Item: SentinelOne Vigilance
Rating: 8
Author: Daniel Hereford

Use Cases and Deployment Scope

SentinelOne Vigilance is monitoring our SentinelOne Complete install-base on all workstations and on-premise virtual servers in our environment. We have roughly 200 virtual servers and 800 workstations. Around 50% of our workforce does some remote work, but almost all of them do come back into the office commonly. S1 Vigilance is working our EDR portion as we do not have a team of on-staff threat hunters and incident handlers. Endpoint protection is a strong part of our risk mitigation strategy and thusly Vigilance helps extract the full value out of SentinelOne.

Pros and Cons

AI/ML based detection engine has not missed a single known threat since installed
[SentinelOne] Vigilance makes clear notes and does a great job at weeding out false positives
Easy to use online console works on any connection
Integration with out Okta SSO MFA and Identity cloud

[SentinelOne] Vigilance notes are captured in each event which is near impossible to review with low staff. Better reporting on activities would help demonstrate better the activity ongoing
Ability to extract notes and incidents to our SIEM would be great
A customer success manager would be a nice addition

Return on Investment

100% EPP and EDR since implemented - ZERO COMPROMISES
Enabled remote and hybrid work as SentinelOne [Vigilance] works in all locations all the time
Easy to install endpoint

Alternatives Considered

CrowdStrike Falcon Endpoint Protection, eSentire, Sophos Intercept X and Cylance Smart Antivirus

SentinelOne [Vigilance] had feature parity with CrowdStrike and was lower priced. CrowdStrike does continue to grow its portfolio and has likely surpassed SentinelOne [Vigilance] in broader capabilities.

Key Insights

Do you think SentinelOne Vigilance delivers good value for the price?

Yes

Are you happy with SentinelOne Vigilance's feature set?

Yes

Did SentinelOne Vigilance live up to sales and marketing promises?

Yes

Did implementation of SentinelOne Vigilance go as expected?

Yes

Would you buy SentinelOne Vigilance again?

Yes

Likelihood to Recommend

Excellent value for a team without dedicated EDR personnel or low staff. [SentinelOne] Vigilance does not integrate as well with internal staff and needs a better way to a round-robin or assign issues/follow up to numerous internal staff. Would benefit from more workflow to look at multiple issues.

SentinelOne Vigilance Provides Great Value and Protection

Overall Satisfaction with SentinelOne Vigilance