SentinelOne Singularity Endpoint vs Stormshield Endpoint Security comparison

SentinelOne Singularity Endpoint vs. Stormshield Endpoint Security

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 4.5%, up from 4.4% compared to the previous year. The mindshare of Stormshield Endpoint Security is 0.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Endpoint	4.5%
Cortex XDR by Palo Alto Networks	3.6%
Stormshield Endpoint Security	0.6%
Other	91.3%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

it_user745593

Senior Project Manager, PMP at a transportation company with 10,001+ employees

Protects the global station and has good stability

The feature I find most valuable is that it protects the global station The solution's integration with the Windows environment could be better. The solution needs better integration with products, if it did, it would have the assumption of better security. I've been using the solution since…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It integrates well into the environment."

"It collects and caches and the knowledge of machine learning from different customers to take to the cloud. It makes it better to use for everybody. It allows for quick learning and updates and can, therefore, offer zero-day malware security. This sharing of metadata helps make the solution very safe."

"One of the main benefits of the solution is its intelligence to correlate the events into an incident."

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."

"It is easy to use."

"The integrations are out-of-the-box, as are the playbooks."

"Stability is a primary factor, and then there's the ease of distribution and policy management."

"It's a perfect solution. It integrates well into the environment."

More Cortex XDR by Palo Alto Networks pros

"We have had very few false positives or false negatives, which allows our analysts to focus on their work instead of dealing with noise."

"SentinelOne Singularity Complete has behavior-based AI that detects alerts that are not predefined without relying on predefined rules, detecting zero-day attacks or any behavioral changes in the baseline of the user or any suspicious anomalies through AI-based threat detection only."

"The solution works well in general."

"The ability to quickly and easily identify threats on our machines is valuable. The fact that it protects the environment as a whole is also valuable. They have the ability to identify network nodes, and they have Ranger as a component of the solution that allows us to see the whole picture. We can see on what we have SentinelOne and on what we do not."

"The product can scale as needed."

"The most valuable feature is the rollback functionality, which is highly impactful. We can roll back deleted or compromised files. The Ranger feature is also interesting. It enables the solution to visualize the logs and assets that are not yet covered by the platform. Ranger also enables deployments and revisions. It doesn't always work, but it's effective 90 percent of the time."

"Overall, SentinelOne Singularity Complete helps me consolidate my security solutions, as it provides strong automation, reliable support, and valuable rollback capabilities."

"We are very satisfied with the product overall."

More SentinelOne Singularity Endpoint pros

"The feature I find most valuable is that it protects the global station."

"If you need a Windows based multi-functional end-point security solution then this product is for you."

"It is very good for preventing cryptolocker attacks."

"The feature I find most valuable is that it protects the global station."

Cons

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"In general, the price could be more competitive."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"Cortex XDR by Palo Alto Networks could improve by offering remote management."

"There are some default policies which sometimes affect our applications and cause them to run around."

"There's an overall lack of features."

"There's room for improvement with Mac device installations, which can be challenging."

"It is a complex solution to implement."

More Cortex XDR by Palo Alto Networks cons

"We need to analyze the threats and make decisions based on that, so the analytics could be better at analyzing exactly where the threats are coming from."

"In the beginning, we had some issues with their product on some of the Windows 32-bit operating systems."

"They need to improve how we install the software."

"SentinelOne's phishing feature could be improved."

"The way Singularity Complete handles blocking external mass storage is annoying because it is so difficult to unblock single endpoints."

"The false positive rate has room for improvement."

"It's good on Linux, and Windows is pretty good except that the Windows agents sometimes ask for a lot of resources on the endpoints."

"Sometimes, support can be lacking. We would like to have more interactive sessions, which are not currently available."

More SentinelOne Singularity Endpoint cons

"The solution's integration with the Windows environment could be better."

"Release speed for newer versions. When a new OS is released, you've got to wait half year to get the new version that covers the new Windows OS."

"The solution's integration with the Windows environment could be better."

"Only Windows based. Dependence on MS updates and service start-up priority."

Pricing and Cost Advice

"I am using the Community edition."

"I don't like that they have different types of licenses."

"It has a yearly renewal."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"The pricing is a little high. It is per user per year."

"I feel it is fairly priced."

"Cortex XDR’s pricing is very reasonable."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"I rate Singularity Complete four out of 10 for affordability. SentinelOne costs more than traditional antivirus solutions, but we get more out of it. It hasn't saved us any money, but it's an EDR solution, so we get a lot of value from it."

"The pricing for SentinelOne Singularity Complete is competitive."

"SentinelOne is more affordable than some competing products, and it's not overly expensive for what you're getting."

"The price for it is very competitive compared to other Next Gen EPP."

"The pricing is reasonable. It may be a little high, but it's on par with everything out there."

"I don't deal with the cost side of things, but the licensing, as far as endpoints go, is a pretty straightforward and simple process."

"We are on a subscription model by choice. Therefore, we are paying a premium for the flexibility. We would have huge cost savings if we committed to a three-year buy-in. So, it's more expensive than the other solutions that we were looking at, but we have the flexibility of a subscription model. I think the pricing is fair. For example, if we had a three-year tie-in SentinelOne versus Cylance or one of the others, there is not that much difference in pricing. There might be a few euro or dollars here and there, but it's negligible."

"The larger count you have, the deeper discount you will receive in your contract."

More SentinelOne Singularity Endpoint pricing and cost advice

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Government

Comms Service Provider

17%

Financial Services Firm

11%

Construction Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	21
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	109
Midsize Enterprise	59
Large Enterprise	79

No data available

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

What needs improvement with SentinelOne Singularity?

I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Ask a question

Earn 20 points

Comparisons

Compared 9% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 4% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Huntress Managed EDR vs SentinelOne Singularity Endpoint

Compared 2% of the time

Darktrace vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Symantec Endpoint Security vs Stormshield Endpoint Security

Compared 17% of the time

Sophos Endpoint vs Stormshield Endpoint Security

Compared 12% of the time

Trellix Endpoint Security Platform vs Stormshield Endpoint Security

Compared 11% of the time

Fortinet FortiClient vs Stormshield Endpoint Security

Compared 9% of the time

WithSecure Elements Endpoint Protection vs Stormshield Endpoint Security

Compared 7% of the time

More Stormshield Endpoint Security Competitors

Product Reports

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

SentinelOne Singularity Endpoint

Download SentinelOne Singularity Endpoint product report

Endpoint Protection Platform (EPP)

Download Stormshield Endpoint Security product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Sentinel Labs, SentinelOne Singularity, Singularity Platform

SkyRecon Systems StormShield Security Suite

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Stormshield Endpoint Security provides robust protection, safeguarding critical business operations against evolving threats. It addresses security needs with advanced solutions that ensure comprehensive threat management and mitigation.

Stormshield Endpoint Security is tailored for a tech-savvy audience seeking reliable defense mechanisms to protect sensitive data. It combines cutting-edge technologies to provide a high level of security. Whether dealing with targeted attacks or generic malware, businesses trust its versatile approach, running seamless operations while mitigating risks. It supports endpoints with minimal impact on performance, ensuring continuous productivity.

What are the key features of Stormshield Endpoint Security?

Behavioral Analysis: Detects potential threats by analyzing activity patterns, ensuring proactive security measures.
Application Control: Restricts unwanted applications, allowing only approved programs to run, reducing vulnerability.
Network Protection: Secures data in transit by monitoring network traffic and preventing unauthorized access.
Advanced Threat Intelligence: Utilizes threat intelligence to anticipate attacks and respond swiftly to new security challenges.

What benefits should users expect when evaluating Stormshield Endpoint Security?

Cost-Efficiency: Reduces potential losses from security breaches, justifying investment with strong threat prevention.
Scalability: Adapts to business growth, offering consistent protection without requiring constant upgrades.
Easy Deployment: Provides straightforward installation and configuration, allowing quick adoption and minimal downtime.
Compliance Support: Helps meet industry standards, ensuring regulatory adherence for enhanced trust and credibility.

In sectors like finance and healthcare, Stormshield Endpoint Security is implemented to safeguard sensitive client data and meet compliance standards. In manufacturing, it secures networks from industrial espionage, addressing unique challenges by providing tailored security enhancing business resilience.

Stormshield

Sample Customers

CBI Health Group, University Honda, VakifBank

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Arkoon, Netasq

SentinelOne Singularity Endpoint vs. Stormshield Endpoint Security