SentinelOne Singularity
Autonomous EDR with rollback and one of only two official MCP servers in this comparison, priced at $179.99 an endpoint a year for Singularity Complete. What to know: SentinelOne's own pricing page says "all purchases will be made through an authorized third-party partner", there is no GBP price, the old Core and Control tiers have gone from the price list, it has not entered the AV-Comparatives business test since 2017 and withdrew from the 2025 MITRE round, and Trustpilot is 2.7 on seven reviews.
How we testSentinelOne, Inc. is a Mountain View, California company, listed on the New York Stock Exchange since 2021 and widely held, founded in 2013 by Tomer Weingarten with Almog Cohen and Ehud Shamir. Its 10-K for the year to 31 January 2026 puts engineering in Tel Aviv, Prague and Bangalore alongside the US, with about 2,900 staff and customers in around 100 countries. We found no Russian or Chinese office or link.
Prices are in US dollars only; no GBP price exists on the public site and the page notes tax may not be included. Read on 9 September 2026, the packages page shows Singularity Complete at $179.99 an endpoint a year, Singularity Commercial at $229.99 with identity detection and response added, and Singularity Enterprise on request. The Core and Control tiers that used to sit below Complete still have product pages but are no longer on the price list, so the cheapest priced tier, and the one we score, is Complete: AI-driven endpoint and cloud workload protection with real-time detection and response, 14 days of data retention and the Purple AI assistant. A server is an endpoint for licensing purposes, as far as the page says; we could not confirm platform coverage line by line at that price. The MDR service, renamed from Vigilance to Wayfinder MDR, comes in Threat Hunting, MDR Essentials and MDR Elite levels with a breach warranty of up to $1 million, all unpriced add-ons. And the buying route is the mark-down: the pricing page states that all purchases are made through an authorised third-party partner, every call to action is a demo or a sales form, and we found no card checkout and no free trial.
The product is what the enterprise market knows: behavioural AI detection and autonomous containment, rollback of unauthorised changes, USB and Bluetooth device control and network control (the old Control features), rogue-device discovery, mobile protection through Singularity Mobile, and a public GitHub with 58 repositories including detection-as-code, Ansible and Helm tooling. SentinelOne publishes an official MCP server, purple-mcp, exposing Purple AI and its security data to AI agents. The console is cloud-only; it holds ISO 27001, 27017 and 27018, SOC 2 Type II, FedRAMP High and Germany's BSI C5. Web filtering, patching, encryption management, console regions, RMM integrations and SSO were not confirmed on the pages we could read.
The independent record is the weakness. SentinelOne's AV-Comparatives vendor page shows an Approved business result from 2017 and nothing since; we found no AV-TEST business certification; and it withdrew from MITRE's 2025 ATT&CK Enterprise evaluation along with Microsoft and Palo Alto, after years of publicising 100 per cent results in earlier rounds. Its own MDR page still quotes "100% detection" from MITRE without a date. No breach or major outage of SentinelOne was found. Trustpilot is 2.7 on seven unprompted reviews, too few to mean anything, with uninstall friction and false positives the complaints; G2 blocked our read. Not yet tested by Saaskly: assessed on published pricing, the independent test labs, vendor documentation and third-party reviews.
Pros
- +EDR with autonomous containment and rollback in the scored tier; device and network control; an official MCP server (purple-mcp)
- +ISO 27001, 27017 and 27018, SOC 2 Type II, FedRAMP High and BSI C5; engineering in Tel Aviv, Prague and Bangalore, no Russian or Chinese link found
- +One per-endpoint price that covers workstations and servers alike, as far as the price list says
Cons
- −"All purchases will be made through an authorized third-party partner": no card checkout, no trial found, USD only (marked down by editorial rule)
- −No AV-Comparatives business result since 2017, no AV-TEST business certification found, and it withdrew from the 2025 MITRE evaluation
- −Core and Control tiers gone from the price list, so the entry price is $179.99; Trustpilot 2.7 on seven reviews
Pricing
Minimum commitment: $179.99 ($179.99/yr for the entry licence). The least you can spend before walking away; excludes numbers, minutes and add-ons.
Singularity Complete
$179.99/yr · annual commitment
Month-to-month: not published
- ✓$179.99 per endpoint per year, USD only, "may not include taxes", read 9 Sep 2026. EDR with rollback, cloud workload protection, 14 days retention, Purple AI. All purchases through an authorised partner; no card checkout, no trial found. Core and Control are no longer on the price list.
Singularity Commercial
$229.99/yr · annual commitment
Month-to-month: not published
- ✓$229.99 per endpoint per year adds Identity Detection and Response. Singularity Enterprise on request. Wayfinder MDR (Threat Hunting, MDR Essentials, MDR Elite) is an unpriced add-on with a breach warranty up to $1m.
Specifications
| Rating | 3.3 |
| Scored tier* | $179.99/device/yr (Singularity Complete) |
| Monthly billing | Annual only |
| Entry plan | Scored tier is the entry plan |
| Seats | No cap |
| Servers | Included |
| EDR | Included |
| MDR | Add-on, quote |
| Buy online | No |
| Self-service portal | No |
| AV-Comparatives | Last business result 2017 (Approved); nothing since |
| AV-TEST | No business certification found |
| SE Labs | Not checked |
| MITRE evaluated | ✓ |
| Ransomware rollback | ✓ |
| Web filtering | No |
| Email security | None |
| Patching | None |
| Device control | ✓ |
| Platforms | Windows · Mac · Linux · Server |
| Cloud console | ✓ |
| RMM integrations | Not confirmed |
| API | ✓ |
| MCP server | ✓ |
| Owned in** | US-owned |
| Russian or Chinese link | None found |
| Phone support | No |
| Trustpilot (reviews) | 2.7 (7) |
| Scored tier name | Singularity Complete |
| VAT basis | Excluding VAT |
| Top plan | $229.99/device/yr (Singularity Commercial) |
| EDR tier or add-on | Core to the platform; 14 days data retention on Complete |
| Monthly billing available | No |
| How you buy | Authorised third-party partners only, per SentinelOne's own pricing page; demo and sales forms on the site |
| Free trial (days) | 0 |
| Price changes | Tier line-up renamed: Complete, Commercial, Enterprise replace Core, Control, Complete; no dated price change found |
| Test record note | Historically a heavy participant; withdrew from the 2025 MITRE round; marketing still cites 100% detection without a date |
| Behavioural detection | ✓ |
| Exploit prevention | ✓ |
| Firewall management | ✓ |
| Disk encryption management | No |
| Vulnerability scanning | No |
| Application control | No |
| Mobile threat defence | ✓ |
| iOS | ✓ |
| Android | ✓ |
| Platform notes | Version-level platform support not on the public pages; mobile via Singularity Mobile; cloud workloads via Singularity Cloud Security |
| On-premises console option | No |
| Console data location | Not confirmed |
| Deployment | Not itemised on the pages read |
| SIEM export | ✓ |
| Multi-tenant console | ✓ |
| SSO into console | No |
| HQ | United States |
| Listed on | NYSE |
| Engineering locations | US, Tel Aviv (Israel), Prague (Czechia), Bangalore (India) |
| Link evidence | None found |
| SOC 2 | ✓ |
| ISO 27001 | ✓ |
| Cyber Essentials | No |
| Major incident on record | No |
| Incident note | No breach or major outage found; customer-reported false positives and uninstall friction on Trustpilot |
| Live chat | No |
| UK support hours | Not confirmed; via partner |
| Paid support tier | Not published |
| Support channels | Partner, Support portal |
*Scored tier: the business tier the score is set on (the cheapest plan with a cloud console covering Windows, macOS and Windows Server), per device per year on a one-year term at about 25 devices, then per device per month where monthly billing exists, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat band and what the tier above adds.
**Owned in: where the company that owns the vendor answers to. A US-owned vendor is subject to US law (including the CLOUD Act) wherever the console data sits. "Russian or Chinese link" records ownership, management or engineering links found on the research date, with the evidence on the profile; Saaskly marks these down in the score by editorial rule and says so.
Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI
Work at SentinelOne Singularity? Something not look right? Register in the vendor portal to see what we publish and send corrections.