Try our new research platform with insights from 80,000+ expert users

Cuckoo Sandbox vs SentinelOne Singularity Complete comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cuckoo Sandbox
Ranking in Anti-Malware Tools
14th
Average Rating
7.6
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
SentinelOne Singularity Com...
Ranking in Anti-Malware Tools
2nd
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
194
Ranking in other categories
Endpoint Protection Platform (EPP) (2nd), Endpoint Detection and Response (EDR) (3rd), Extended Detection and Response (XDR) (2nd)
 

Mindshare comparison

As of February 2025, in the Anti-Malware Tools category, the mindshare of Cuckoo Sandbox is 3.1%, down from 4.1% compared to the previous year. The mindshare of SentinelOne Singularity Complete is 5.0%, down from 12.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools
 

Featured Reviews

Adrián Rodriguez Garcia - PeerSpot reviewer
Provides detailed behavior analysis while needing improvements in signature detection
I use Cuckoo Sandbox primarily for automated malware behavior analysis. Specifically, it helps me extract indicators of compromise (IOC) to add to different platforms in the security environment of my company Cuckoo can show me every behavior in a machine. For example, it shows all files…
Asim Naeem - PeerSpot reviewer
It integrates well with other platforms, is user-friendly, and is stable
SentinelOne Singularity Complete integrates with our other security solutions, correlating data from NDR, ADR, SIEM, and XDR tools. All this information is consolidated within SentinelOne, providing a centralized access point. SentinelOne Singularity Complete has helped us streamline our security operations by consolidating multiple solutions into a single platform. We are currently in the process of acquiring a threat intelligence platform to complete our security stack. We use Ranger to monitor our network and track connected devices. This is crucial because it helps us quickly identify unauthorized machines connected to our infrastructure, including personal devices. We have additional security measures in place, but Ranger provides an extra layer of protection. It also alerts us if the SentinelOne Singularity Complete agent is missing from any new or existing machines, allowing us to take appropriate action. SentinelOne Ranger's agentless and hardware-independent nature is crucial for our environment with 26,000 endpoints, as manual management of such a large number would be extremely challenging. Ranger uses a multi-layered approach to prevent vulnerable devices from being compromised. We employ scanners, network configurations, and a risk scanner to assess devices, endpoints, servers, and cloud infrastructures. Vulnerability reports and timelines for remediation are shared with device owners or custodians. This proactive strategy enables us to address vulnerabilities efficiently and secure our infrastructure. SentinelOne Singularity Complete has significantly enhanced our security posture. While no system is impenetrable, this solution has brought us closer to achieving a high level of protection, ensuring we maintain at least a 90 percent security level. Our team is dedicated to refining alerts and eliminating false positives from our solutions. Additionally, a team is responsible for identifying and excluding alerts from the solution. We can manually expedite this process by reviewing these elements and utilizing our security tools. We have been able to reduce the alert volume by 20 percent. Our 30-member Security Operations Center team has been able to redirect their focus to other tasks due to the time saved after implementing SentinelOne Singularity Complete. SentinelOne Singularity Complete has helped us improve our mean time to detect threats, which we accomplish using the Vigilance service for detection and response. SentinelOne Singularity Complete has helped us decrease our organizational risk. We utilize the Security Scorecard to manage our security posture, which has remained steady at 90 percent.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The scalability is an eight out of ten."
"Cuckoo Sandbox is very stable and reliable."
"Cuckoo Sandbox is very stable and reliable."
"It's quite scalable."
"SentinelOne is a stable solution."
"The 365 management and analytics from the cloud is another great feature."
"They provide a map, a process tree, and that is pretty good for analysis."
"Malware detection is valuable."
"The terminating or killing remediation process that they use is top-notch. Pretty much anything that is even remotely malicious gets blocked by it within seconds. That is important for us. We have thousands of endpoints with tens of thousands of users. It is hard to do good security for that many people without some kind of automated detection and response. That is what SentinelOne does for us. It helps us automate that process."
"I really like deep visibility. Deep visibility is one of the coolest features of almost any tool that we use. The breadth of data that is collected there is valuable, and it gives us the ability to search back through literally tons of data going back a specific period of time."
"It is great for security monitoring and blocking when needed."
 

Cons

"It lacks correlation with other types of information, such as explaining why a particular file was modified or identifying the specific process responsible."
"Cuckoo Sandbox could improve its signature detection because it currently only shows simple file modifications and connections to different botnets."
"I want the command to be quicker."
"The improvement could be in terms of reducing more noise and continuing to cut that down. AI seems to be the big thing with Purple. We are excited to get our hands on that."
"There should be Terraform support for console administration. Dynamic tagging would be also useful."
"The previous vendor had a lot more features and capabilities under the license. For example, I lost DLP as Sentinel One does not have DLP."
"The learning curve was a little steep."
"The way Singularity Complete handles blocking external mass storage is annoying because it is so difficult to unblock single endpoints."
"One disadvantage of SentinelOne Singularity Complete is that the agent doesn't auto-update, and my company found it more complicated than usual to get the agent updated and keep it updated."
"While SentinelOne Singularity Complete effectively visualizes security data across our solutions, requiring extensive manual effort for analysis limits its effectiveness. I would therefore rate it a seven out of ten."
"Also, it didn't have much incident management built in."
 

Pricing and Cost Advice

"We have to pay five to ten thousand dollars for this solution."
"SentinelOne was half the price of CrowdStrike."
"I can pay, for my environment, between $30,000 and $40,000 a year, and that's a pretty good deal."
"The pricing level for this service and application was very interesting for us. I don't know exactly what the price was, but apparently it was a big surprise that the SOC was also included in our pricing model."
"We have not been beaten in the market by pricing, so we have been feeling good about that. The discussions we have had over the years keep us at a very low price per unit. It can always get better, but we also know there is a cost to the backend."
"The price is costly compared to what we were previously paying with Microsoft Defender and McAfee."
"Their pricing was extremely competitive. That is why we stayed with them so long. We are renewing at the end of next month. We have already put in the approval. It is all set to go. We are renewing for another year or so year over year. It has been a very effective product, and it has been priced very competitively."
"The per-seat cost is low, but you have to commit to a certain number of licenses for a year."
"Its price is per endpoint per year. One of the features of its licensing is that it is a multi-tenanted solution. From an MSSP point of view, if I want to have several different virtual clouds of customers, it is supported natively, which is not the case with, for example, Microsoft Defender. Another nice thing about it is that you can buy one license if you want to. Some vendors insist that you buy 50 or 100, whereas here, you can just buy one."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Educational Organization
12%
University
9%
Government
8%
Computer Software Company
19%
Manufacturing Company
7%
Financial Services Firm
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cuckoo Sandbox?
I don't know the price as I always use the free version of Cuckoo Sandbox.
What needs improvement with Cuckoo Sandbox?
Cuckoo Sandbox could improve its signature detection because it currently only shows simple file modifications and connections to different botnets. It lacks correlation with other types of informa...
What is your primary use case for Cuckoo Sandbox?
I use Cuckoo Sandbox primarily for automated malware behavior analysis. Specifically, it helps me extract indicators of compromise (IOC) to add to different platforms in the security environment of...
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
 

Also Known As

No data available
Sentinel Labs, SentinelOne Singularity
 

Overview

 

Sample Customers

Information Not Available
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about Cuckoo Sandbox vs. SentinelOne Singularity Complete and other solutions. Updated: February 2025.
838,713 professionals have used our research since 2012.