NetWitness XDR vs SentinelOne Singularity Complete comparison

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 7, 2023

We performed a comparison between SentinelOne Singularity Complete and Netsurion based on our users’ reviews in five categories. After reading all of the collected data, you can find our conclusion below.

Features: SentinelOne Singularity Complete is lauded for its dependable threat prevention and ability to reverse ransomware file encryption. SentinelOne could improve its automation, machine learning, and AI capabilities while improving reporting and integration. Netsurion delivers thorough and informative notifications and effectively identifies threats. Users praise its seamless incorporation of endpoint security measures. Netsurion should focus on enhancing weekly reporting, utilizing internet options for enhanced security, and strengthening threat detection and response.
Service and Support: Customers have been pleased with SentinelOne’s customer service. Reviews highlighted the support team’s responsiveness and efficiency. Netsurion's customer service has received mixed reviews, with some users expressing concerns about technical planning and the installation process.
Ease of Deployment: Users find the initial setup for SentinelOne Singularity Complete to be quick and painless, with helpful support from the vendor team. Netsurion's initial setup was described as easy, with clear instructions and packages provided. Reviewers appreciated the support and assistance from Netsurion. Netsurion guided the setup discussion based on business needs, making it easier to understand and implement.
Pricing: Some reviewers thought SentinelOne Singularity Complete is reasonably priced and competitive, while others say it’s costlier than many alternatives. Netsurion is considered a good value for the money and competitive. Users say the solution’s pricing is transparent.
ROI: SentinelOne Singularity Complete yields an ROI by saving money and protecting against ransomware attacks. Other users noted its valuable dashboard data and low CapEx requirements. Netsurion offers actionable intelligence and eliminates the requirement for specialized staff, saving time and costs. Its managed SOC component also delivered substantial benefits to organizations.

Comparison Results: Our users prefer SentinelOne Singularity Complete to NetWitness XDR. SentinelOne Singularity Complete is praised for its reliability and effective threat detection and mitigation, while NetWitness XDR has issues with slow performance and configuration. SentinelOne customer service earned positive feedback, while NetWitness XDR users expressed mixed opinions regarding response time. Users generally considered the initial setup for SentinelOne Singularity Complete to be straightforward, while some users said deploying NetWitness XDR is a chore.

To learn more, read our detailed NetWitness XDR vs. SentinelOne Singularity Complete Report (Updated: June 2024).

Buyer's Guide

NetWitness XDR vs. SentinelOne Singularity Complete

June 2024

Download the complete report

Helped 787,061 peers since 2012

Categories and Ranking

Microsoft Defender XDR

Market share comparison

As of June 2024, in the Endpoint Detection and Response (EDR) category, the market share of Microsoft Defender XDR is 8.4% and it increased by 827.9% compared to the previous year. The market share of NetWitness XDR is 0.2% and it decreased by 59.6% compared to the previous year. The market share of SentinelOne Singularity Complete is 7.5% and it decreased by 39.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Unique Categories:

Extended Detection and Response (XDR)

23.3%

Microsoft Security Suite

4.9%

Endpoint Protection Platform (EPP)

0.2%

Threat Intelligence Platforms

0.3%

Anti-Malware Tools

11.4%

Featured Reviews

reviewer2313252

Senior Infrastructure Engineer at a manufacturing company with 51-200 employees

Dec 4, 2023

Reduces our reliance on other products, adapts to threats, and saves us time

Microsoft Defender's XDR platform provides unified identity and access management. It has improved significantly, although other products remain slightly ahead. I would rate it among the top four or five XDR platforms I've used, and Microsoft is continuously enhancing its capabilities. Overall, it's a fairly good solution. Consolidating identity and access management under one umbrella within Defender 365 offers significant advantages. This unified approach simplifies control and visibility, eliminating the need to navigate through different screens from multiple vendors. With everything centralized, we gain a comprehensive overview of all IAM activities and can easily access specific details through subcategories. The main page provides a clear starting point, highlighting key information and granting quick access to deeper levels of detail when needed. While Microsoft Defender can effectively impede the lateral movement of advanced ransomware, it cannot guarantee complete protection. No system is perfect, and vulnerabilities will always exist. Defender's ability to stop attacks includes its adaptability to evolving threats. Microsoft has been steadily improving Defender over the past few years, and they continue to do so. Several updates in recent months have changed Defender's functionality, making it more effective. While technology advances and tools like Defender improve, the skills of hackers and their tools also evolve. This necessitates continuous improvement to keep pace. Adaptability to evolving threats is crucial. A static system is vulnerable to attack. Its unchanging vulnerabilities can be readily identified and exploited, allowing unauthorized access and manipulation. Constant improvement is necessary to maintain security. While we have reduced our reliance on other products, we haven't eliminated them at this time. We are actively reducing our use of other products as we progress. Once we have completed the configuration and setup process for Defender XDR, we can then fully transition to using it as our primary product. Defender XDR has saved our security team approximately two hours per day. Automation is improving steadily, allowing us to automate audit file processing and scheduling. This provides us with continuous insight into our environment. The main page offers a high-level overview of current activity, enabling us to quickly identify any anomalies. Our security team can then address these anomalies promptly.

Read full review

reviewer1259418

Senior Cyber Security Analyst (SAFe Agile) at a transportation company with 1,001-5,000 employees

Aug 11, 2022

Advanced threat detection undermined by issues with blocking

I primarily use NetWitness Endpoint to detect anomalies like the presence of web shields that are not detected by traditional antivirus solutions. I also use it for digital forensics and containment NetWitness Endpoint has enabled us to detect attacks that bypass the first stage of cybersecurity,…

Read full review

Ronel Silawan

Network and Systems Team Lead at Utilibill Pty Ltd

Mar 15, 2024

The solution performs well and is less resource-intensive than other products

Singularity has added some features to our security setup. It adds layers of protection to our security servers and workstations. One advantage of Singularity over other traditional antivirus products I use is that it doesn't use as many resources as other products. If you resolve them permanently, the solution can reduce the number of alerts. Some applications keep triggering alerts, and you need to remove them, or they will continue to do so. We need physical signatures to prevent them from alerting again in the future. We can reduce the alerts by about 80 to 90 percent annually. Our old antivirus wouldn't flag some applications as malicious, but SentinelOne detected them, so we removed those applications, and it reduced our alerts. Singularity has reduced our organizational risk by about 80 to 90 percent. We were able to address those alerts and remove a lot of malicious files that our previous solution didn't recognize. We saw a significant advantage in the first year. We've experienced a massive improvement in our mean time to detect. We have a large user base, but Singularity Complete performs better than our previous solution.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best feature is threat hunting. There are a lot of other features I like, such as the alert mechanism. The chain alert mechanism has a huge impact. It combines all the alerts into one incident and automatically correlates them with AI."

"The most valuable features of Microsoft 365 Defender are the combination of all the capabilities and centralized management."

"I like Defender XDR's reports and alerts. They give you updates about the latest hotfixes and zero-day vulnerabilities, which gives me all the information I need to maintain my servers."

"I have found the ability to delete unwanted threats beneficial."

"The most valuable feature of all is the full integration with the rest of the software in the operating system and Office 365, as well as Microsoft SCCM. It is quite easy for us to work with the whole instance of Microsoft products. This integration improves the benefits of the whole suite of products."

"Microsoft Defender's most critical component is its CASB solution. It has many built-in policies that can improve your organization's cloud security posture. It's effective regardless of where your users are, which is critical because most users are working from home. It's cloud-based, so nothing is on-premise."

"In Microsoft 365 vendor products, monitoring and connectivity across all Microsoft and third-party connectors enable viewing of all activity within those environments."

"From the perspective of Microsoft 365 XDR, the main benefit is a single, centralized dashboard offering the holistic visibility organizations crave."

More Microsoft Defender XDR pros

"It's a scalable solution. We have around five to eight customers using RSA NetWitness Endpoint, and we hope to increase the number of users."

"RSA NetWitness does market analysis in a more granular form. It gives you full visibility."

"It is stable. We have been using it for some time, without any issues."

"Technical support is knowledgeable."

"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."

"Ability to isolate the machine when there are malicious files."

"It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great."

"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."

More NetWitness XDR pros

"Another valuable feature is that if a machine is infected, one that may infect other computers within the network, we have the capability of segregating that machine in the network so that it remains connected to the internet but is cut off from the other machines in the network. That helps prevent spreading of the infection. That's a very unique feature, one I have not seen in the last 10 to 15 years from any other antivirus program. That's amazing."

"I like Singularity's rollback features, threat-hunting, and Ranger Insights. The Ranger feature scans the network and provides visibility into all the unsecured assets."

"SentinelOne has improved the overall security posture of the firm without creating a lot of hassle for our end users. Everything is a bit more secure. We think Singularity Complete has helped us reduce our organizational risks."

"I am particularly interested in the new app vulnerability module that is included with the Singularity Complete edition."

"The most valuable feature of SentinelOne is the good graph it provides. It has a specific page where it detects the recent attacks on other machines or the hackers, for example, group APT28 and all."

"We have had very few false positives or false negatives, which allows our analysts to focus on their work instead of dealing with noise."

"The remediation and rollback features are pretty impressive."

"It's quite scalable."

More SentinelOne Singularity Complete pros

Cons

"The user interface of Microsoft 365 Defender could improve. They could make it simpler."

"I'd like to see a wider solution that includes not only desktop devices but also other devices, such as servers, storage cabinets, switching equipment, et cetera."

"The web filtering solution needs to be improved because currently, it is very simple."

"The solution does not offer a unified response and standard data."

"Sometimes, configurations take much longer than expected."

"The only problem I find is that the use cases are built-in. There is no template available that you can modify according to your organization's standards. What they give is very generic, the market standard, but that might not be applicable to every organization."

"It would be highly beneficial if CoPilot could identify anomalies within the network and notify the IT team."

"There should be better information for experts on features in the solution. What I see when reading about features in Microsoft 365 Defender is that it is always general information. If Microsoft could go deeper into details for the experts about how to use the tools, usage of it would be more familiar and it would be easier to use."

More Microsoft Defender XDR cons

"When analyzing something, you have to click several times. It requires a lot of effort to find something."

"I would like to see Security Orchestration and Response Automation (SOAR) integration."

"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."

"The contamination feature could be improved."

"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."

"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."

"The initial setup requires a high level of skill."

"Threat detection could be better."

More NetWitness XDR cons

"It is an expensive product."

"One of the areas which would benefit from being improved is the policies. There are still software programs where we need to manually program in the policies to tell the system, "This program is legitimate." Some level of AI-based automation in creating those policies would go a long way in improving the amount of time it takes to deploy the system."

"I would like to see a better control panel for the managed service side of it."

"I'd like to see us be able to take action on one platform for items such as security variation, security orchestration, automation, and response (SOAR)."

"The previous vendor had a lot more features and capabilities under the license. For example, I lost DLP as Sentinel One does not have DLP."

"The overall integration functionality for this solution could be improved."

"Interoperability with other SentinelOne solutions and other third-party tools is an area where you can run into some issues. Because of the way the agent works, there are sometimes things that are blocked or prevented from happening that are not identified as a threat, and therefore, not alerted in the console. Sometimes, we do have to dig through the logs, run tests, and adjust the whitelisting or exclusions to make sure that other applications will run properly."

"SentinelOne could improve by creating an autopilot or automated way to roll out the solution more efficiently which would be helpful."

More SentinelOne Singularity Complete cons

Pricing and Cost Advice

"The pricing of Microsoft 365 Defender is definitely on the costly side, but with the features and services that Microsoft provides, such as the seamless integration of all the Defender tools, while the price is on the higher side, there is no alternative."

"The licensing fee for Microsoft 365 Defender is fair."

"Microsoft should provide lower-level licensing options. They should do it in such a way that even an individual could purchase a license, and it should be entirely flexible."

"Microsoft Defender XDR is included in our license."

"Understanding the subscription model has been a bit challenging, as every feature or requirement comes with an additional cost."

"I believe that the pricing of the licensing is fair."

"The most valuable licensing option is expensive, so pricing could be improved. Licensing options for this solution also need to be consolidated, because they frequently change."

"I find the pricing to be quite competitive, especially considering its inclusion in our E5 subscription, which provides a comprehensive set of functionalities."

More Microsoft Defender XDR pricing and cost advice

"We are on a three-year contract to use RSA NetWitness Network."

"I do not have any opinion on the pricing or licensing of the product."

"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."

"It is highly scalable. It can be bought based on your requirements."

"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."

"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."

"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."

More NetWitness XDR pricing and cost advice

"SentinelOne Singularity Complete is reasonably priced."

"The one I use is $6 a month per device. Some are $4 and there are some that are more than that."

"SentinelOne can cost approximately $70 per device."

"Its pricing is competitive."

"When we were checking out different platforms, we did get a price from Microsoft, and it was unreasonable. SentinelOne was definitely reasonable and worth the money."

"My understanding is that we did a pretty good deal on SentinelOne. A part of that is because we were their customers very early on, and we also use their products a lot. We are interested in the new products that come out. We go to their demos, and we go to their events. We do save a lot of money. It is not cheap, but it is worth it. We spend a lot of money on a lot of things, and most of them do not do as much as SentinelOne."

"The cost of utilizing all the features of SentinelOne Singularity Complete is high."

"Spend money on the security for the endpoint."

More SentinelOne Singularity Complete pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

787,061 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

10%

Government

Manufacturing Company

Financial Services Firm

15%

Computer Software Company

15%

Government

Manufacturing Company

Computer Software Company

18%

Manufacturing Company

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Microsoft 365 Defender?

Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and p...

See all answers

What is your experience regarding pricing and costs for Microsoft 365 Defender?

Microsoft Defender XDR is expensive, especially for the full suite functionality. However, when compared to buying mu...

See all answers

What needs improvement with Microsoft 365 Defender?

Improving scalability, especially for very large tenants, could be beneficial for Microsoft Defender XDR. Additionall...

See all answers

What do you like most about NetWitness XDR?

Technical support is knowledgeable.

See all answers

What is your experience regarding pricing and costs for NetWitness XDR?

The solution is expensive. I'd rate it at a one or two out of five. They need to adjust it to keep up with the compet...

See all answers

What needs improvement with NetWitness XDR?

I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat int...

See all answers

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

See all answers

What do you like most about SentinelOne?

The AI solution makes it easy for customers to detect and manage policies, as well as documents that help customers m...

See all answers

Comparisons

CrowdStrike Falcon vs Microsoft Defender XDR

Compared 45% of the time

Microsoft Defender for Cloud vs Microsoft Defender XDR

Compared 15% of the time

Microsoft Purview Compliance Manager vs Microsoft Defender XDR

Compared 5% of the time

Wazuh vs Microsoft Defender XDR

Compared 4% of the time

Trend Vision One vs Microsoft Defender XDR

Compared 3% of the time

More Microsoft Defender XDR Competitors

Darktrace vs NetWitness XDR

Compared 15% of the time

ExtraHop Reveal(x) vs NetWitness XDR

Compared 11% of the time

CrowdStrike Falcon vs NetWitness XDR

Compared 8% of the time

Vectra AI vs NetWitness XDR

Compared 7% of the time

Microsoft Defender for Endpoint vs NetWitness XDR

Compared 7% of the time

More NetWitness XDR Competitors

Microsoft Defender for Endpoint vs SentinelOne Singularity Complete

Compared 11% of the time

Darktrace vs SentinelOne Singularity Complete

Compared 8% of the time

CrowdStrike Falcon vs SentinelOne Singularity Complete

Compared 8% of the time

ThreatLocker Protect vs SentinelOne Singularity Complete

Compared 5% of the time

Datto Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete

Compared 5% of the time

More SentinelOne Singularity Complete Competitors

Product Reports

Buyer's Guide

Microsoft Defender XDR

May 2024

Download Microsoft Defender XDR product report

Buyer's Guide

NetWitness XDR

May 2024

Download NetWitness XDR product report

Buyer's Guide

SentinelOne Singularity Complete

May 2024

Download SentinelOne Singularity Complete product report

Also Known As

Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender

RSA ECAT, NetWitness Network

Sentinel Labs, SentinelOne Singularity

Learn More

Microsoft

Video not available

NetWitness

SentinelOne

Overview

Microsoft Defender XDR is a comprehensive security solution designed to protect against threats in the Microsoft 365 environment.

It offers robust security measures, comprehensive threat detection capabilities, and an efficient incident response system. With seamless integration with other Microsoft products and a user-friendly interface, it simplifies security management tasks.

Users have found it effective in detecting and preventing various types of attacks, such as phishing attempts, malware infections, and data breaches.

Watch the Microsoft demo video here: Microsoft Defender XDR demo video.

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness XDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

SentinelOne is a leading comprehensive enterprise-level autonomous security solution that is very popular in today’s marketplace. SentinelOne will ensure that today’s aggressive dynamic enterprises are able to defend themselves more rapidly, at any scale, and with improved precision, by providing comprehensive, thorough security across the entire organizational threat surface.

SentinelOne makes keeping your infrastructure safe and secure easy and affordable. They offer several tiered levels of security and varied payment options. SentinelOne works well with Linux, Windows, and MacOS, and can successfully support legacy infrastructures as well as the newer popular environments, including the latest operating systems. The single pane of glass management will save time and money by reducing manpower and ensuring comprehensive security protection of all your endpoints locally and worldwide.

SentinelOne offers intensive training and support to meet every organization’s unique business needs.

SentinelOne's levels of services and support include, but are not limited to:

SentinelOne GO is a guided 90-day onboarding service to ensure successful deployment and success. It assists with the deployment planning and overview, initial user setup, and product overviews. It provides ongoing training and advisory meetings, ensuring that everything is set up correctly and that your team understands the appropriate protocols to ensure success.

SentinelOne offers multi-tiered support based on your organizational needs from small business to enterprise, using their Designed Technical Account Management (TAM). They have support for every business level: Standard, Enterprise, and Enterprise Pro. SentinelOne is always available to ensure that you and your organization work together to minimize the risk of downtime and any threat exposure.

Threat Hunting & Response Services

Support for threat hunting and response include Watch Tower, Watch Tower Pro, Vigilance Respond, and Vigilance Respond Pro. Each of these services builds on the other, progressively adding features based on your organizational needs.

Watch Tower: This is the entry-level plan and includes: Active campaign hunting and cyber crime alerts and course correction for potential threats, access to the Monthly Hunting & Intelligence Digest.

Watch Tower Pro: Includes everything in WatchTower and customized threat hunting for all current & historical threats, unlimited access to Signal Hunting Library of Pre-Built Queries, Incident-Based Triage and Hunting, continuous customer service, followup and reporting, a Security Assessment, and quarterly Cadence meetings.

Vigilance Respond: Includes all of the features of Watch Tower in addition to a security assessment and Cadence meetings, which are on-demand. Provides the features of Watch Tower Pro in addition to 24x7x365 monitoring, triage, and response.

Vigilance Respond Pro: Includes all of the features of the above options, including a security assessment and quarterly cadence meeting as well as a complete digital forensic investigation and malware analysis.

Reviews from Real Users

Jeff D. who is an Operations Manager at Proton Dealership IT, tells us that "The detection rate for Sentinel One has been excellent and we have been able to resolve many potential threats with zero client impact. The ability to deploy via our RMM allows us to quickly secure new clients and provides peace of mind."

"The most valuable feature varies from client to client but having absolute clarity of what happened and the autonomous actions of SentinelOne are what most people find the most assuring." relates Rae J., Director IR and MDR at a tech services company.

Sample Customers

Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.

ADP, Ameritas, Partners Healthcare

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Buyer's Guide

NetWitness XDR vs. SentinelOne Singularity Complete

June 2024

Free Report: NetWitness XDR vs. SentinelOne Singularity Complete

Find out what your peers are saying about NetWitness XDR vs. SentinelOne Singularity Complete and other solutions. Updated: June 2024.

DOWNLOAD NOW

787,061 professionals have used our research since 2012.

See our NetWitness XDR vs. SentinelOne Singularity Complete report.

See our list of best Endpoint Detection and Response (EDR) vendors, best Endpoint Protection Platform (EPP) vendors, and best Extended Detection and Response (XDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.