SentinelOne Erfahrungen

SentinelOne was easy to deploy into our environment!

Honestly not a lot of issues, we like SentinelOne!

Autonomous response to threats regardless of being online of offline in connectivity to the management console. Ease of deployment and configuration. The simple UI with the access to the detailed product documentation, which provides comprehensive details needed for operations as well as troubleshooting. The support service, which responds rapidly and sorts out the issues within few mail correspondences.

They would require few feature additions in vulnerability management to compete with other leading vendors.

Agent install - deployed to a PC - reboot and it's working. Web console filtering allows identification of incidents and configuration in a fairly simple manner.

Some upgrades of the product have introduced major issues. eg One release broke some OS upgrades on certain models of laptop leaving them unable to boot. Another version introduced crippling speed issues with Adobe products. To their credit they do eventually fix these issues, but not quickly enough.

As a user of SentinelOne in my organization, I am pleased to know that the platform has been recognized as a leader in the Gartner Magic Quadrant, as well as being rated highly in Gartner Critical Capabilities reports. The platform's performance in MITRE Ingenuity Evaluation reports has also been exceptional. These recognitions provide me with confidence in SentinelOne's ability to deliver reliable and effective endpoint protection. Additionally, I appreciate the platform's advanced features such as its one-click automated remediation and rollback capability, which significantly simplifies the incident response process. These features enable me to respond to potential security threats efficiently, effectively, and with minimal disruption to my organization's operations. Overall, SentinelOne's recognition in industry reports and advanced capabilities make it a valuable tool for my organization's endpoint protection needs.

As a user of SentinelOne in my organization, I believe that the platform would benefit from including patching capabilities within its application vulnerability assessment solution. This would provide a more comprehensive approach to endpoint protection, helping to ensure that vulnerabilities are not only identified but also promptly remediated. Additionally, while I appreciate the advanced features and capabilities of SentinelOne, I do believe that the pricing is on the higher side compared to some other endpoint protection solutions in the market. As a user, I would welcome more affordable pricing options that are accessible to organizations of all sizes. These suggestions are provided as potential areas for improvement and do not necessarily reflect the experiences of all SentinelOne users.

tons of features but more importantly security. we never had any incident since we deployed sentinelone. rollback feature is awesome, threat hunting is very good and visualization of events with deep diving is something which helps to understand the overall threat landscape

only thing i don't like about them is their support is not locally available and they keep on introducing new features as a module with additional charges

Overall, Sentinel One is easy to deploy, easy to monitor and has many features that other AV solutions don't offer or only include at a higher price-point. If Vigilance is added to the subscription, you will sleep better at night. It is pricey, but, knowing that you have a team that responds intantly to an incident is priceless. They can remediate, investigate, roll-back and many other things. This has made my job far easier and I do sleep better at night knowing that someone is always looking out for my environment.

During our initial deployment, we had several PC's that had to be reloaded from scratch. This occurred when we began our initial deployment of Windows 10 in our environment. The version we were using caused the OS to stop functioning. Re-imaging was our only option. We reported, and were asked to try a newer version. No further issues and we only had a small handful of PC's affected. Only one other con so far....price. Sentinel One is not cheap, but you get what you pay for.

I love how easyer it is to use and the automated rediation, roll back and isolation features to do the work for me.

I wish that they had an auto update feature for agent versions. It does update the current version with needed things, but it does not update the installed agent to a new version. Have to push it out manually via the console.

- Easy to implement- Policies are easily customizable- Host Firewall is a great feature- Remote shells allows to quickly investigate incidents.

- Host Firewall should be improved to control web traffic.

It was easy to demo, test and deploy. The product shows info on the endpoints in a easy to read format.

None really. The main package had everything we needed.

The price point to get the EDR values is the winning solution for us. Crowdstrike was considered multiple times, but S1 beat it in our review when taking in price/value concerns, not to mention the alert values were more spot on with "real" alerts that wasted our time much less. S1 also ties in with tons of other services in the cybersec world with it's API options.

The occasional alert that's false-postive or the pulling-network-cord feature on endpoints that don't appear to have a lateral spreading virus. (Rare detection flaw maybe). The biggest gripe would be years ago if the S1 software had some kind of internal database corruption, rebooting our domain controllers could nuke it from orbit... thankfully, this has not happened for over a year and we're very happy now.

With a staff of 2 and over 150 employees and nearly 200 devices it is essential that we have XDR that is easy to use and as little work for administration as possible. SentinelOne delivers in spades. I can't say enough good things about this product.

It is a little on the expensive side of the solutions we have used in the past but so worth it.

Sentinel One is very simple in deployment all the resources are available easy to understand for even a new user. the built-in architecture is very simple and the rollout agent is easy to deploy or pushing with 3rd party tools.

When it comes to its XDR capabilities way ahead of all the traditional products, its Machine learning capabilities, and roll-back features, etc.. special comment for its storyline based on events and any incident that happens. Auto remediation capabilities are exceptional.

as the product has good capabilities but lack's in defining things deeply. building deep level policy fro endpoints or DLP based policy on products are limited.

Endpoint-specific policies are not so flexible and also not feasible for some customers because of their price.

For the past one year am using this product . What i like the most is its ability to find vulnerability in endpoint systems and sudden disconnection form the local network, which makes the other systems in the network safe. It even finds the scripts running in the endpoint and helps us to identify potential security breaches.

Being a cloud service sometimes the web login is not available and also the frequent updation of the User interface makes it really confusing . When ever a system is blocked from network and if there is no internet connection for the system its to much difficult to restore he network , only thing that we can so is to uninstall the software and then connect the network.

The most impactful feature of the product is the protection. If an incident is detected the device is immediately disconnected from the network and the team is notified via email. This kicks off a response process for my team to investigate and label as a true incident of a false positive.

I would say the only weakness of the product is the lack of ad hoc reporting. I have a need to create special reporting and there is not a feature to do that.

Ease of deployment, comprehensive visibility into threats and threat lifecycles, amazingly versatile exclusion functionality.

Some of the desired features are not available in the Core SKU

I like the way you can customize exclusions and alerts.
I like the web console for endpoint management and the many options you have from there including taking an endpoint offline.

Navigating the web console is slow when you have many agents installed.
Typically an endpoint reboot is required when you make any changes like a new exclusion, enable/disable the agent. This is not convenient of practical.
Identifying the actual file or process that is the source of an alert can at times be challenging.

We love how transparent S1 is. We get ZERO complaints about the software blocking or causing other headaches. We like how accurate the matching is and the automatic remediation it provides.

It's not free (just kidding). There isn't really anything to dislike about the product. You all are on the right track and honestly the only EDR worth replacing Microsoft Defender with after it's all said and done.

S1 provides most if not all of the features of its competitors but at a much better price point.

Understanding the UI can be confusing and figuring out how to roll-out the software can be a little rough. I ended up using a 3rd party tool to roll it out.

Easy to deploy. Agent is lightweight. Locked down our environment - internal pen-testers have trouble bypassing it. Has saved us a few times as users will be users and click on anything and everything. Has been rock solid for the past year. Happy with the purchase.

Sometimes it blocks things and it's tough to tell unless you really dig into it. Sometimes causes legit software to stop working until you whitelist. No automatic update for agents.

Very easy to use. Installation steps are easy to follow.

When whitelisting something that was flagged, it does something weird to the file path. The actual file path isn't whitelisted. You have to go in and manually change it.

I really like the ease of use with the software and how accurate it all is. It makes our daily IT lives a lot easier.

The cost of the product is a bit much for the upper tiers, but overall justifiable to some.

The responsiveness of the product to threats and ease of setup.

Abnormal deployment for a particular server was an issue and support was lacking.

This software is hard to circumvent. I love the quarantine/block options on nefarious files. The notifications work great and there's many options to configure. It's quite simple to manage and makes my job so much easier.

Sometimes the agent won't update on a PC. So it has to be manually uninstalledre-installed with special commands from SAFE MODE on Windows PCs. It's uncommon but it does happen.

Great option and package. Have used it for a few years now and continue to be impressed with its capabilities. Continues to be developed and evolve as the threat landscape increases.

The additional add-ons get a little confusing as to what does what. Some of their terminology is a bit hard to determine initially.

Finding a specific end point and the amount of information available is amazing. It's like endpoint protection and asset management all in one.

IT would be great to be able to push software installs or commands to endpoints.