Singularity Endpoint

Helps security teams stop ransomware and unknown endpoint threats autonomously with one AI-powered EPP and EDR agent, then investigate and recover quickly.

Suggest a correction

Overview

Singularity Endpoint combines endpoint protection (EPP) and detection and response (EDR) in one agent. Behavioral AI blocks ransomware, zero-day exploits, supply chain attacks and fileless malware before they run, Storyline correlates related events into a single attack narrative, and automated or 1-click response with rollback restores endpoints without reimaging. It deploys across SaaS, on-premises, hybrid and air-gapped environments, and EDR data retention depends on the package: 14 days in Complete and 90 days in Commercial and Enterprise.
More product details

Product

Awards and recognitions
  • Name
    Leader in the Gartner Magic Quadrant for Endpoint Protection Platforms (sixth consecutive year)
    Year
    2,026
    Category
    Endpoint Protection Platforms
    Organizer
    Gartner
  • Name
    Top-Performing Vendor in the Frost Radar for Endpoint Security
    Year
    2,025
    Category
    Endpoint Security
Demo Url
sentinelone.com/tour
Solution Kind
Platform

Who it is for

Organization Types
  • Business
  • Government

Features

Anomaly/Malware Detection

Detects novel malware, fileless attacks and living-off-the-land techniques before execution

Categories: Endpoint Detection and Response

Remediation Management

Automated and 1-click response

Rollback reverses ransomware and unauthorized changes without reimaging

Categories: Endpoint Detection and Response

Behavioral Analytics

Behavioral AI detects suspicious and malicious process and user activity in real time without signatures

Categories: Endpoint Detection and Response

Endpoint Management

Controlled agent update rollout across the fleet

Device and firewall control and remote shell in advanced EPP controls

Categories: Endpoint Detection and Response

Root Cause Analysis

Storyline correlates process, file, network and identity events into a visual attack narrative

Categories: Endpoint Detection and Response

Monitoring

Continuous monitoring of workstations, servers and cloud workloads

Categories: Endpoint Protection

Policy Management

Configure detection policies and automated response actions

Enable rollback

Categories: Endpoint Protection

Real-Time Monitoring

Real-time detection of endpoint and correlated identity activity

Categories: Endpoint Protection

Activity Tracking

Process, file, network and identity event timeline in Storyline

Categories: Endpoint Protection

Workflow details

Evidence
  • Name
    Storyline attack narrative
    Conditions
    • Up to 365 days of EDR context retention; package data retention is 14 days in Complete and 90 days in Commercial and Enterprise
    Description
    Correlates related process, file, network and identity events into a single attack timeline
Workflow boundary and exception handling
  • 1-click rollback reverses unauthorized changes and restores endpoints to their pre-attack state without reimaging, while Storyline retains the related event timeline for investigation

Pricing

Singularity Complete

USD 179.99 / endpoint / yearBilled annually

USD 179.99 / endpoint / year

Billed annually

Price Tiers
  • Unit
    workstations
    Unit price
    Amount
    179.99
    Currency
    USD
    Price basis
    per endpoint per year
    Lower bound
    5
    Upper bound
    100

Plan details & limits

Business Model
  • Subscription
Limits
  • EDR data retention

    14days

Singularity Commercial

USD 229.99 / endpoint / yearBilled annually

USD 229.99 / endpoint / year

Billed annually

Price Tiers
  • Unit
    workstations
    Unit price
    Amount
    229.99
    Currency
    USD
    Price basis
    per endpoint per year
    Lower bound
    5
    Upper bound
    100

Plan details & limits

Business Model
  • Subscription
Limits
  • EDR data retention

    90days

Singularity Enterprise

Contact vendor

Contact vendor

Plan details & limits

Limits
  • EDR data retention

    90days

Technical details

Deployment

Client OS
  • Platform
    macOS
    Supported tasks
    • Day 0 support for new macOS versions
Delivery Models
  • Cloud (SaaS)
  • On premises
  • Hybrid
Isolation Modes
  • Air gapped

Implementation

Delivery Mode
  • Vendor

Security

Access Models
  • Role based
Assurances
  • Kind
    Certification
    Scope
    Information Security Management System designed for the Singularity XDR Platform
    Standard
    ISO/IEC 27001:2022
  • Kind
    Certification
    Scope
    Cloud security controls extending the SentinelOne Information Security Management System
    Standard
    ISO/IEC 27017:2015
  • Kind
    Certification
    Scope
    Protection of personally identifiable information in public cloud environments
    Standard
    ISO/IEC 27018:2019
  • Kind
    Certification
    Scope
    Singularity Platform High under the NIST 800-53 Rev 5 framework
    Standard
    FedRAMP High
  • Kind
    Audit report
    Scope
    Security, Availability and Confidentiality Trust Services Criteria
    Issuer
    Schellman & Company
    Standard
    SOC 2 Type 2
  • Kind
    Attestation
    Scope
    Singularity XDR Platform, independent third-party audit
    Standard
    BSI C5:2020
  • Kind
    Assessment
    Scope
    Singularity XDR Platform assessed against Protected level controls
    Standard
    Australia IRAP

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with Singularity Endpoint.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights