Kaspersky EDR Expert vs. SentinelOne Singularity

Easy to learn, use and deploy. Kaspersky EDR Expert allows to automatically find unmanaged and rogue endpoints, remove previous agent from another vendor, install its agent, move endpoint to a group based on endpoint's characteristics, change security policies if for example endpoint is moved to another subnet or currently out-of-office, apply malware outbreak rules in case of attack

I'm not sure about pricing but I have heard from larger companies that it was not very accessible because of their size. We are a small company and we also utilize a SIEM which helped offset costs right off the bat. I think it makes 100% sense for IT departments that don't have enough staff to monitor their environment in depth.

Incentivized

• Identify and automatically respond to end-point security threats
• Protect end-point systems against a broad range of cyber attacks
• Reduce operational costs to support EDR services

Incentivized

• SentinelOne provides excellent protection against known and unknown attacks to our endpoints.
• The recovery option provides a fast, first line of defense against ransomware and other system damaging attacks.
• SentinelOne requires minimal administrative support making it a very cost effective and efficient solution.

Incentivized

• Linux-systems support on the same level like windows systems
• Untying from Kaspesky ATA
• AI add to ease the way of profiling the system (it requires 1 FTE to examine all the incidents on 10 000 hosts? too much)

Incentivized

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

I believe the Kaspersky EDR Expert systems represent significant cyber risks for government and commercial enterprise customers

Incentivized

Reliable for simple installation and above all efficient

Incentivized

Compared to all the other major players, SentinelOne is truly hands off. One installed, the tool is able to manage all the major threats on my endpoints without intervention. The biggest thing the IT Dept has to do now is just clear the incidents after SentinelOne has dealt with them. Every other tool I have used requires significantly more effort to maintain.

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

Overall, the suite of benefits and more reasonable cost per user/license to the organization were the key components affecting our decision-making.

Incentivized

Webroot is a great product but did not provide the versatility that we really were desiring. It allowed to us to centrally manage, but required policy-based management, and not the endpoint detail we wanted. SentinelOne's central management provides a variety of options for us to deploy and manage.

Incentivized

• Automating response task on suspicious activity
• Improving IT specialists skills and IS specialists skills
• Increased visibility of what malware really do on endpoint

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized