We compared SentinelOne Singularity Complete and ThreatLocker Protect based on our user's reviews in several parameters.
Based on user reviews, SentinelOne Singularity Complete and ThreatLocker Protect both have strengths in advanced threat detection and customer support. However, while SentinelOne's focus is on comprehensive protection and ease of use, ThreatLocker excels in providing granular control and visibility over file activities. SentinelOne users appreciate the platform's AI technology and user-friendly interface, while ThreatLocker users value its seamless integration with existing systems and effectiveness in preventing unauthorized access. Overall, both products have received positive feedback from users, with SentinelOne standing out for its proactive security measures and ThreatLocker for its granular control features.
Features: SentinelOne Singularity Complete stands out with its comprehensive threat detection, advanced AI, intuitive interface, and swift response to emerging threats. In contrast, ThreatLocker Protect offers advanced threat detection, seamless integration, ease of use, reliable blocking, granular control, and visibility over file activities.
Pricing and ROI: SentinelOne Singularity Complete and ThreatLocker Protect differ in terms of setup cost. Users have expressed their perspectives on the pricing, setup cost, and licensing of both products. While customers have shared insights about the cost-effectiveness and ease of setting up ThreatLocker Protect, opinions on the setup cost of SentinelOne Singularity Complete are also available., The ROI for SentinelOne Singularity Complete is driven by its comprehensive protection, real-time threat detection, and proactive security measures, while ThreatLocker Protect offers significant value and returns by enhancing security, preventing threats, and minimizing potential damages.
Room for Improvement: Users have provided feedback on SentinelOne Singularity Complete that highlights the need for improvements in system performance, user interface, customization options, reporting capabilities, and integration with other security solutions. On the other hand, for ThreatLocker Protect, user feedback specifically focuses on identifying the product's drawbacks.
Deployment and customer support: The user reviews for SentinelOne Singularity Complete indicate that the timeframe for deployment and setup are generally the same and should be considered together. However, the user reviews for ThreatLocker Protect highlight the variability in the time required for deployment, setup, and implementation phases., Customer service for SentinelOne Singularity Complete has been positively praised for its prompt and helpful assistance, as well as reliable and efficient support staff. On the other hand, ThreatLocker Protect's customer service also receives high praise for its prompt and helpful assistance, knowledgeable and efficient support team, and commitment to customer satisfaction.
The summary above is based on 148 interviews we conducted recently with SentinelOne Singularity Complete and ThreatLocker Protect users. To access the review's full transcripts, download our report.
"It notifies us if there's any suspicious file on any PC. If any execution or similar kind of thing is happening, it just alerts us. It doesn't only alert. It also blocks the execution until we allow it. We check whether the execution is legitimate or not, and then approve it or keep it blocked. This gives us a little bit of control over this mechanism. Fortinet FortiEDR is also very straightforward and easy to maintain."
"The stability is very good."
"Having all monitoring, response, tracking, and mitigation tools in one dashboard provides our analysts and SOC team with a comprehensive view at a glance."
"The setup is pretty simple."
"Additionally, when it comes to EDR, there are more tools available to assist with client work."
"We have FortiEDR installed on all our systems. This protects them from any threats."
"Forensics is a valuable feature of Fortinet FortiEDR."
"Exceptions are easy to create and the interface is easy to follow with a nice appearance."
"The external drive scanning is great."
"The most valuable feature is that it does what it says it will do. It fulfills its claims. It’s not really common for products to do that today."
"The Storyline feature has significantly affected our incident response time. Originally, what would take us hours, now it takes us several minutes."
"One of the features that convinced us to adopt SentinelOne was that the solution can recognize and respond to attacks with or without a network connection. That is very important."
"We have had very few false positives or false negatives, which allows our analysts to focus on their work instead of dealing with noise."
"We opted for SentinelOne because it gives you visibility and control over all the devices on which you have the agent deployed. That is very valuable because, in the end, all the attacks enter only through one gateway, which is usually a user's computer."
"In the past, we were not able to identify a few viruses, but now we are able to identify them because of the machine learning feature."
"The Deep Visibility feature is the most useful part of the EDR platform. It gives us good insights into what is actually happening on the endpoints, e.g., when we have malicious or suspicious activity. We came from a legacy type AV previously, so we didn't have that level of visibility or understanding. For simplifying threat-hunting, it is extremely useful, where traditional techniques in threat hunting are quite laborious. We can put in indicators of compromise and it will sweep the environment for them, then they would give us a breakdown of what assets have been seen and where they have been seen, which is more of a forensics overview."
"ThreatLocker Allowlisting has all of these features integrated into one console, making it effective."
"The sandbox functionality is fantastic."
"The biggest improvement has been knowing that something unauthorized isn't going to get installed on anyone’s machines."
"The great thing is that if you get a malicious email and you try to run something, ThreatLocker is not going to let it do anything. It is not going to let anything infect your network."
"Feature-wise, the learning mode and the fact that it's blocking everything are the most valuable. I don't see why more companies don't use the type of product."
"We use ThreatLocker's Allowlisting to whitelist specific applications and prevent unauthorized software from running."
"Application control, ring-fencing, and storage control are the most important features, followed closely by elevation."
"The interface is clean and well-organized, making it simple to navigate and find what we need."
"Cannot be used on mobile devices with a secure connection."
"We've encountered challenges during API deployment, occasionally resulting in unstable environments."
"The EDR console should have more extensive reporting. You shouldn't need to purchase FortiAnalyzer. It should be included in the EDR part. The security adviser cloud platform could be improved with more options for exclusive or intensive rules for devices."
"It takes about two business days for initial support, which is too slow in urgent situations."
"I would like the solution to extend beyond endpoint protection and include other attack surfaces such as other network components."
"We've had a lot of false positives; things incorrectly flagged that require manual configuration to allow. Even worse, after we allow a legitimate program, it sometimes gets flagged again after an update. This has caused a lot of extra work for my team."
"The amount of usage, the number of details we get, or the number of options that can be tweaked is limited in comparison to that with other EDR solutions"
"FortiEDR can be improved by providing more detailed reporting."
"It would help if they could get all the relevant threat information, the related events, in one place. Currently, we need to go to a number of places and do research. If they could have it all in one place, that would help investigations."
"I would appreciate seeing the browser extension react more effectively to events, going beyond mere detection."
"We have had cases where Singularity Complete has caused applications to malfunction."
"The biggest thing for me in terms of improvements is the online console. There are frequent updates, and sometimes we'll get a little agitated getting signed in."
"The speed of investigation of the MDR service team must be improved."
"The UI appears to be flat, and I wish to have the ability to customize it with features and buttons that are tailored to our needs."
"It is not so much on the Singularity platform itself, but they have their own built-in SIEM that is included with it. That needs to evolve a little bit. It is relatively basic in its capabilities. They have potential there for a great product and a needed product too. Having some kind of SIEM capability with the endpoint solution will save me from buying a bigger SIEM or buying another one. I could just use the one that comes with my endpoint solution."
"The ease of use can be better in Deep Visibility. It is not always the easiest. If I have not been in there in the Deep Visibility module for a long time, I do not always find it that easy to use. I tend to go and have to consult the help quite often if I have not been in there a long time."
"Something we have come up against a couple of times is that we have two clients that are software developers. They create software that doesn't have digital signatures and that's not easy to categorize or whitelist with ThreatLocker. We have to go in and make custom rules to allow them to do their work and to be protected from malicious threats."
"More visibility in the built-ins would be nice."
"The reporting could be improved."
"The snapshots used in the ThreatLocker University portal are outdated snippets and have not been updated in conjunction with the portal itself."
"Adding applications to the allowlist can sometimes feel overwhelming."
"ThreatLocker Allowlisting needs to improve its user interface and overall workflow."
"We identified several areas that we would like to see improved."
"ThreatLocker could offer more flexible training, like online or offline classes after hours. The fact that they even provide weekly training makes it seem silly to suggest, but some people can't do it during the day, so they want to train after work. They could also start a podcast about issues they see frequently and what requires attention. A podcast would be helpful to keep us all apprised about what's going on and/or offline training for those people who can't train during the week."
More SentinelOne Singularity Complete Pricing and Cost Advice →
SentinelOne Singularity Complete is ranked 2nd in Endpoint Protection Platform (EPP) with 177 reviews while ThreatLocker Protect is ranked 26th in Endpoint Protection Platform (EPP) with 13 reviews. SentinelOne Singularity Complete is rated 8.8, while ThreatLocker Protect is rated 9.2. The top reviewer of SentinelOne Singularity Complete writes "Provides peace of mind and is good at ingesting data and correlating". On the other hand, the top reviewer of ThreatLocker Protect writes "Integration is simple, deployment is straightforward, and extensive well-written documentation is available online". SentinelOne Singularity Complete is most compared with Microsoft Defender for Endpoint, CrowdStrike Falcon, Darktrace, Datto Endpoint Detection and Response (EDR) and Wazuh, whereas ThreatLocker Protect is most compared with Microsoft Defender for Endpoint, CrowdStrike Falcon, Huntress, GravityZone Business Security and Fortinet FortiClient. See our SentinelOne Singularity Complete vs. ThreatLocker Protect report.
See our list of best Endpoint Protection Platform (EPP) vendors.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.