SentinelOne Reviews

actively monitors and protects against malicious theats; protected my computer from installing a malicious code editor.

Sometimes sentinelone does too good a job: it blocked me from installing iterm2 which is the standard macos terminal application. However, I was able to create a IT ticket and point them to the SentinelOne's quarantined folder and get the rules updated to allow for iterm2 installation.

Overall, Sentinel One is easy to deploy, easy to monitor and has many features that other AV solutions don't offer or only include at a higher price-point. If Vigilance is added to the subscription, you will sleep better at night. It is pricey, but, knowing that you have a team that responds intantly to an incident is priceless. They can remediate, investigate, roll-back and many other things. This has made my job far easier and I do sleep better at night knowing that someone is always looking out for my environment.

During our initial deployment, we had several PC's that had to be reloaded from scratch. This occurred when we began our initial deployment of Windows 10 in our environment. The version we were using caused the OS to stop functioning. Re-imaging was our only option. We reported, and were asked to try a newer version. No further issues and we only had a small handful of PC's affected. Only one other con so far....price. Sentinel One is not cheap, but you get what you pay for.

I love how easyer it is to use and the automated rediation, roll back and isolation features to do the work for me.

I wish that they had an auto update feature for agent versions. It does update the current version with needed things, but it does not update the installed agent to a new version. Have to push it out manually via the console.

I like the detection response and the way it behaves. It doesn't just scan for malicious files, it looks for malicious behavior. It has protected clients/users from actual attacks.

Sometimes it does it's job too well, such as if you are just clearing out shadow copy data. But...things like that can be done in a malicious attack, so it's worth having to temporarily disable it from time to time. The updates fail sometimes and require a complete reinstall of SentinelOne and it can get a little difficult, sometimes requiring to use the cleaner tool and get into safe mode.

Ease of use, real time monitoring and anomaly detection. Growing features through integrations. IE: DataSet, Attivo

Not major challenges encountered. The rollout was very smooth.

The most impactful feature of the product is the protection. If an incident is detected the device is immediately disconnected from the network and the team is notified via email. This kicks off a response process for my team to investigate and label as a true incident of a false positive.

I would say the only weakness of the product is the lack of ad hoc reporting. I have a need to create special reporting and there is not a feature to do that.

Finding a specific end point and the amount of information available is amazing. It's like endpoint protection and asset management all in one.

IT would be great to be able to push software installs or commands to endpoints.

This software is hard to circumvent. I love the quarantine/block options on nefarious files. The notifications work great and there's many options to configure. It's quite simple to manage and makes my job so much easier.

Sometimes the agent won't update on a PC. So it has to be manually uninstalledre-installed with special commands from SAFE MODE on Windows PCs. It's uncommon but it does happen.

Very intuitive to use, not a big learning curve when configuring or rolling out new features. SentinelOne is always making product enhancements and overall just happy with the product.

There were some initial limitations with the firewall and blacklisting, but the enhancements have made up for this.

Deployment and customization was easy and straight forward. Deployed across various devices and worked without much issue. Required the occasional policy update to add applications and files to the allowed list.

Would like to see more on the reporting side of things; OS patches, installed applications, etc.

We were able to deploy the software with ease, single afternoon in testing for any necessary exceptions, and only 3-4 support tickets year 1&2. When was the last time you implemented a product with less effort?

Price but this is the first AV product I was involved in choosing/implementing from scratch. I can't speak to the cost other than it was much more than our previous solution but in time savings alone it has more than made up for this cost.

This is so much more than your run of the mill antivirus software. It has improved our overall security posture 10x at least.

Not really the software but a bit more training would be helpful. The software works great.

Time-to-market & ROI was very quick. The tool has prevented multiple malware & ransomware events.

A number of new features require new SKUs

Features, protection, integrations, customer service

False positives via XDR, portal is a little confusing at times