Singularity is a cloud-based solution, so we don't need to spend anything on the infrastructure. We don't have to procure the hardware to host the server application. The management is effortless. Anybody can operate it, and it has the ability to delegate day-to-day tasks to the help desk team that they can manage on their own. Once the devices are integrated and Singularity is configured, we hardly have to do anything. The console is nice. I don't have any problem with it. I have limited knowledge about Singularity's identity protection features because we only started using the solution this year. We plan to integrate a few products with the SentinelOne platform to get more out of it. When we were transitioning from an EDR to an XDR, we raised this question to SentinelOne. In the meeting, they explained how this integration works and what type of security they provide. We have the authority to revoke the integration and the other reporting parts, so everything is clear over there, but we need more time to mature in this particular aspect. Singularity offers deep and continuous visibility into our attack surface. We are notified via email, and there is always a link to a page that defines the specific threat. From that page, we investigate everything, including the affected files, root cause analysis, etc. The solution's detection and prevention capabilities are excellent, but we still must do more configuration, and there are plenty of false positives. Singularity has helped us reduce our mean time to detect. Compared to Kaspersky, we have 60 to 70 percent fewer attacks and investigations to do.
