitors, Symantec Endpoint Detection and Response is a cheaply priced product."

More Symantec Endpoint Detection and Response pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Manufacturing Company

Financial Services Firm

Government

Financial Services Firm

12%

Computer Software Company

12%

Manufacturing Company

University

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...

What do you like most about SentinelOne Singularity?

The Ranger feature is valuable.

What do you like most about Symantec Endpoint Detection and Response?

The security is good.

What is your experience regarding pricing and costs for Symantec Endpoint Detection and Response?

I am not aware of the pricing details, as that falls under the management's responsibility.

What needs improvement with Symantec Endpoint Detection and Response?

There are several areas where Symantec Endpoint Detection and Response can improve, including shell features, web control, asset management, and device control. Specifically, the application contro...

Microsoft Defender for Endpoint vs SentinelOne Singularity Complete

Comparisons

Compared 5% of the time

CrowdStrike Falcon vs SentinelOne Singularity Complete

Compared 5% of the time

Datto Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete

Compared 5% of the time

Darktrace vs SentinelOne Singularity Complete

Compared 5% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Complete

Compared 4% of the time

More SentinelOne Singularity Complete Competitors

Kaspersky Endpoint Detection and Response Expert vs Symantec Endpoint Detection and Response

Compared 18% of the time

Cisco Secure Endpoint vs Symantec Endpoint Detection and Response

Compared 12% of the time

Kaspersky Endpoint Security Cloud vs Symantec Endpoint Detection and Response

Compared 10% of the time

Trend Vision One vs Symantec Endpoint Detection and Response

Compared 9% of the time

Kaspersky Endpoint Security for Business vs Symantec Endpoint Detection and Response

Compared 5% of the time

More Symantec Endpoint Detection and Response Competitors

Product Reports

SentinelOne Singularity Complete

Download SentinelOne Singularity Complete product report

Symantec Endpoint Detection and Response

Download Symantec Endpoint Detection and Response product report

Symantec Endpoint Detection and Response report

Also Known As

Sentinel Labs, SentinelOne Singularity

No data available

Overview

SentinelOne Singularity Complete provides AI-driven threat detection and response with features like ransomware protection and rollback, offering endpoint protection with minimal system impact and deep forensic analysis.

SentinelOne Singularity Complete combines machine learning and artificial intelligence to offer robust endpoint protection. It delivers real-time insights and advanced threat detection through seamless integration with third-party tools, allowing for efficient endpoint management. With an emphasis on user-friendliness, it ensures reduced false positives. Room for improvement includes better integration options, enhanced reporting, and more precise analytics to tackle false positives. Users seek improved interoperability with systems and comprehensive support for legacy systems.

What are the key features of SentinelOne Singularity Complete?

Rollback Feature: Enables restoration of affected systems to a healthy state after an attack.
Ransomware Protection: Advanced mechanisms to prevent and mitigate ransomware threats.
Machine Learning and AI: Utilizes cutting-edge technology for precise threat detection and response.
Seamless Integration: Works well with third-party tools for enhanced endpoint protection.
Real-Time Protection: Proactively defends against advanced threats with minimal delays.

What benefits and ROI should users consider?

Reduced False Positives: Accurate threat detection limits operational disruptions.
Efficient Endpoint Protection: Ensures security with low system impact.
User-Friendly Experience: Simplified management and ease of use aid productivity.
Deep Forensic Analysis: Assists in effective threat investigation and response.
Cost-Effective Security: Positions as a worthwhile alternative to traditional antivirus solutions.

Organizations from industries like finance, healthcare, and technology deploy SentinelOne Singularity Complete to safeguard endpoints such as PCs, servers, and virtual machines. Equipped with EDR, it effectively replaces traditional antivirus systems and integrates with cloud technology for real-time security insights.

SentinelOne

Symantec Endpoint Detection and Response (EDR) is a powerful security solution designed to help organizations proactively detect, investigate, and mitigate advanced threats across their endpoint environments. As part of Broadcom's cybersecurity portfolio, Symantec EDR provides comprehensive visibility into endpoint activities, enabling security teams to quickly identify and respond to threats that evade traditional defenses.

Symantec EDR leverages machine learning, behavioral analysis, and global threat intelligence from Symantec's vast network to detect sophisticated threats, including zero-day attacks, ransomware, and advanced persistent threats (APTs). This allows organizations to identify malicious activities early and respond swiftly to mitigate potential damage. The solution offers automated response options that enable security teams to contain and remediate threats quickly.

Symantec EDR provides detailed forensic capabilities, allowing security analysts to dive deep into endpoint data, investigate incidents thoroughly, and understand the scope and impact of attacks. Features such as timeline analysis, incident graphing, and the ability to isolate endpoints enhance investigative efforts and support effective remediation strategies.

With its centralized management console, Symantec EDR offers visibility across the entire endpoint environment, regardless of the operating systems or whether endpoints are on-premise or remote. Symantec EDR seamlessly integrates with other Symantec security solutions, enhancing its detection capabilities and enabling a unified approach to threat management. Its scalable architecture ensures that businesses of all sizes can benefit from its advanced security features without compromising performance.

Quickly discover and resolve threats with deep endpoint visibility and superior detection analytics, reducing mean time to remediation. Overcome cyber security skills shortages and streamline SOC operations with extensive automation and built-in integrations for sandboxing, SIEM, and orchestration.

Fortify security teams with the unmatched expertise and global scale of Symantec Managed Endpoint Detection and Response services.
Roll out Endpoint Detection and Response (EDR) across Windows, macOS, and Linux devices using Symantec Endpoint Protection (SEP)-integrated EDR or a dissolvable agent.

Broadcom

Sample Customers

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Information Not Available

SentinelOne Singularity Complete vs. Symantec Endpoint Detection and Response