CrowdStrike Falcon Complete Next-Gen MDR vs. SentinelOne Singularity

I mean, CrowdStrike Falcon Complete Next-Gen MDR is best in class. If you want the absolute best and can afford it, it's the way to go. The sales team and CSMs are great and will promise you the world, and if you have the time and knowledge to set things up, they deliver. Sometimes, though, what they say and the actual reality differ a bit. Example: we were told that CrowdStrike Falcon Complete Next-Gen MDR will set everything up for us and assist us with configuring alerting and workflows. When it came time to do so, support told us that they can't set up workflows because they didn't know our system and can't be held responsible for missed triggers and alerts. Eventually, they did help, but only after we had set things up and they helped us tweak them.

Incentivized

It works extremely well for investigating the root cause analysis of events because you can see so much detail into what was happening before, after, and around the detective incident. A weak point would be when the AI gets a little over-aggressive or doesn’t quite understand the use case for specific tools. Our RMM tool was detected as a pup.

• Proactive and comprehensive threat monitoring, mitigation and alerting
• 24/7 threat response and escalation
• Full incident response and support from start to finish
• Excellent documentation and auditing

Incentivized

• Installs on all of our Windows machines and only requires 1 reboot for the install to finish.
• It allows you to customize the UI and filters based on your use case.
• Gives a very high level of visibility into any concerns you have or should have in your network.

Incentivized

• Understanding the SIEM integration and pulling appropriate logs.
• How they handled the global outage a couple years ago.
• iOS support.

Incentivized

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

Reliable for simple installation and above all efficient

Incentivized

Over all the usability of this service is great with good response from the complete team when something happens or indeed when we have questions. The reporting and telemetry from the system is useful and very helpful when carrying out our own investigations or indeed when identifying areas for improvement. Since we have taken on this service we have also added newer functionality it has become a clear extension to our small security team.

Incentivized

There are some minor issues with the platform that can be mildly frustrating, but the overall performance, peace of mind, and ROI make it worth using. The management console is intuitive and easy to learn, the endpoint clients are simple but give IT professionals enough data to make management easy and simple

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

Symantec just wasn't as polished or feature rich as CrowdStrike Falcon Complete Next-Gen MDR. For a Next-Gen MDR, there is really only one option.

Incentivized

SentinelOne had all of the major features that we were looking for. The other products either required too much administrative attention or were lacking key features. For example, one could be uninstalled by the end user. We required that the installation be password protected to protect against end user disabling or uninstalling. One product required manual intervention for all remediation which put to high a burden on limited staff. All products are always being revised so these may no longer be issues but they had a significant impact on our decision.

Incentivized

• So much less risk of costly malware and breaches
• No training requirements for IT staff to manage the product, white glove service
• More team productivity, one less thing for my team to manage

Incentivized

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized