SentinelOne Singularity vs. Trellix Helix

It works extremely well for investigating the root cause analysis of events because you can see so much detail into what was happening before, after, and around the detective incident. A weak point would be when the AI gets a little over-aggressive or doesn’t quite understand the use case for specific tools. Our RMM tool was detected as a pup.

Overall, we've had a great experience with FireEye Helix and would recommend it to organizations looking to improve their operational security. We've found Helix to be a great way to collect and analyze revenant security events and take action. Having a single pane of glass makes this process much more efficient. Prior to moving to FireEye Helix, we had different teams sending data to different applications, which resulted in confusion and critical data being missed.

Incentivized

• SentinelOne provides excellent protection against known and unknown attacks to our endpoints.
• The recovery option provides a fast, first line of defense against ransomware and other system damaging attacks.
• SentinelOne requires minimal administrative support making it a very cost effective and efficient solution.

Incentivized

• Detection of advanced threats.
• Easy integration with cloud resources and our existing security tools thus enhancing performance.
• Easy deployment with great threats intelligence capabilities.

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

• Overly complex platform
• Multiple logins needed for various tools--leads to confusion
• Costs can add up

Incentivized

Reliable for simple installation and above all efficient

Incentivized

There are some minor issues with the platform that can be mildly frustrating, but the overall performance, peace of mind, and ROI make it worth using. The management console is intuitive and easy to learn, the endpoint clients are simple but give IT professionals enough data to make management easy and simple

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

We've been fairly happy with FireEye Helix support overall. Most issues are resolved the same day the case is opened.

Incentivized

In the distant past we had used iSensor through Dell. I can't say much about iSensor because we never really had it show any incidents or activity or reports. It might be better these days but from what I can tell, SentinelOne is the Gold Standard currently.

Incentivized

It offers extensive visibility thus easy detection of threats and easy mitigation practices. Utilization of its threats intelligence capabilities thus early detection of incidents and maximization of security investments. Offers great integration of cloud resources with existing security tools thus ensuring seamless performance and all-time security for the organizational resources.

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized

• Helix has had a significant impact on CSOC visibility efforts across the organization.
• Helix fills the logging and alerting gaps that are missing across the infrastructure side.
• Having a single pane of glass allows teams to more efficiently run incidents. Additionally, Helix is integrated with ServiceNow providing enhanced and efficient case management for all Helix alerts.

Incentivized