SentinelOne Singularity Complete vs Wazuh comparison

SentinelOne Singularity Com...

Read 45 Wazuh reviews

14,748 Views
8,945 Comparison Views

79% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

SentinelOne Singularity Complete and Wazuh are both comprehensive security solutions. SentinelOne seems to hold the advantage with its advanced threat detection and automated response capabilities, making it suitable for users prioritizing robust security measures.

Features: SentinelOne is known for comprehensive threat mitigation, real-time automation, and proactive defense mechanisms. Its detailed analytics enhance security insights. Wazuh offers flexibility, customizable options, and seamless integration with third-party applications.

Room for Improvement: SentinelOne could benefit from better integration with existing security infrastructures and resource optimization. Users of Wazuh often seek improvements in documentation, platform management complexity, and usability simplification.

Ease of Deployment and Customer Service: SentinelOne is straightforward to deploy, though users desire more intuitive management tools. Its responsive customer service is praised. Wazuh's deployment is more complex but supported by an active user community.

Pricing and ROI: SentinelOne is higher in cost, with a justification found in its effective threat management and strong ROI. Wazuh's budget-friendly pricing attracts users prioritizing cost-effectiveness, offering accessibility for varying budget constraints.

To learn more, read our detailed SentinelOne Singularity Complete vs. Wazuh Report (Updated: December 2024).

SentinelOne Singularity Complete vs. Wazuh

December 2024

Download the complete report

Helped 830,596 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Com...

Ranking in Extended Detection and Response (XDR)

2nd

Average Rating

8.8

Reviews Sentiment

7.3

Number of Reviews

192

Ranking in other categories

Endpoint Protection Platform (EPP) (2nd), Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (3rd)

Wazuh

Ranking in Extended Detection and Response (XDR)

3rd

Average Rating

7.4

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Log Management (2nd), Security Information and Event Management (SIEM) (2nd)

Mindshare comparison

As of January 2025, in the Extended Detection and Response (XDR) category, the mindshare of SentinelOne Singularity Complete is 6.9%, down from 11.8% compared to the previous year. The mindshare of Wazuh is 11.8%, up from 4.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR)

Featured Reviews

Asim Naeem

Principal IT Security & Compliance at IBEX Holdings Ltd

It integrates well with other platforms, is user-friendly, and is stable

SentinelOne Singularity Complete integrates with our other security solutions, correlating data from NDR, ADR, SIEM, and XDR tools. All this information is consolidated within SentinelOne, providing a centralized access point. SentinelOne Singularity Complete has helped us streamline our security operations by consolidating multiple solutions into a single platform. We are currently in the process of acquiring a threat intelligence platform to complete our security stack. We use Ranger to monitor our network and track connected devices. This is crucial because it helps us quickly identify unauthorized machines connected to our infrastructure, including personal devices. We have additional security measures in place, but Ranger provides an extra layer of protection. It also alerts us if the SentinelOne Singularity Complete agent is missing from any new or existing machines, allowing us to take appropriate action. SentinelOne Ranger's agentless and hardware-independent nature is crucial for our environment with 26,000 endpoints, as manual management of such a large number would be extremely challenging. Ranger uses a multi-layered approach to prevent vulnerable devices from being compromised. We employ scanners, network configurations, and a risk scanner to assess devices, endpoints, servers, and cloud infrastructures. Vulnerability reports and timelines for remediation are shared with device owners or custodians. This proactive strategy enables us to address vulnerabilities efficiently and secure our infrastructure. SentinelOne Singularity Complete has significantly enhanced our security posture. While no system is impenetrable, this solution has brought us closer to achieving a high level of protection, ensuring we maintain at least a 90 percent security level. Our team is dedicated to refining alerts and eliminating false positives from our solutions. Additionally, a team is responsible for identifying and excluding alerts from the solution. We can manually expedite this process by reviewing these elements and utilizing our security tools. We have been able to reduce the alert volume by 20 percent. Our 30-member Security Operations Center team has been able to redirect their focus to other tasks due to the time saved after implementing SentinelOne Singularity Complete. SentinelOne Singularity Complete has helped us improve our mean time to detect threats, which we accomplish using the Vigilance service for detection and response. SentinelOne Singularity Complete has helped us decrease our organizational risk. We utilize the Security Scorecard to manage our security posture, which has remained steady at 90 percent.

Read full review

Godwin Edmond

Senior Security Information Analyst at Carbon MFB

Enhances security visibility with proactive incident response features

The most valuable feature of Wazuh is its EDR capabilities. It operates in a server-agent mode, which allows us to aggregate logs from endpoints and monitor server activities, such as vulnerability scans and compliance checks. Wazuh is open to numerous integrations with third-party tools like forensics tools, adding to its versatility.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable aspect of SentinelOne Singularity Complete is the protection it provides."

"SentinelOne’s Rollback is its best feature."

"The deep visibility is a valuable feature. I can use it during threats or alert signals that we get. I can also use it when we have alert signals from other security tools that we have."

"The user interface, ease of maintenance, and the efficient way to identify the root cause of an incident to see all the factors that contributed to it are the most valuable features."

"Scalable endpoint protection solution that takes seconds to set up per device. It has a rollback feature and offers good technical support."

"Singularity has the same features as other antivirus products, but it provides an added layer of security and vulnerability protection. It's also light on resources. Singularity doesn't use a lot of CPU or memory."

"The overview is valuable. There are a lot of instances out there, but Singularity Complete cuts the noise down by giving us graphics and color-coding information instead of massive tech dumps. It helps us concentrate on what is actually needed versus just the noise."

"For me, the most valuable feature is the Deep Visibility. It gives you the ability to search all actions that were taken on a specific machine, like writing register keys, executing software, opening, reading, and writing files. All that stuff is available from the SentinelOne console. I'm able to see which software is permanent on a machine, and how that happened, whether by registry keys or writing it to a special folder on the machine."

More SentinelOne Singularity Complete pros

"If they support a solution, it is easy to do an integration."

"I like that the solution is on top of the Kubernetes stack."

"The configuration assessment and Pile integrity monitoring features are decent."

"I find the PCI DSS feature the most valuable, along with the feature that monitors the compliance of Windows and the CIS benchmarks on other devices like Unix or Linux systems."

"Wazuh offers an enhanced HDR version that outperforms its competitors."

"Wazuh is free and easy to use. It is also adjustable, and we can use it on the cloud and on-premises."

"It is a stable solution."

"The log monitoring and analysis tools are great in addition to SIEM file activity monitoring."

More Wazuh pros

Cons

"While SentinelOne Singularity Complete effectively visualizes security data across our solutions, requiring extensive manual effort for analysis limits its effectiveness. I would therefore rate it a seven out of ten."

"If they can extend their product further on the DLP side of it so that I don't have to have another agent run exclusively for DLP production, that would be ideal."

"I would like to improve the reports because they are not so customizable and we would like more info from them."

"They could add “right click>scan” where most users were trained to do so in handling flash drives."

"I would like to have firewall functionality within SentinelOne Singularity Complete."

"The ease of use can be better in Deep Visibility. It is not always the easiest. If I have not been in there in the Deep Visibility module for a long time, I do not always find it that easy to use. I tend to go and have to consult the help quite often if I have not been in there a long time."

"SentinelOne can continue to make the presentation of relevant and timely data to the analysts as succinct and clear as possible. It will allow analysts to execute remediation or resolution with the least amount of clicks."

"It seems like they are doing a lot with their automatic updates. They can maybe slow down the actual release cycle to make it easier to deploy the most recent and then do it using the live update. They can continue to work on that because trying to get agent changes through change management platforms and get approvals and testing can be quite difficult."

More SentinelOne Singularity Complete cons

"Alerts should be specific rather than repeatedly triggered by integrating multiple factors. This issue needs improvement to create a more efficient alert system."

"Scalability is a constraint in the on-prem version of Wazuh in terms of the volume of logs we can manage."

"I want more support for regional compliance standards to serve my ANZ region customers better."

"Wazuh should come up with more in-built rules and integrations for the cloud."

"An issue I noticed is with tag values in certain rules not functioning properly."

"The biggest part that's missing is threat intelligence. It isn't inbuilt, and if a sudden incident occurs, we don't get that feedback inside the SIEM tool. That's a big gap, I see. It would be better if we could get the threat intelligence feeds integrated with the SIEM tools. That would help us push value solutions to the clients in a big way."

"Integration with Vyara could be better."

More Wazuh cons

Pricing and Cost Advice

"I found the pricing for SentinelOne Singularity Complete reasonable."

"USD$6 per end point which decreases as end points increase."

"It is not sold as a consumer product. It is only sold based on the number of licenses. So, as an MSP, you're probably going to pay about three and a half dollars per license, per month to have SentinelOne."

"We have not been beaten in the market by pricing, so we have been feeling good about that. The discussions we have had over the years keep us at a very low price per unit. It can always get better, but we also know there is a cost to the backend."

"I find the licensing cost for SentinelOne Singularity Complete fair."

"We pay $30,000 a year for 275 endpoints. We're growing, so I plan to buy another 75 endpoints. There is still a year and a half left in my three-year subscription, so I'm going to increase my endpoint count by 30 percent."

"The pricing is very reasonable."

"Its price can be lower because I'm seeing competition from another vendor who beats it on commercials."

More SentinelOne Singularity Complete pricing and cost advice

"The solution's cost is above the average."

"It is an open-source product."

"Wazuh has a community edition, and I was using that. It's free and open source."

"They have a good pricing strategy for market expansion."

"The product price is neither too high nor too low."

"The solution's pricing is very competitive."

"Wazuh is open-source, therefore it is free. You can purchase support for $1,000 a year."

"Wazuh is open-source, but you must consider the total cost of ownership. It may be free to acquire, but you spend a lot of time and effort supporting the product and getting it to a point where it's useful."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

830,596 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

19%

Manufacturing Company

Financial Services Firm

Government

Computer Software Company

16%

Comms Service Provider

University

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...

What do you like most about SentinelOne?

The AI solution makes it easy for customers to detect and manage policies, as well as documents that help customers manage their platform.

What do you like most about Wazuh?

Integrates with various open-source and paid products, allowing for flexibility in customization based on use cases.

What needs improvement with Wazuh?

I am investigating more about the community support for Wazuh. I can't provide a definitive answer yet. An issue I noticed is with tag values in certain rules not functioning properly. It's unclear...

What is your primary use case for Wazuh?

I am currently evaluating and using Wazuh for file monitoring and compliance reporting. We are in the process of conducting a POC to understand how the rules work. I lead this effort to explore and...

Darktrace vs SentinelOne Singularity Complete

Comparisons

Compared 8% of the time

Datto Endpoint Detection and Response (EDR) vs SentinelOne Singularity Complete

Compared 7% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Complete

Compared 7% of the time

CrowdStrike Falcon vs SentinelOne Singularity Complete

Compared 6% of the time

HP Wolf Security vs SentinelOne Singularity Complete

Compared 2% of the time

More SentinelOne Singularity Complete Competitors

Security Onion vs Wazuh

Compared 16% of the time

Elastic Stack vs Wazuh

Compared 10% of the time

AlienVault OSSIM vs Wazuh

Compared 9% of the time

Elastic Security vs Wazuh

Compared 8% of the time

Graylog vs Wazuh

Compared 5% of the time

More Wazuh Competitors

Product Reports

SentinelOne Singularity Complete

November 2024

Download SentinelOne Singularity Complete product report

Download Wazuh product report

December 2024

Also Known As

Sentinel Labs, SentinelOne Singularity

No data available

Learn More

SentinelOne

Overview

SentinelOne Singularity Complete provides AI-driven threat detection and response with features like ransomware protection and rollback, offering endpoint protection with minimal system impact and deep forensic analysis.

SentinelOne Singularity Complete combines machine learning and artificial intelligence to offer robust endpoint protection. It delivers real-time insights and advanced threat detection through seamless integration with third-party tools, allowing for efficient endpoint management. With an emphasis on user-friendliness, it ensures reduced false positives. Room for improvement includes better integration options, enhanced reporting, and more precise analytics to tackle false positives. Users seek improved interoperability with systems and comprehensive support for legacy systems.

What are the key features of SentinelOne Singularity Complete?

Rollback Feature: Enables restoration of affected systems to a healthy state after an attack.
Ransomware Protection: Advanced mechanisms to prevent and mitigate ransomware threats.
Machine Learning and AI: Utilizes cutting-edge technology for precise threat detection and response.
Seamless Integration: Works well with third-party tools for enhanced endpoint protection.
Real-Time Protection: Proactively defends against advanced threats with minimal delays.

What benefits and ROI should users consider?

Reduced False Positives: Accurate threat detection limits operational disruptions.
Efficient Endpoint Protection: Ensures security with low system impact.
User-Friendly Experience: Simplified management and ease of use aid productivity.
Deep Forensic Analysis: Assists in effective threat investigation and response.
Cost-Effective Security: Positions as a worthwhile alternative to traditional antivirus solutions.

Organizations from industries like finance, healthcare, and technology deploy SentinelOne Singularity Complete to safeguard endpoints such as PCs, servers, and virtual machines. Equipped with EDR, it effectively replaces traditional antivirus systems and integrates with cloud technology for real-time security insights.

Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.

It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.

Wazuh’s agent can run on many different platforms, and is lightweight. It can successfully perform the tasks needed to detect threats in order to trigger responses automatically.
Wazuh manages the agents, can analyze agent data, and can scale horizontally.
Elastic Stack is where alerts are indexed and stored.

Wazuh Capabilities

Some of Wazuh’s most notable capabilities include:

Intrusion detection: Wazuh’s agents can detect hidden files, cloaked processes, or unregistered network listeners, as well as inconsistencies in system call responses. Wazuh’s server component uses a signature-based approach to intrusion detection, using its regular expression engine to analyze collected log data and look for indicators of compromise.
Log data analysis: Wazuh can read operating system and application logs, and securely forward them to a central manager for rule-based analysis and storage.
Integrity monitoring: File integrity monitoring can help identify changes in content, ownership, permissions, and attribute of files. Wazuh’s file integrity monitoring can be used in conjunction with threat intelligence.
Vulnerability detection: Wazuh agents can identify well-known vulnerable software so you can see where your weak spots are and take action before an attack can exploit them.
Configuration assessment: System and application configurations are monitored to make sure they are compliant with security policies. Periodic scans are used to detect applications that are known to be vulnerable, insecurely configured, or unpatched.
Incident response: Wazuh responds actively when active threats need to be addressed. It can perform countermeasures like blocking access to a system when a threat source is identified.
Regulatory compliance: Wazuh includes the security controls required to be compliant with industry regulations and standards.
Cloud security: Wazuh’s light-weight and multi-platform agents are commonly used to monitor cloud environments at the instance level. In addition, Wazuh helps monitor cloud infrastructure at an API level.
Security for containers: With Wazuh, you have increased security visibility into hosts and containers, allowing for easier detection of threats, anomalies, and vulnerabilities.

Wazuh Benefits

Some of the most valued benefits of Wazuh include:

No vendor lock-in
No license costs
Uses lightweight, multi-platform agents
Free community support

Wazuh Offers

Annual support and maintenance
Assistance with deployment and configuration
Training and instructional hands-on courses

Reviews From Real Users

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited

“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm

Sample Customers

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Information Not Available