SentinelOne Singularity Identity

Name: SentinelOne Singularity Identity
Brand: SentinelOne
Rating: 4.3 (33 reviews)

Leader

The world’s most advanced, autonomous AI-powered cybersecurity platform

Est 2013|Valuation $8.1B|Raised $2B

LinkedIn 411K|Website|Web traffic 559K|FTEs 2,900|HQ Mountain View, CA

MarketsEndpoint Security (EPP/EDR)

01Competitive Landscape

Narrative analysis

- SentinelOne’s distinguishing technical capability includes Attivo-derived deception capabilities and integration across endpoint and identity telemetry. Buyers should evaluate the operational model for deception and the evidence for efficacy in their environment. - Microsoft is frequently evaluated when organizations are standardized on Entra ID/Azure AD because of telemetry proximity to identity sources. - CrowdStrike is frequently considered in managed contexts and is often evaluated based on managed service capabilities and how identity telemetry integrates into incident response workflows.

Adoption trends / market signals

SentinelOne’s endpoint credentials (for example, analyst recognition in endpoint protection market signals and MITRE ATT&CK evaluations) contribute to platform credibility.
For identity security specifically, inclusion in third-party leadership or comparative reports can be a useful signal; buyers should review methodology and positioning in such reports.

	SentinelOne Singularity Identity	Microsoft Defender for Identity	CrowdStrike Falcon Identity Protection
Starting Price	Often bundled; vendor-published commercial-tier per-endpoint/per-year list pricing may include identity-related modules	Usually bundled in Microsoft security licensing (varies by E5/Defender plans)	Add-on/module pricing; often sold within Falcon bundles (varies)
Typical Fit	Organizations seeking integrated endpoint and identity correlation with deception capabilities; hybrid AD/Entra environments	Environments standardized on Microsoft identity and security stack	Organizations favoring CrowdStrike platform and managed service ecosystem
Key Strength	Deception/lures combined with endpoint/identity correlation within the vendor platform	Deep integration with Windows/Active Directory and Azure/Entra telemetry	Managed service ecosystem and integrated endpoint/identity telemetry
Key Weakness	Fewer identity-specific public reviews and potential variability in channel support and enablement	May be less suitable for heterogeneous or non-Microsoft-first environments; licensing complexity	Pricing perception and bundle-dependent feature access

01Competitive Landscape

Narrative analysis

SentinelOne’s distinguishing technical capability includes Attivo-derived deception capabilities and integration across endpoint and identity telemetry. Buyers should evaluate the operational model for deception and the evidence for efficacy in their environment.
Microsoft is frequently evaluated when organizations are standardized on Entra ID/Azure AD because of telemetry proximity to identity sources.
CrowdStrike is frequently considered in managed contexts and is often evaluated based on managed service capabilities and how identity telemetry integrates into incident response workflows.

Adoption trends / market signals

SentinelOne’s endpoint credentials (for example, analyst recognition in endpoint protection market signals and MITRE ATT&CK evaluations) contribute to platform credibility.
For identity security specifically, inclusion in third-party leadership or comparative reports can be a useful signal; buyers should review methodology and positioning in such reports.

	SentinelOne Singularity Identity	Microsoft Defender for Identity	CrowdStrike Falcon Identity Protection
Starting Price	Often bundled; vendor-published commercial-tier per-endpoint/per-year list pricing may include identity-related modules	Usually bundled in Microsoft security licensing (varies by E5/Defender plans)	Add-on/module pricing; often sold within Falcon bundles (varies)
Typical Fit	Organizations seeking integrated endpoint and identity correlation with deception capabilities; hybrid AD/Entra environments	Environments standardized on Microsoft identity and security stack	Organizations favoring CrowdStrike platform and managed service ecosystem
Key Strength	Deception/lures combined with endpoint/identity correlation within the vendor platform	Deep integration with Windows/Active Directory and Azure/Entra telemetry	Managed service ecosystem and integrated endpoint/identity telemetry
Key Weakness	Fewer identity-specific public reviews and potential variability in channel support and enablement	May be less suitable for heterogeneous or non-Microsoft-first environments; licensing complexity	Pricing perception and bundle-dependent feature access