SentinelOne Singularity Cloud Workload Security

Name: SentinelOne Singularity Cloud Workload Security
Brand: SentinelOne
Rating: 4.7 (502 reviews)

Leader

The world’s most advanced, autonomous AI-powered cybersecurity platform

Est 2013|Valuation $8.4B|Raised $2B

LinkedIn 411K|Website|Web traffic 559K|FTEs 2,900|HQ Mountain View, CA

MarketsCloud-Native Application Protection Platform (CNAPP)Endpoint Security (EPP/EDR)

01Competitive Landscape

Narrative analysis

Where SentinelOne appears to offer specific capabilities - Runtime workload protection integrated with the vendor’s broader EDR/XDR platform can reduce the need for separate consoles and may provide shared telemetry across endpoint and workload contexts. - The vendor emphasizes an eBPF-based approach for Linux/Kubernetes agents; this is presented as reducing kernel dependency issues and simplifying coverage across distributions and versions. Buyers should validate eBPF performance and compatibility during a proof of concept. Where alternatives can be stronger - Agentless CNAPP offerings may provide faster time-to-value for posture and risk graph capabilities with no runtime agents required. - Microsoft Defender for Cloud may be operationally simpler or more cost-effective for organizations already heavily invested in Microsoft cloud and security tooling. - CrowdStrike can be a natural extension for organizations already standardized on its endpoint sensor, although procurement teams should evaluate pricing and module fit. Market trends (high-level) - The vendor cites recognition in customer review publications for posture-related categories; buyers should interpret vendor-cited recognitions in the context of specific CWPP/runtime capabilities.

	SentinelOne Singularity Cloud Workload Security	Palo Alto Prisma Cloud	CrowdStrike Falcon Cloud Security
Starting price	Public package pricing is presented at the platform level; workload-specific pricing is often provided via quotes or partners	Typically quote or credits model; pricing is not broadly transparent	Quote-based; pricing requires vendor engagement
Primary use cases	Organizations seeking integrated endpoint and workload runtime protection with shared telemetry across hosts and containers	Organizations seeking broad CNAPP modules with network and cloud ecosystem integration	Organizations extending an existing endpoint/XDR investment into cloud workload and posture coverage
Key strengths	Vendor emphasizes eBPF-based Linux/Kubernetes agent approach and integration with the broader Singularity platform	Broad CNAPP breadth and extensive enterprise feature set	Mature endpoint/XDR base and integration with SOC workflows
Key limitations	Reported learning curve, support escalation variability, and less-transparent workload-level pricing	Credit licensing and pricing complexity reported by some buyers	Pricing opacity and module bundling have been reported as procurement friction

01Competitive Landscape

Narrative analysis

Where SentinelOne appears to offer specific capabilities

Runtime workload protection integrated with the vendor’s broader EDR/XDR platform can reduce the need for separate consoles and may provide shared telemetry across endpoint and workload contexts.
The vendor emphasizes an eBPF-based approach for Linux/Kubernetes agents; this is presented as reducing kernel dependency issues and simplifying coverage across distributions and versions. Buyers should validate eBPF performance and compatibility during a proof of concept.

Where alternatives can be stronger

Agentless CNAPP offerings may provide faster time-to-value for posture and risk graph capabilities with no runtime agents required.
Microsoft Defender for Cloud may be operationally simpler or more cost-effective for organizations already heavily invested in Microsoft cloud and security tooling.
CrowdStrike can be a natural extension for organizations already standardized on its endpoint sensor, although procurement teams should evaluate pricing and module fit.

Market trends (high-level)

The vendor cites recognition in customer review publications for posture-related categories; buyers should interpret vendor-cited recognitions in the context of specific CWPP/runtime capabilities.

	SentinelOne Singularity Cloud Workload Security	Palo Alto Prisma Cloud	CrowdStrike Falcon Cloud Security
Starting price	Public package pricing is presented at the platform level; workload-specific pricing is often provided via quotes or partners	Typically quote or credits model; pricing is not broadly transparent	Quote-based; pricing requires vendor engagement
Primary use cases	Organizations seeking integrated endpoint and workload runtime protection with shared telemetry across hosts and containers	Organizations seeking broad CNAPP modules with network and cloud ecosystem integration	Organizations extending an existing endpoint/XDR investment into cloud workload and posture coverage
Key strengths	Vendor emphasizes eBPF-based Linux/Kubernetes agent approach and integration with the broader Singularity platform	Broad CNAPP breadth and extensive enterprise feature set	Mature endpoint/XDR base and integration with SOC workflows
Key limitations	Reported learning curve, support escalation variability, and less-transparent workload-level pricing	Credit licensing and pricing complexity reported by some buyers	Pricing opacity and module bundling have been reported as procurement friction