SentinelOne Singularity Complete vs Wazuh comparison

SentinelOne Singularity Com...

Read 45 Wazuh reviews

14,714 Views
8,978 Comparison Views

79% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

SentinelOne Singularity Complete and Wazuh are both comprehensive security solutions. SentinelOne seems to hold the advantage with its advanced threat detection and automated response capabilities, making it suitable for users prioritizing robust security measures.

Features: SentinelOne is known for comprehensive threat mitigation, real-time automation, and proactive defense mechanisms. Its detailed analytics enhance security insights. Wazuh offers flexibility, customizable options, and seamless integration with third-party applications.

Room for Improvement: SentinelOne could benefit from better integration with existing security infrastructures and resource optimization. Users of Wazuh often seek improvements in documentation, platform management complexity, and usability simplification.

Ease of Deployment and Customer Service: SentinelOne is straightforward to deploy, though users desire more intuitive management tools. Its responsive customer service is praised. Wazuh's deployment is more complex but supported by an active user community.

Pricing and ROI: SentinelOne is higher in cost, with a justification found in its effective threat management and strong ROI. Wazuh's budget-friendly pricing attracts users prioritizing cost-effectiveness, offering accessibility for varying budget constraints.

To learn more, read our detailed SentinelOne Singularity Complete vs. Wazuh Report (Updated: January 2025).

SentinelOne Singularity Complete vs. Wazuh

Download the complete report

Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Com...

Ranking in Extended Detection and Response (XDR)

2nd

Average Rating

8.8

Reviews Sentiment

7.3

Number of Reviews

194

Ranking in other categories

Endpoint Protection Platform (EPP) (2nd), Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (3rd)

Wazuh

Ranking in Extended Detection and Response (XDR)

3rd

Average Rating

7.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (2nd)

Mindshare comparison

As of February 2025, in the Extended Detection and Response (XDR) category, the mindshare of SentinelOne Singularity Complete is 5.4%, down from 8.9% compared to the previous year. The mindshare of Wazuh is 12.9%, up from 9.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR)

Featured Reviews

Asim Naeem

Principal IT Security & Compliance at IBEX Holdings Ltd

It integrates well with other platforms, is user-friendly, and is stable

SentinelOne Singularity Complete integrates with our other security solutions, correlating data from NDR, ADR, SIEM, and XDR tools. All this information is consolidated within SentinelOne, providing a centralized access point. SentinelOne Singularity Complete has helped us streamline our security operations by consolidating multiple solutions into a single platform. We are currently in the process of acquiring a threat intelligence platform to complete our security stack. We use Ranger to monitor our network and track connected devices. This is crucial because it helps us quickly identify unauthorized machines connected to our infrastructure, including personal devices. We have additional security measures in place, but Ranger provides an extra layer of protection. It also alerts us if the SentinelOne Singularity Complete agent is missing from any new or existing machines, allowing us to take appropriate action. SentinelOne Ranger's agentless and hardware-independent nature is crucial for our environment with 26,000 endpoints, as manual management of such a large number would be extremely challenging. Ranger uses a multi-layered approach to prevent vulnerable devices from being compromised. We employ scanners, network configurations, and a risk scanner to assess devices, endpoints, servers, and cloud infrastructures. Vulnerability reports and timelines for remediation are shared with device owners or custodians. This proactive strategy enables us to address vulnerabilities efficiently and secure our infrastructure. SentinelOne Singularity Complete has significantly enhanced our security posture. While no system is impenetrable, this solution has brought us closer to achieving a high level of protection, ensuring we maintain at least a 90 percent security level. Our team is dedicated to refining alerts and eliminating false positives from our solutions. Additionally, a team is responsible for identifying and excluding alerts from the solution. We can manually expedite this process by reviewing these elements and utilizing our security tools. We have been able to reduce the alert volume by 20 percent. Our 30-member Security Operations Center team has been able to redirect their focus to other tasks due to the time saved after implementing SentinelOne Singularity Complete. SentinelOne Singularity Complete has helped us improve our mean time to detect threats, which we accomplish using the Vigilance service for detection and response. SentinelOne Singularity Complete has helped us decrease our organizational risk. We utilize the Security Scorecard to manage our security posture, which has remained steady at 90 percent.

Read full review

Sandip_Patel

Student at Dakota State University

Evaluating robust file monitoring with insights for community support improvements

Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's quite scalable."

"It identifies what applications are vulnerable. If I go to the applications, such as Adobe Photoshop or Adobe Reader, I can see our current list of vulnerabilities: How many are vulnerable and how many need to be updated with patching. One of the most valuable aspects is the ease of finding specific vulnerabilities."

"The most valuable feature of SentinelOne is the good graph it provides. It has a specific page where it detects the recent attacks on other machines or the hackers, for example, group APT28 and all."

"The Ranger feature is valuable."

"In terms of the engines that SentinelOne uses, it has stopped various scripts from running and it's highlighted lateral movement that we weren't expecting."

"The most valuable features are threat hunting, the ability to disconnect or disable a machine's network connection in real time, and the ability to restore the connection once the issue is resolved quickly."

"The solution is easy to set up."

"I have been a Mac guy for twenty years, and the feature parity and the capabilities of a Macintosh agent are unparalleled in the industry. It is the first anti-malware and antivirus that does not make you feel that you bought the wrong processor. It is really good and lightweight."

More SentinelOne Singularity Complete pros

"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."

"The product is easy to customize."

"It is excellent in terms of visualization and indexing services, making it a powerful tool for malware detection."

"The most valuable features are the modules and metrics."

"Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors."

"One of the most beneficial features of Wazuh, particularly in the context of security needs, is the machine learning data handling capability."

"Wazuh is free and easy to use. It is also adjustable, and we can use it on the cloud and on-premises."

"It is a stable solution."

More Wazuh pros

Cons

"SentinelOne is causing a problem with the data service that causes one of our applications to crash randomly. We're still looking for a permanent fix, but we have implemented a temporary workaround that excludes that application from the scan."

"I would like to see something a little more sophisticated than simply being able to mark a false positive as safe or there's usually just one or two options in certain areas and they're a little rudimentary at this stage."

"Deployment strategy for large organizations that do not use active directory (AD)."

"I rate Singularity Cloud Workload Security's stability a four out of ten."

"One of the things they could do is extend the product range to include Android and iPhone so that you could have the app on your phone as well. There is probably something going on there with that, but that's something that they're lacking at the moment. For instance, if I was to have to recommend a client to protect their phone, I'd have to recommend Norton or something else. I don't have an answer within the SentinelOne solution."

"It would be nice to be able to adjust the canned reports manually and choose the specific data we want to report on instead of being limited to their pre-set reports."

"In terms of areas for improvement in SentinelOne Singularity Complete, it needs to give more straightforward directions or communication about detection or what has been detected."

"There aren't enough reporting capabilities for decision-makers."

More SentinelOne Singularity Complete cons

"They need to go towards integrating with more cloud applications and not just OS like Windows and Linux."

"An issue I noticed is with tag values in certain rules not functioning properly."

"The technical support can be improved. Wazuh has some bugs that need to be fixed. It would be good if we can have automation with respect to incidence responses."

"While it is scalable, it can suffer from reduced latencies."

"Wazuh is missing many things that a typical SIEM should have."

"I think that the next release should be more suitable for large enterprises, because currently they are not because large companies do not rely on open source solutions."

"Scalability is a constraint in the on-prem version of Wazuh in terms of the volume of logs we can manage."

"They could include flexibility and customization capabilities by modifying for customers based on partner agreements."

More Wazuh cons

Pricing and Cost Advice

"I do not know much about the pricing. What I do know is that the person who negotiates most of the pricing is quite a hard bargainer. In that regard, he often says that he managed to get a very good deal. When we first looked at replacing our old system with Singularity Complete, its price was definitely a big factor. Back then, Singularity Complete was fairly new to the marketplace. We got quite a good deal as an early adopter. They have honored that and respected that we were an early adopter, and I feel we are still getting a very good price."

"SentinelOne Singularity Complete's pricing is affordable."

"SentinelOne Singularity Complete is reasonably priced."

"The pricing is comparable with other vendors but some customers find it a bit costly."

"SentinelOne was half the price of CrowdStrike."

"The cost of endpoint protection is fairly reasonable."

"The license is per user."

"It is expensive. There is no doubt about it. If one of the functions does not work, it becomes very difficult for any CIO to justify the cost."

More SentinelOne Singularity Complete pricing and cost advice

"Wazuh is totally free and open source. There are no licensing costs, only support costs if you need them."

"Wazuh is open-source, but you must consider the total cost of ownership. It may be free to acquire, but you spend a lot of time and effort supporting the product and getting it to a point where it's useful."

"The current pricing is open source."

"It is a free-of-cost solution."

"Wazuh is a good tool, but the open-source version has scalability limitations."

"The product is cheaper compared to other tools."

"The solution's pricing is very competitive."

"They have a good pricing strategy for market expansion."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

838,713 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Manufacturing Company

Financial Services Firm

Government

Computer Software Company

16%

Comms Service Provider

University

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...

What do you like most about SentinelOne Singularity?

The Ranger feature is valuable.

What do you like most about Wazuh?

Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.

What needs improvement with Wazuh?

I am investigating more about the community support for Wazuh. I can't provide a definitive answer yet. An issue I noticed is with tag values in certain rules not functioning properly. It's unclear...

What is your primary use case for Wazuh?

I am currently evaluating and using Wazuh for file monitoring and compliance reporting. We are in the process of conducting a POC to understand how the rules work. I lead this effort to explore and...

Darktrace vs SentinelOne Singularity Complete

Comparisons

Compared 7% of the time

Datto Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete

Compared 7% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Complete

Compared 7% of the time

CrowdStrike Falcon vs SentinelOne Singularity Complete

Compared 6% of the time

Cynet vs SentinelOne Singularity Complete

Compared 2% of the time

More SentinelOne Singularity Complete Competitors

Security Onion vs Wazuh

Compared 16% of the time

Elastic Stack vs Wazuh

Compared 11% of the time

AlienVault OSSIM vs Wazuh

Compared 9% of the time

Elastic Security vs Wazuh

Compared 7% of the time

Graylog vs Wazuh

Compared 6% of the time

More Wazuh Competitors

Product Reports

SentinelOne Singularity Complete

Download SentinelOne Singularity Complete product report

Download Wazuh product report

Also Known As

Sentinel Labs, SentinelOne Singularity

No data available

Overview

SentinelOne Singularity Complete provides AI-driven threat detection and response with features like ransomware protection and rollback, offering endpoint protection with minimal system impact and deep forensic analysis.

SentinelOne Singularity Complete combines machine learning and artificial intelligence to offer robust endpoint protection. It delivers real-time insights and advanced threat detection through seamless integration with third-party tools, allowing for efficient endpoint management. With an emphasis on user-friendliness, it ensures reduced false positives. Room for improvement includes better integration options, enhanced reporting, and more precise analytics to tackle false positives. Users seek improved interoperability with systems and comprehensive support for legacy systems.

What are the key features of SentinelOne Singularity Complete?

Rollback Feature: Enables restoration of affected systems to a healthy state after an attack.
Ransomware Protection: Advanced mechanisms to prevent and mitigate ransomware threats.
Machine Learning and AI: Utilizes cutting-edge technology for precise threat detection and response.
Seamless Integration: Works well with third-party tools for enhanced endpoint protection.
Real-Time Protection: Proactively defends against advanced threats with minimal delays.

What benefits and ROI should users consider?

Reduced False Positives: Accurate threat detection limits operational disruptions.
Efficient Endpoint Protection: Ensures security with low system impact.
User-Friendly Experience: Simplified management and ease of use aid productivity.
Deep Forensic Analysis: Assists in effective threat investigation and response.
Cost-Effective Security: Positions as a worthwhile alternative to traditional antivirus solutions.

Organizations from industries like finance, healthcare, and technology deploy SentinelOne Singularity Complete to safeguard endpoints such as PCs, servers, and virtual machines. Equipped with EDR, it effectively replaces traditional antivirus systems and integrates with cloud technology for real-time security insights.

SentinelOne

Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.

It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.

Wazuh’s agent can run on many different platforms, and is lightweight. It can successfully perform the tasks needed to detect threats in order to trigger responses automatically.
Wazuh manages the agents, can analyze agent data, and can scale horizontally.
Elastic Stack is where alerts are indexed and stored.

Wazuh Capabilities

Some of Wazuh’s most notable capabilities include:

Intrusion detection: Wazuh’s agents can detect hidden files, cloaked processes, or unregistered network listeners, as well as inconsistencies in system call responses. Wazuh’s server component uses a signature-based approach to intrusion detection, using its regular expression engine to analyze collected log data and look for indicators of compromise.
Log data analysis: Wazuh can read operating system and application logs, and securely forward them to a central manager for rule-based analysis and storage.
Integrity monitoring: File integrity monitoring can help identify changes in content, ownership, permissions, and attribute of files. Wazuh’s file integrity monitoring can be used in conjunction with threat intelligence.
Vulnerability detection: Wazuh agents can identify well-known vulnerable software so you can see where your weak spots are and take action before an attack can exploit them.
Configuration assessment: System and application configurations are monitored to make sure they are compliant with security policies. Periodic scans are used to detect applications that are known to be vulnerable, insecurely configured, or unpatched.
Incident response: Wazuh responds actively when active threats need to be addressed. It can perform countermeasures like blocking access to a system when a threat source is identified.
Regulatory compliance: Wazuh includes the security controls required to be compliant with industry regulations and standards.
Cloud security: Wazuh’s light-weight and multi-platform agents are commonly used to monitor cloud environments at the instance level. In addition, Wazuh helps monitor cloud infrastructure at an API level.
Security for containers: With Wazuh, you have increased security visibility into hosts and containers, allowing for easier detection of threats, anomalies, and vulnerabilities.

Wazuh Benefits

Some of the most valued benefits of Wazuh include:

No vendor lock-in
No license costs
Uses lightweight, multi-platform agents
Free community support

Wazuh Offers

Annual support and maintenance
Assistance with deployment and configuration
Training and instructional hands-on courses

Reviews From Real Users

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited

“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm

Sample Customers

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Information Not Available

SentinelOne Singularity Complete vs. Wazuh