SentinelOne Singularity Identity vs Trellix Advanced Threat Defense comparison

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense

Download the complete report

Helped 847,959 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Ide...

Ranking in Advanced Threat Protection (ATP)

8th

Average Rating

9.0

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Vulnerability Management (11th), Threat Deception Platforms (2nd), Identity Threat Detection and Response (ITDR) (4th)

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

22nd

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of April 2025, in the Advanced Threat Protection (ATP) category, the mindshare of SentinelOne Singularity Identity is 2.6%, up from 0.9% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 1.7%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

Featured Reviews

Roftiel Constantine

Global Chief Information Security Officer at Barry-Wehmiller

Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities

During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.

Read full review

HossamSelim

Vice- Head Of Math Department at a non-tech company with 5,001-10,000 employees

Easy to set up and use with a nice interface

The scalability could be better. We'd like them to be better at dealing with script threats. In sandboxing, the time to respond is slower than we would like. We'd like them to be able to process faster. For example, Fortinet, they are doing 18,000 files per hour. For Wildfire, it is elastic. It can support as many files as you get. McAfee doesn't react like that. It does not support interfaces with HTTPS.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The response is a valuable aspect of SentinelOne."

"The threat detection capability is the most valuable feature."

"SentinelOne stands out due to its AI capabilities, which lead to excellent prevention."

"The effectiveness of their AI and behavioral analysis helps mitigate zero-day activities and detect new threats."

"Behind the scenes, SentinelOne has real people who evaluate problems and mark them as false positives. That's what I find most helpful."

"The incident and threat logs are great."

"The biggest value for us is getting a much better picture of what our risks are."

"The most valuable feature of SentinelOne Singularity Identity is its ability to detect based on behavior rather than just static signatures."

More SentinelOne Singularity Identity pros

"The most valuable features are the administration console and its detection and response module."

"It is stable and reliable."

"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."

"Provides good exfiltration, and is an all-in-one product."

"I recommend this solution because of its ease of use."

"It is very scalable."

"It stops in excess of twenty-five malware events per month, all of which could be critical to the business."

Cons

"I don't like SentinelOne's reporting tools. Their reports seem fine theoretically, but the issue is the sample size. For example, it will report that there were four incidents, and that equals 25 percent fewer incidents compared to the previous months. It would be a great improvement if I could expand the range to see reports for the last six months, but it's always one month. That would be an easy thing for them to resolve."

"To improve SentinelOne, I would suggest adding a network detection and response capability."

"The UI can be more user-friendly."

"Sometimes I get kicked out of the console. I don't know why."

"One area for improvement would be the self-healing nature of the agent."

"To enhance our already strong partnership with SentinelOne, we should focus on improving collaboration."

"We haven't received the expected support whenever we've had questions."

"The solution's query resolution time could be reduced further, and a faster resolution could be provided."

More SentinelOne Singularity Identity cons

"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."

"Lacks remote capabilities not dependent on the internet."

"We'd like them to be better at dealing with script threats."

"I would like to see future versions of the solution incorporate artificial intelligence technology."

"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."

"This solution needs to be made "cloud ready"."

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

Pricing and Cost Advice

"The cost of SentinelOne Singularity Identity is better than CrowdStrike."

"The price is affordable."

"SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good."

"Their pricing has been fair, especially in the current market, and they haven't excessively increased prices at renewal times like many vendors do."

"SentinelOne seemed to offer more while being priced lower than its competitors."

"As a SentinelOne partner, we offer competitive pricing on comprehensive packages that include the SentinelOne license, our management services, and a proof-of-concept to ensure the technology meets your needs."

"Ideally, I would like SentinelOne to lower their prices a little bit."

"There is a need to make yearly payments towards the licensing charges associated with the product...I think the prices associated with the product are okay and it is not too expensive."

More SentinelOne Singularity Identity pricing and cost advice

"Our licensing fees for this solution are approximately one million dollars per year."

"The product is expensive, but it is better than the rest of them in the industry."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

847,959 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Financial Services Firm

18%

Government

15%

Manufacturing Company

14%

Computer Software Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Does SentinelOne have a Virtual Patching functionality?

Yes -- SentinelOne has a Virtual Patching functionality called Virtual Patching and Exploit Shield. This preventive security solution uses behavioral AI to identify and block zero-day attacks and v...

What do you like most about SentinelOne Singularity Identity?

The XDR capabilities are very good.

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.

What do you like most about McAfee Advanced Threat Defense?

I recommend this solution because of its ease of use.

What needs improvement with McAfee Advanced Threat Defense?

There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client.

What is your primary use case for McAfee Advanced Threat Defense?

We use the solution for client management and security. We used the whole suite for client Firewall, antivirus, and everything provided by Trellix.

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Comparisons

Compared 15% of the time

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 13% of the time

SailPoint Identity Security Cloud vs SentinelOne Singularity Identity

Compared 9% of the time

Microsoft Entra ID Protection vs SentinelOne Singularity Identity

Compared 8% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 7% of the time

More SentinelOne Singularity Identity Competitors

Microsoft Defender for Identity vs Trellix Advanced Threat Defense

Compared 51% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 49% of the time

More Trellix Advanced Threat Defense Competitors

Product Reports

SentinelOne Singularity Identity

Download SentinelOne Singularity Identity product report

Advanced Threat Protection (ATP)

Download Trellix Advanced Threat Defense product report

Also Known As

No data available

McAfee Advanced Threat Defense

Overview

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Powerful advanced threat detection

Uncover Hidden Threats

Combine in-depth static code analysis, dynamic analysis (malware sandboxing), and machine learning to increase zero-day threat and ransomware detection.

Threat Intelligence Sharing

Immediately share threat intelligence across your entire infrastructure—including multi-vendor ecosystems—to reduce time from threat encounter to containment.

Enable Investigation

Validate threats and access critical indicators of compromise (IoCs) needed for investigation and threat hunting.

Trellix

Sample Customers

Information Not Available

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

SentinelOne Singularity Identity vs. Trellix Advanced Threat Defense