HackerOne vs. SentinelOne Singularity

Our security team will never scale like we'd like to do having this had been extremely helpful to manage, address, and payout vulnerabilities reported. I like having one "door" for this and not multiple ways to report stuff

Incentivized

It works extremely well for investigating the root cause analysis of events because you can see so much detail into what was happening before, after, and around the detective incident. A weak point would be when the AI gets a little over-aggressive or doesn’t quite understand the use case for specific tools. Our RMM tool was detected as a pup.

• Filter for spammy bug reports
• Nice central interface
• Payment/reward system is nice

Incentivized

• SentinelOne provides excellent protection against known and unknown attacks to our endpoints.
• The recovery option provides a fast, first line of defense against ransomware and other system damaging attacks.
• SentinelOne requires minimal administrative support making it a very cost effective and efficient solution.

Incentivized

• A lot of duplicate bugs get reported, although it does offer automatic suggestion of previously reported bugs that may be duplicates, it is far from perfect.
• Anyone can report bugs, a lot of them are not verified before submission. This sometimes leads to a lot of time spent in verifying if the bug is really actionable.
• Each submission has to be treated with equal potential, a lot of time, some time gets invested in vulnerabilities that aren't as important as some others.

Incentivized

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

Reliable for simple installation and above all efficient

Incentivized

There are some minor issues with the platform that can be mildly frustrating, but the overall performance, peace of mind, and ROI make it worth using. The management console is intuitive and easy to learn, the endpoint clients are simple but give IT professionals enough data to make management easy and simple

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

I haven't used any other products as such but I have read about bugcrowd.

Incentivized

In the distant past we had used iSensor through Dell. I can't say much about iSensor because we never really had it show any incidents or activity or reports. It might be better these days but from what I can tell, SentinelOne is the Gold Standard currently.

Incentivized

• Bugs that can't be tracked internally are submitted by external researchers, which is an important factor for security vulnerabilities.
• Even if the bugs reported are duplicates, there still is provision to award reputation points, that keep the researchers engaged.
• It also requires a lot of verification and validation, as a lot of the submissions are unverified to begin with.

Incentivized

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized