Kaspersky EDR Optimum vs. SentinelOne Singularity

I’m convinced that the key is guaranteeing the 100% of coverage, with the best configuration possible and without pain or hit at resource consumption and harmonies performance.I would like that the solution detecting, inventorying, and alerting about some host/device unknow or don’t register in KSC. Don’t depend on Device Detection function.

Incentivized

It works extremely well for investigating the root cause analysis of events because you can see so much detail into what was happening before, after, and around the detective incident. A weak point would be when the AI gets a little over-aggressive or doesn’t quite understand the use case for specific tools. Our RMM tool was detected as a pup.

• KEDR Optimum is helping to see threat kill chain formation, which helps to get clear picture of the what exactly attacker was trying to do during attack.
• We are crating prevent execution rules to block the threat in our complete infra.
• Ioc scan to validate and remove the any active threat entry from our endpoints

Incentivized

• SentinelOne provides excellent protection against known and unknown attacks to our endpoints.
• The recovery option provides a fast, first line of defense against ransomware and other system damaging attacks.
• SentinelOne requires minimal administrative support making it a very cost effective and efficient solution.

Incentivized

• Agent package size is little big, if it can be optimize with lite package would be great
• If possible Host Integrity functionality can be added, to take action as quarantine the non-compliance machine to connect our enterprise network
• Many times KSC cloud operating slow, if it can optimized for the faster response

Incentivized

• Possibly for compatibility with legacy Windows OS's and non Windows OS's.
• Some settings are greyed out and unable to change but I believe this is to protect you from making a bad configuration change.
• Could do better with reporting at the base level subscription.

Incentivized

At the moment and unfortunately we'll not renew our licenses, due to the Russian conflict and the company policy that has forced us to get rid of any Russian related product. Before that incident, we were very happy with the product and we did not even think once about changing it... Maybe on the future...

Incentivized

Reliable for simple installation and above all efficient

Incentivized

There are some minor issues with the platform that can be mildly frustrating, but the overall performance, peace of mind, and ROI make it worth using. The management console is intuitive and easy to learn, the endpoint clients are simple but give IT professionals enough data to make management easy and simple

Incentivized

This item can always be improved, perhaps by pre-elaborating very long reports, such that they are built progressively so that when the user wants to consult them, the delay is minimal. It would also be interesting to have a warehouse of reports, which serves as a repository where they can be consulted whenever needed, adding AI capabilities that allow data to be linked together and improve the analysis and possible correlations of events.

Incentivized

Their support is good and quick to respond. The one issue we faced was when a non-protection issue arose there was a lot of dancing around trying to figure things out. This was frustrating as it took significantly longer to figure out issues. Lots of repetitive log gathers, screen caps, uninstalls that never seemed to resolve issues. Eventually, the product would be updated and the issue seemed to be resolved, but seemed to be the only solution.

Incentivized

Kaspersky EDR Optimum is the evolution of Kaspersky Endpoint Bussiness, a more complete product, which runs the same software on Windows 11 and Windows Server. Now, we already use Kaspersky Sandbox on-premises, which has now been unified with KEDR as Cloud Sandbox. These improvements and unifications have made life easier for Security administrators.

Incentivized

In the distant past we had used iSensor through Dell. I can't say much about iSensor because we never really had it show any incidents or activity or reports. It might be better these days but from what I can tell, SentinelOne is the Gold Standard currently.

Incentivized

• In fact very positive, Advanced Threat Detection engine is strong
• gives clear visibility as well and option respond on active threat immediately, Nice
• Also implemented, Default deny using application control
• Worth buying in single solution, many features

Incentivized

• SentinelOne has already proved its value by stopping attacks that would have gone otherwise unnoticed until much later in their infection process.
• The Vigilance team has provided quick response to threats that were not easily contained via the automated response SentinelOne's agents provide. This has given us a significant piece of mind.

Incentivized