Saaskly

SentinelOne Singularity

Autonomous EDR with rollback and one of only two official MCP servers in this comparison, sold only through partners and priced in dollars.

Antivirus & Endpoint SecurityHow we test
3.3
Saaskly score / 5
8th of 13 in Antivirus & Endpoint Security

Who owns it

SentinelOne, Inc. is a Mountain View, California company, listed on the New York Stock Exchange since 2021 and widely held, founded in 2013 by Tomer Weingarten with Almog Cohen and Ehud Shamir. Its 10-K for the year to 31 January 2026 puts engineering in Tel Aviv, Prague and Bangalore alongside the US, with about 2,900 staff and customers in around 100 countries. We found no Russian or Chinese office or link.

What it costs

Prices are in US dollars only; no GBP price exists on the public site and the page notes tax may not be included. Read on 9 September 2026, the packages page shows Singularity Complete at $179.99 an endpoint a year, Singularity Commercial at $229.99 with identity detection and response added, and Singularity Enterprise on request. The Core and Control tiers that used to sit below Complete still have product pages but are no longer on the price list, so the cheapest priced tier, and the one we score, is Complete: AI-driven endpoint and cloud workload protection with real-time detection and response, 14 days of data retention and the Purple AI assistant. A server is an endpoint for licensing purposes, as far as the page says; we could not confirm platform coverage line by line at that price. The MDR service, renamed from Vigilance to Wayfinder MDR, comes in Threat Hunting, MDR Essentials and MDR Elite levels with a breach warranty of up to $1 million, all unpriced add-ons. And the buying route is the mark-down: the pricing page states that all purchases are made through an authorised third-party partner, every call to action is a demo or a sales form, and we found no card checkout and no free trial.

What you get and what to watch

The product is what the enterprise market knows: behavioural AI detection and autonomous containment, rollback of unauthorised changes, USB and Bluetooth device control and network control (the old Control features), rogue-device discovery, mobile protection through Singularity Mobile, and a public GitHub with 58 repositories including detection-as-code, Ansible and Helm tooling. SentinelOne publishes an official MCP server, purple-mcp, exposing Purple AI and its security data to AI agents. The console is cloud-only; it holds ISO 27001, 27017 and 27018, SOC 2 Type II, FedRAMP High and Germany's BSI C5. Web filtering, patching, encryption management, console regions, RMM integrations and SSO were not confirmed on the pages we could read.

The independent record is the weakness. SentinelOne's AV-Comparatives vendor page shows an Approved business result from 2017 and nothing since; we found no AV-TEST business certification; and it withdrew from MITRE's 2025 ATT&CK Enterprise evaluation along with Microsoft and Palo Alto, after years of publicising 100 per cent results in earlier rounds. Its own MDR page still quotes "100% detection" from MITRE without a date. No breach or major outage of SentinelOne was found. Trustpilot is 2.7 on seven unprompted reviews, too few to mean anything, with uninstall friction and false positives the complaints; G2 blocked our read. Not yet tested by Saaskly: assessed on published pricing, the independent test labs, vendor documentation and third-party reviews.

  • +EDR with autonomous containment and rollback in the scored tier; device and network control; an official MCP server (purple-mcp)
  • +ISO 27001, 27017 and 27018, SOC 2 Type II, FedRAMP High and BSI C5; engineering in Tel Aviv, Prague and Bangalore, no Russian or Chinese link found
  • +One per-endpoint price that covers workstations and servers alike, as far as the price list says

Cons

  • −"All purchases will be made through an authorized third-party partner": no card checkout, no trial found, USD only (marked down by editorial rule)
  • −No AV-Comparatives business result since 2017, no AV-TEST business certification found, and it withdrew from the 2025 MITRE evaluation
  • −Core and Control tiers gone from the price list, so the entry price is $179.99; Trustpilot 2.7 on seven reviews

Pricing

Minimum commitment: $179.99 ($179.99/yr for the entry licence). The least you can spend before walking away; excludes numbers, minutes and add-ons.

Singularity Complete

$179.99/yr · annual commitment

Month-to-month: not published

  • ✓$179.99 per endpoint per year, USD only, "may not include taxes", read 9 Sep 2026. EDR with rollback, cloud workload protection, 14 days retention, Purple AI. All purchases through an authorised partner; no card checkout, no trial found. Core and Control are no longer on the price list.

Singularity Commercial

$229.99/yr · annual commitment

Month-to-month: not published

  • ✓$229.99 per endpoint per year adds Identity Detection and Response. Singularity Enterprise on request. Wayfinder MDR (Threat Hunting, MDR Essentials, MDR Elite) is an unpriced add-on with a breach warranty up to $1m.

Specifications

Rating
3.3
Pricing and plans
Scored tier*$179.99/device/yr (Singularity Complete)
Monthly billingAnnual only
Entry planScored tier is the entry plan
SeatsNo cap
ServersIncluded
Self-service portalNo
Scored tier nameSingularity Complete
VAT basisExcluding VAT
Top plan$229.99/device/yr (Singularity Commercial)
EDR tier or add-onCore to the platform; 14 days data retention on Complete
Monthly billing availableNo
Free trial (days)0
Price changesTier line-up renamed: Complete, Commercial, Enterprise replace Core, Control, Complete; no dated price change found
Features
EDRIncluded
MDRAdd-on, quote
Buy onlineNo
AV-ComparativesLast business result 2017 (Approved); nothing since
AV-TESTNo business certification found
SE LabsNot checked
MITRE evaluated✓
Ransomware rollback✓
Web filteringNo
Email securityNone
PatchingNone
Device control✓
PlatformsWindows · Mac · Linux · Server
Cloud console✓
How you buyAuthorised third-party partners only, per SentinelOne's own pricing page; demo and sales forms on the site
Test record noteHistorically a heavy participant; withdrew from the 2025 MITRE round; marketing still cites 100% detection without a date
Behavioural detection✓
Exploit prevention✓
Firewall management✓
Vulnerability scanningNo
Application controlNo
Mobile threat defence✓
iOS✓
Android✓
Platform notesVersion-level platform support not on the public pages; mobile via Singularity Mobile; cloud workloads via Singularity Cloud Security
On-premises console optionNo
DeploymentNot itemised on the pages read
Multi-tenant console✓
Integrations and developers
RMM integrationsNot confirmed
API✓
MCP server✓
SIEM export✓
SSO into consoleNo
Ownership and trust
Owned in**US-owned
Russian or Chinese linkNone found
Trustpilot (reviews)2.7 (7)
Disk encryption managementNo
Console data locationNot confirmed
HQUnited States
Listed onNYSE
Engineering locationsUS, Tel Aviv (Israel), Prague (Czechia), Bangalore (India)
Link evidenceNone found
SOC 2✓
ISO 27001✓
Cyber EssentialsNo
Major incident on recordNo
Incident noteNo breach or major outage found; customer-reported false positives and uninstall friction on Trustpilot
Support
Phone supportNo
Live chatNo
UK support hoursNot confirmed; via partner
Paid support tierNot published
Support channelsPartner, Support portal

*Scored tier: the business tier the score is set on (the cheapest plan with a cloud console covering Windows, macOS and Windows Server), per device per year on a one-year term at about 25 devices, then per device per month where monthly billing exists, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat band and what the tier above adds.

**Owned in: where the company that owns the vendor answers to. A US-owned vendor is subject to US law (including the CLOUD Act) wherever the console data sits. "Russian or Chinese link" records ownership, management or engineering links found on the research date, with the evidence on the profile; Saaskly marks these down in the score by editorial rule and says so.

Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI

Work at SentinelOne Singularity? Something not look right? Register in the vendor portal to see what we publish and send corrections.