SentinelOne
About SentinelOne
SentinelOne has been publicly traded since 2021 under NYSE: S.
Products
- Singularity Platform: Unifies protection across endpoints, identity, cloud, and AI.
Used for
- Stopping supply chain, ransomware, behavioral attacks, and credential misuse
- Detecting and disrupting identity-based attacks in real time
- Performing real-time, AI-automated response and remediation
- Deploying across SaaS, on-premises, hybrid, and air-gapped environments
- Conducting managed threat hunting for proactive threat discovery
Who it is for
- Organizations in aerospace, financial services, manufacturing, education, healthcare, and government
- Startups
- Global enterprises
- Growing, collaborative teams
From SentinelOne's own website, read 2026-10-23. How we build listings.
How to evaluate Endpoint Security & EDR
This is how the CIOPages Research Team evaluates this category. It is not an assessment of SentinelOne. It comes from our Endpoint Detection & Response (EDR/XDR) buyer guide.
25%
Prevention & Detection Efficacy
Pre-execution and behavioral prevention, fileless and living-off-the-land detection, ransomware rollback, credential-theft detection, and breadth of MITRE ATT&CK technique coverage proven in independent and ATT&CK evaluations — not just the vendor’s own benchmark
18%
Investigation & Threat Hunting
Real-time endpoint search across the fleet, raw-telemetry retention and query language, process-tree and attack-timeline visualization, IOC and behavioral hunting, remote-shell live forensics, and how much of the triage an AI assistant can credibly take off the analyst
17%
Response & Remediation
Automated containment and network isolation, one-click and policy-driven response, ransomware and malicious-change rollback, host remediation without reimaging, and the granularity of response authority you can safely delegate to automation versus a human
15%
XDR Correlation & Telemetry Breadth
Native correlation across endpoint, identity, email, cloud-workload, and network signal; unified incident view with attack-chain reconstruction; quality of first-party telemetry versus third-party connectors; and whether correlation genuinely reduces alert volume or just renames it
15%
Endpoint Performance & Operations
Agent CPU, memory, and I/O footprint on laptops, servers, and VDI; single-agent versus multi-module sprawl; OS and architecture coverage (Windows, macOS, Linux, ARM, legacy); deployment and update controls including staged rollout and rollback; console scalability and API depth
10%
Managed Services & Ecosystem Fit
Quality and response-authority of the vendor’s own MDR option, openness to third-party MDR and SIEM/SOAR, threat-intelligence depth and attribution, marketplace and integration breadth, and the realism of support and professional-services coverage for your geographies
Other Endpoint Security & EDR Vendors
View allCIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .
Quick Facts
www.sentinelone.com Pricing pageCategoryCybersecurity
SubcategoryEndpoint Security & EDR
Also listed inManaged Detection & Response (MDR)
DeploymentSaaS, On-premises, Hybrid, Air-gapped
We publish a detail only when we can point at the page it came from. Know when SentinelOne was founded or where it is based? Send it to us, free.