--- title: "SentinelOne Reviews 2026. Verified Reviews, Pros & Cons | Capterra" description: "Is SentinelOne the right Endpoint Protection solution for you? Explore 117 verified user reviews from people in industries like yours to make a confident choice." source_url: "https://www.capterra.com/p/152564/Endpoint-Protection-Platform/reviews/" page_type: "reviews" language: "en" publication_date: "2026-10-19" --- SentinelOne 4.8 (117) [View alternatives](https://www.capterra.com/p/152564/Endpoint-Protection-Platform/alternatives/) Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Learn more](https://www.capterra.com/our-story/) * * * Last updated October 19th, 2026 # Reviews of SentinelOne Ease of use 4.5 Customer Service 4.5 ## Pros and Cons in Reviews AS Ali S Director of ITManagement Consulting, 11 - 50 employeesUsed the software for: 1-2 years. “It’s quick, only activates when it’s needed, and it also offers great device management features like disabling or enabling USB ports for approved devices.“ May 7, 2026 IP Ilya P SREComputer & Network Security, 501 - 1,000 employeesUsed the software for: More than 2 years. “There are false positive results from time to time that can result in IT blocking users machine“ May 2, 2026 AK August K Managed services EngineerInformation Technology and Services, 11 - 50 employeesUsed the software for: More than 2 years. “SentinelOne provides strong endpoint protection and makes it easy to see threats, affected devices, and actions taken from one console.“ June 4, 2026 CW Colter W DeveloperAutomotive, 501 - 1,000 employeesUsed the software for: 1-2 years. “S1 has a tendency to obliterate a PC's resources when it runs a scan, which is unacceptable for older computers still in production.“ May 12, 2025 AK August K Managed services EngineerInformation Technology and Services, 11 - 50 employeesUsed the software for: More than 2 years. “It gives good visibility into devices and helps us respond to potential threats quickly.“ June 4, 2026 SL Steve L Technical DirectorComputer & Network Security, 11 - 50 employeesUsed the software for: More than 2 years. “I dislike that agents that are auto removed from the console cannot be uninstalled from the device without a lot of hassle.“ May 14, 2025 Harrison K Help Desk ManagerInformation Services, 11 - 50 employeesUsed the software for: 6-12 months. “As it was my first cyber security platform I really enjoyed the threat response, although there was never a major incident, we had minor items that were able to be resolved quickly.“ January 5, 2026 Stephan v Head of SecOps, XDR and MSSPComputer & Network Security, 11 - 50 employeesUsed the software for: 1-2 years. “Such as 1 click roll back when or if you got infected by Ransomware.“ February 10, 2025 ## Showing most helpful reviews Showing 1-25 of 117 Reviews Sort by: Most Helpful Rating Company Size Reviewer's Role Length of Use Frequency of Use Daniel G. Helpdesk Engineer Information Technology and Services Used the software for: Less than 6 months ### "Perfect Easy Affordable Protection" May 26, 2026 5.0 Overall, we have used SentinelOne in an MSP environment for a few years now. It has done very well detected malicious instances and preventing them! Pros SentinelOne has an easy installation! It prevented many malicious intrusions and continues to be the best bang for buck. Cons SentinelOne overall has been a great experience, however the un-install can be impossible if inheriting a new client. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/) Reason for choosing SentinelOne It was more affordable with easy-to-use features. Review Source NB Nick B. Systems Engineer Information Technology and Services Used the software for: Less than 6 months ### "A Great EDR That Keeps Our Customers Safe" May 28, 2026 5.0 We have had a great experience with SentinelOne. It protects our customers, alerts us to any quarantines or bad files/actions, and automatically stops these from running until we review. We have been able to make exclusions when needed, and overall the transition to SentinelOne has been very smooth. Pros SentinelOne is a great EDR that we have deployed to replace our previous AV software. We have found it is much better at threat detection and stopping malware before it spreads. It is easy to deploy to devices and we can monitor these devices from the dashboard. Devices can be assigned to different customers and different policies and exclusions can be set for each customer. The value for the cost is great, and the increase in security is necessary. Cons There is a bit of a learning curve to the dashboard, settings, policies, and exclusions. But once learned, it is easy to manage. Switched from [Bitdefender Antivirus Plus](https://www.capterra.com/p/266585/Bitdefender-Antivirus-Plus/) To increase security for our customers and have better monitoring and alerts Review Source TM Tracy M. IT Systems Manager Architecture & Planning Used the software for: 2+ years ### "Good solution for us" September 28, 2026 5.0 We switched to Sentinel One after we had a major security issue. It makes us feel much more secure, the notifications are prompt. Pros We are notified promptly of any security issues. It works smoothly for us, no issues. Easy to use and keep updated. Cons They have recently switched to an exclusively silent installer and if our group policy isn't being used to install it can sometimes be a hassle to get up and running. Switched from [LogMeIn Central](https://www.capterra.com/p/169259/LogMeIn-Central/) We had a security issue and felt that this provided better support. Review Source CW Colter W. Developer Automotive Used the software for: 1-2 years ### "Does what it's Supposed to" May 12, 2025 3.0 Overall S1 is a fine product, and I prefer it to other antivirus solutions. Pros Possible malware is detected immediately, and an alert is sent very soon after discovery. Cons S1 has a tendency to obliterate a PC's resources when it runs a scan, which is unacceptable for older computers still in production. Switched from [Malwarebytes for Business](https://www.capterra.com/p/251770/Malwarebytes-for-Business/) MWB was initially the cheaper option; but that changed. Not only that, but MWB was becoming increasingly unstable on PCs, constantly filling HDDs with junk data while running endless scans. Review Source PD Philip D. Network Administrator Government Administration Used the software for: 1-2 years ### "Solid endpoint protection with an easy-to-run console but alert tuning takes some work" July 28, 2026 5.0 Overall it's been a reliable part of our endpoint protection stack. The console makes daily management easy, which counts for a lot when you're a lean team covering everything from AD to firewalls to end-user support. The alert noise is a real friction point, but manageable with ongoing tuning, and it hasn't gotten in the way of the platform doing its core job. Pros The management console is genuinely easy to work in day to day. Deploying, checking agent health across our environment, and pulling up an endpoint's history when something looks off is all pretty intuitive and it's great because I'm not digging through nested menus to find what I need. Policy management across device groups is straightforward, and it plays well alongside the rest of our security stack. For a small IT team supporting a tribal government organization, that ease of management matters a lot since we don't have the headcount to babysit a complicated tool. Cons Alert noise is the main thing. We get a fair number of false positives, especially around legitimate admin tooling and scripts we run internally, which means time spent triaging and building exclusions rather than actually responding to threats. It's manageable once you've tuned policies for your environment, but that tuning process takes longer than I'd like, and new false positives crop up as we roll out new tools. Review Source AS Ali S. Director of IT Management Consulting Used the software for: 1-2 years ### "Great threat detection for endpoints" May 7, 2026 5.0 Overall, it's a great experience. It’s like setting it up and forgetting about it, letting it do it's work. The machine learning and AI behavior capabilities are impressive. Pros This malware detection software is fantastic! It’s quick, only activates when it’s needed, and it also offers great device management features like disabling or enabling USB ports for approved devices. Cons Sometimes the Windows experience feels a bit slow, but it’s not too common. It would be great if there was a mobile app or a mobile-friendly UI. Switched from [Bitdefender GravityZone](https://www.capterra.com/p/58388/BitDefender-Enterprise-Manager/) Threat detection and pricing. Not very intrusive and does its work when needed. Review Source CS Christopher S. Chief Technology Officer Information Technology and Services Used the software for: 1-2 years ### "A quick honest opinion of Sentinel One" June 18, 2025 5.0 The program works very well for an EDR. The AI once in a while has a false positive, but it is very easy to rectify. The client also dosent over load system processes. Very light weight. Pros Ease of use , is the main reason we love the platform. It is very easy to intagrate in to modern RMM platforms to deploy the client. Cons It is a little dificult to import customers at times. Also setting up the scanning profiles for the first time is a little challenging. Alternatives considered [Datto EDR](https://www.capterra.com/p/10013021/Datto-EDR/) Reason for choosing SentinelOne We do not like the Kaseya model. Just to busy and cant get out of its own way. Switched from [Worry-Free Services Suites](https://www.capterra.com/p/238489/Worry-Free-Business-Security-Advanced/) Real time scanning and true live definitions. I dont like reading definition files, if it is seen in the wild it is added the same day to all scan systems. Review Source MS Michael S. Cyber Manager Information Technology and Services Used the software for: 2+ years ### "Great MDR provider" September 8, 2025 5.0 Pros We love the simplicity of the administrator platform and the protection that the suite offers to our clients. Cons The support that we get from the MDR team is not the best. That is definitely the biggest area of improvement. Switched from [Webroot SecureAnywhere](https://www.capterra.com/p/266615/Webroot-SecureAnywhere-AntiVirus/) We needed a platform that would better meet the monitoring needs of our clients Review Source CD Chris D. Owner Computer & Network Security Used the software for: 1-2 years ### "SentinelOne A/V, MDR, XDR, EDR, Etc." July 1, 2025 5.0 I have had a wonderful experience and would recommend it to friends and colleagues. I've so far had very little in the way of false positives with my clients, and everyone has been happy with it. Pros Wonderful Management Portal, Easy To Use, Implemented it with my PSA, SuperOps, Low Memory Footprint, and Storage. Cons Extremely hard to uninstall if the endpoint is deleted from the Management Portal. Other than this, I love everything about the product. Switched from [Bitdefender GravityZone](https://www.capterra.com/p/58388/BitDefender-Enterprise-Manager/) I was unimpressed with the results we had over the last few years with BitDefender and needed a newer product that was more up to date with the modern-day EDR and XDR, etc. Review Source Harrison K. Help Desk Manager Information Services Used the software for: 6-12 months ### "MSP Help Desk Manager Sentinel One Experience" January 5, 2026 4.0 As it was my first cyber security platform I really enjoyed the threat response, although there was never a major incident, we had minor items that were able to be resolved quickly. Pros I liked how easy it was to learn the platform, coming from a business where I did not a similar platform transitioning was easy. Cons I do not remember having any negative feedback with the platform at the time I was using it because I had not used a platform like it previously. Review Source GM Giulia M. System Administrator Information Technology and Services Used the software for: 1-2 years ### "SentinelOne: the best EDR" November 25, 2024 5.0 Our experience with SentinelOne is great, in my opinion is the best EDR now available. Pros Easy to deploy and install. Easy to make exclusions and other configurations. Cons Sometimes agent does not connect to cloud. Switched from [Kasper](https://www.capterra.com/p/10020520/Kasper/) We were not satisfied, too much complexity for each operation. Review Source sS shabbir S. security analyst Information Technology and Services Used the software for: 2+ years ### "Sentinel One - Next Generation detection and response tool with AI based" September 28, 2021 4.0 SentinelOne is way ahead of all the traditional EDR solutions and exceptionally well in terms of its capabilities (roll-back) and in Machine learning in understanding the behaviour and protecting from Zero-day vulnerabilities. Pros Sentinel One is very simple in deployment all the resources are available easy to understand for even a new user. the built-in architecture is very simple and the rollout agent is easy to deploy or pushing with 3rd party tools. When it comes to its XDR capabilities way ahead of all the traditional products, its Machine learning capabilities, and roll-back features, etc.. special comment for its storyline based on events and any incident that happens. Auto remediation capabilities are exceptional. Cons as the product has good capabilities but lack's in defining things deeply. building deep level policy fro endpoints or DLP based policy on products are limited. Endpoint-specific policies are not so flexible and also not feasible for some customers because of their price. Alternatives considered [Intercept X Endpoint](https://www.capterra.com/p/151731/Sophos-Endpoint-Protection/) Reason for choosing SentinelOne Sentinel One is excellent in its auto-remediation and machine learning capabilities. we really like its rollback feature, inbuilt device control basic DLP policies, and its architecture from account to the group level is easy in customization and maintaining the agents in terms of building-specific policy or maintaining storyline. Switched from [Symantec Endpoint Security](https://www.capterra.com/p/227396/Symantec-Endpoint-Protection/) because of its support and weak capabilities in handling zero-day threats and no storyline of incidents, capabilities in rollout agents, machine learning, threat prevention, remediation actions, and so on. Review Source MO Mark O. Director of Information Technologies Packaging and Containers Used the software for: Less than 6 months ### "Sentinel One review" January 17, 2023 4.0 Excellent so far, and a great approach with everything that was done for us. The reseller and the company went the extra mile to ensure all our questions were answered. Pros Excellent deployment, great team follow up with weekly deployment schedules. Cons Active Directory Ranger is not fully integrated. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/)[Carbon Black EDR](https://www.capterra.com/p/240695/Carbon-Black-EDR/) Reason for choosing SentinelOne The costs and the overall package seemed to be a better fit. The managed service was also comparable to leading edge software. Switched from [Apex One](https://www.capterra.com/p/238492/Trend-Micro-OfficeScan/) We were finding issues where viruses were getting through, and as a result, we had compromised equipment. Review Source CL Casy L. IT Manager Hospital & Health Care Used the software for: 2+ years ### "Leading edge and best option for us" January 5, 2023 5.0 Pros Great option and package. Have used it for a few years now and continue to be impressed with its capabilities. Continues to be developed and evolve as the threat landscape increases. Cons The additional add-ons get a little confusing as to what does what. Some of their terminology is a bit hard to determine initially. Switched from [CylanceENDPOINT](https://www.capterra.com/p/148333/CylancePROTECT/) Was not getting the support, innovation and confidence I needed in a EDR product. Review Source JP Johnny P. UX Designer II Computer Software Used the software for: 1-2 years ### "Keeping you safe from bugs, viruses, and more!" June 12, 2025 5.0 When I'm downloading various assets and files for design work, SentinelOne gives me peace of mind. I know I'm protected as I explore the web for things to use in my designs. Pros The design of it is really cool. It's modern and clean and keeps my computer safe from viruses and other threats. Cons It's usually been a great experience! Recently it has this consistent false positive that's been stuck there for a couple months. It doesn't seem to be malicious, but I have to double check sometimes. Review Source AJ Andrew J. NOC lead Information Technology and Services Used the software for: 2+ years ### "Great EDR solution" May 4, 2025 4.0 Overall it does what we need. It is a reliable EDR solution at a good price. Pros It is a great EDR solution we can integrate with our SOC. There is a lot of control with S1. Cons The false alerts. Can be exhausting. We started to have excessive false isolations lately. Review Source DD Derek D. vCIO Information Technology and Services Used the software for: 2+ years ### "Reliable Protection with Room for Improvement" May 12, 2025 4.0 Overall, SentinelOne has been a reliable and effective security solution. It gives us strong protection with minimal effort, and once we got used to the interface, it became a key part of our cybersecurity stack. Pros Strong threat detection, automatic remediation, easy deployment, and a clear dashboard that makes managing endpoints simple. Cons While SentinelOne offers excellent protection, the interface can be a bit complex, especially for new users. It takes some time to get comfortable navigating through the different features. Additionally, the reporting features could be more flexible, as customizing reports to match specific needs is not always straightforward. Review Source VR Verified Reviewer Systems and Security Architect Education Management Used the software for: 2+ years ### "Cost per feature and overall strengths is great" April 22, 2023 5.0 We don't have a lot of virus activity, but we do feel very safe with the detection AI S1 uses, and love the lack of false positives in our alerts that don't waste our time. The central management is nice, but almost TOO centralized, since if a device is "offline" there's not much you can do to repair the network stack or whatever it is that S1 does to kill the network connection. We've only had one instance in the past year were the network connection went offline and we could not get it back up and running with a repair or offline uninstall. May have been my own fault for not reaching out to S1 support since they are usually pretty responsive and helpful - this was a non-important server I decided could be rolled back manually from backups which resolved the issue. Pros The price point to get the EDR values is the winning solution for us. Crowdstrike was considered multiple times, but S1 beat it in our review when taking in price/value concerns, not to mention the alert values were more spot on with "real" alerts that wasted our time much less. S1 also ties in with tons of other services in the cybersec world with it's API options. Cons The occasional alert that's false-postive or the pulling-network-cord feature on endpoints that don't appear to have a lateral spreading virus. (Rare detection flaw maybe). The biggest gripe would be years ago if the S1 software had some kind of internal database corruption, rebooting our domain controllers could nuke it from orbit... thankfully, this has not happened for over a year and we're very happy now. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/)[Emsisoft Business Security](https://www.capterra.com/p/213154/Emsisoft-Business-Security/) Reason for choosing SentinelOne Price/function/API/support. Review Source DE Daniel E. IT infrastrucute and security Information Technology and Services Used the software for: 1-2 years ### "SentinelOne is a great product" January 9, 2023 5.0 Overall, I would totally recommend SentinelOne as a product. there are a few things I would love for them to fix. but overall I believe they are one of the best. Pros I am generally more technical. so, using SentinelOne's visibility feature you are able to hunt down events on your endpoints. and create alerts based off custom queries. this was very flexible, and I was able to find multiple issues on endpoints just experimenting with their query language. Cons Helpdesk support sometimes was hard to deal with. alerting for custom rules was not very good. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/) Review Source VR Verified Reviewer Network Engineer III Insurance Used the software for: 1-2 years ### "SentinelOne has been great product for end point protection." May 21, 2022 5.0 Overall it is pretty smooth software, does not affect the endpoint performance, also I feel really secure when I have it install in my endpoint machine. However Security is not single software responsibility, even user have to be very proactive and should take more trainings and stay safe. Pros It is really a pro software in finding out the vulnerability within endpoint, stay secure from threats, this can really save you from bad actors trying to put ransomware in your endpoint, your endpoint can easily be restored back to original state. Further we can integrate with SIEM and after observing the pattern we can have different threats use cases. Cons Nothing I can think of it really worked smooth when I used it, however they can improve the builds in each update, and yes threat actors are thinking out of the box, they also need to think out of the box and build something which can even prevent zero day attacks. Review Source CH Chris H. Systems Engineer Information Technology and Services Used the software for: 2+ years ### "Great product - it’s too good sometimes but not too annoying" November 30, 2023 5.0 Pros It monitors behavior, it thinks some legitimate software and commands are malicious, but also easy to reverse and continue on. Lots of options for whitelisting. Not easy to be removed, so it’s not easy to get around. Cons Sometimes I wish I could do VSS maintenance without having to disable the agent, but viruses and malware can attack VSS so I’m fine with it. Have had some issues with duplicating agents in the management side and trouble with updates. Review Source SC Simone C. Cybersecurity Analyst Information Technology and Services Used the software for: 2+ years ### "This is not just about marketing but real protection against the most complex threats." April 20, 2024 5.0 We've tested this solution a lot and we've assumed it is the best for us and for our customer. The agent that you install on servers or endpoints is lightweight and does not use so many resources that it slows down the system unlink other competitors. Moreover this solution doesn't produce so many false positive but all events ("incidents") are real events to investigate. In addition to this, the solution natively integrates with other products (not only for this brand) and offers an extensive API that you can use for integrating with custom applications (eg. Security Operation Center frameworks). Pros Lightweight agent. Low false-positive rate. API and integrations. Cons Not yet integrated mobile platform into the XDR platform. Review Source CH Chris H. Systems Engineer Information Technology and Services Used the software for: 2+ years ### "Great Product - Sometimes too good" June 21, 2024 5.0 Pros I like the detection response and the way it behaves. It doesn't just scan for malicious files, it looks for malicious behavior. It has protected clients/users from actual attacks. Cons Sometimes it does it's job too well, such as if you are just clearing out shadow copy data. But...things like that can be done in a malicious attack, so it's worth having to temporarily disable it from time to time. The updates fail sometimes and require a complete reinstall of SentinelOne and it can get a little difficult, sometimes requiring to use the cleaner tool and get into safe mode. Review Source TL Tony L. Software Engineer Telecommunications Used the software for: 1-2 years ### "actively monitors and protects against malicious threats" September 14, 2024 5.0 Pros actively monitors and protects against malicious theats; protected my computer from installing a malicious code editor. Cons Sometimes sentinelone does too good a job: it blocked me from installing iterm2 which is the standard macos terminal application. However, I was able to create a IT ticket and point them to the SentinelOne's quarantined folder and get the rules updated to allow for iterm2 installation. Review Source AS Abdulquadri S. Cyber Security Analyst Computer & Network Security Used the software for: 6-12 months ### "Excellent Product with Outstanding Capability for Endpoint Detection and Response" January 15, 2023 5.0 Pros The SentinelOne Deep Visibility is the most impactful feature of the software. It makes for an excellent threat-hunting exercise. Cons SentinelOne requires users to encrypt a threat file with a complex password before it can be downloaded. The complex password introduces a minor problem when assessing the malicious file locally. For instance, one might be tempted to use a browser-generated password to meet the password criteria, but this is difficult to remember and would always require one to check their saved passwords to enter correctly before one can commence an analysis of the threat file in a lab environment. It will be much easier if threat files are encrypted with a standard password of "infected" or at least allow users to use passwords like this instead of a complex one. Review Source Similar Products Featured