--- title: "SentinelOne Reviews 2026. Verified Reviews, Pros & Cons | Capterra" description: "Is SentinelOne the right Endpoint Protection solution for you? Explore 116 verified user reviews from people in industries like yours to make a confident choice." source_url: "https://www.capterra.com/p/152564/Endpoint-Protection-Platform/reviews/" page_type: "reviews" language: "en" --- SentinelOne 4.8 (116) [View alternatives](https://www.capterra.com/p/152564/Endpoint-Protection-Platform/alternatives/) Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Learn more](https://www.capterra.com/our-story/) * * * Last updated August 20th, 2026 # Reviews of SentinelOne Ease of use 4.5 Customer Service 4.5 ## Pros and Cons in Reviews AS Ali S Director of ITManagement Consulting, 11 - 50 employeesUsed the software for: 1-2 years. “It’s quick, only activates when it’s needed, and it also offers great device management features like disabling or enabling USB ports for approved devices.“ May 7, 2026 IP Ilya P SREComputer & Network Security, 501 - 1,000 employeesUsed the software for: More than 2 years. “There are false positive results from time to time that can result in IT blocking users machine“ May 2, 2026 AK August K Managed services EngineerInformation Technology and Services, 11 - 50 employeesUsed the software for: More than 2 years. “SentinelOne provides strong endpoint protection and makes it easy to see threats, affected devices, and actions taken from one console.“ June 4, 2026 CW Colter W DeveloperAutomotive, 501 - 1,000 employeesUsed the software for: 1-2 years. “S1 has a tendency to obliterate a PC's resources when it runs a scan, which is unacceptable for older computers still in production.“ May 12, 2025 AK August K Managed services EngineerInformation Technology and Services, 11 - 50 employeesUsed the software for: More than 2 years. “It gives good visibility into devices and helps us respond to potential threats quickly.“ June 4, 2026 JR Joe R IT DirectorEducation Management, 11 - 50 employeesUsed the software for: 6-12 months. “I guess the only real thing that was sort of annoying was that is can tend to "over flag" programs etc. that aren't actually malicious.“ September 22, 2025 Harrison K Help Desk ManagerInformation Services, 11 - 50 employeesUsed the software for: 6-12 months. “As it was my first cyber security platform I really enjoyed the threat response, although there was never a major incident, we had minor items that were able to be resolved quickly.“ January 5, 2026 TL Tony L Software EngineerTelecommunications, 5,001 - 10,000 employeesUsed the software for: 1-2 years. “Sometimes sentinelone does too good a job: it blocked me from installing iterm2 which is the standard macos terminal application. “ September 14, 2024 ## Showing most helpful reviews Showing 1-25 of 116 Reviews Sort by: Most Helpful Rating Company Size Reviewer's Role Length of Use Frequency of Use Daniel G. Helpdesk Engineer Information Technology and Services Used the software for: Less than 6 months ### "Perfect Easy Affordable Protection" May 26, 2026 5.0 Overall, we have used SentinelOne in an MSP environment for a few years now. It has done very well detected malicious instances and preventing them! Pros SentinelOne has an easy installation! It prevented many malicious intrusions and continues to be the best bang for buck. Cons SentinelOne overall has been a great experience, however the un-install can be impossible if inheriting a new client. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/) Reason for choosing SentinelOne It was more affordable with easy-to-use features. Review Source AS Ali S. Director of IT Management Consulting Used the software for: 1-2 years ### "Great threat detection for endpoints" May 7, 2026 5.0 Overall, it's a great experience. It’s like setting it up and forgetting about it, letting it do it's work. The machine learning and AI behavior capabilities are impressive. Pros This malware detection software is fantastic! It’s quick, only activates when it’s needed, and it also offers great device management features like disabling or enabling USB ports for approved devices. Cons Sometimes the Windows experience feels a bit slow, but it’s not too common. It would be great if there was a mobile app or a mobile-friendly UI. Switched from [Bitdefender GravityZone](https://www.capterra.com/p/58388/BitDefender-Enterprise-Manager/) Threat detection and pricing. Not very intrusive and does its work when needed. Review Source PD Philip D. Network Administrator Government Administration Used the software for: 1-2 years ### "Solid endpoint protection with an easy-to-run console but alert tuning takes some work" July 28, 2026 5.0 Overall it's been a reliable part of our endpoint protection stack. The console makes daily management easy, which counts for a lot when you're a lean team covering everything from AD to firewalls to end-user support. The alert noise is a real friction point, but manageable with ongoing tuning, and it hasn't gotten in the way of the platform doing its core job. Pros The management console is genuinely easy to work in day to day. Deploying, checking agent health across our environment, and pulling up an endpoint's history when something looks off is all pretty intuitive and it's great because I'm not digging through nested menus to find what I need. Policy management across device groups is straightforward, and it plays well alongside the rest of our security stack. For a small IT team supporting a tribal government organization, that ease of management matters a lot since we don't have the headcount to babysit a complicated tool. Cons Alert noise is the main thing. We get a fair number of false positives, especially around legitimate admin tooling and scripts we run internally, which means time spent triaging and building exclusions rather than actually responding to threats. It's manageable once you've tuned policies for your environment, but that tuning process takes longer than I'd like, and new false positives crop up as we roll out new tools. Review Source CW Colter W. Developer Automotive Used the software for: 1-2 years ### "Does what it's Supposed to" May 12, 2025 3.0 Overall S1 is a fine product, and I prefer it to other antivirus solutions. Pros Possible malware is detected immediately, and an alert is sent very soon after discovery. Cons S1 has a tendency to obliterate a PC's resources when it runs a scan, which is unacceptable for older computers still in production. Switched from [Malwarebytes for Business](https://www.capterra.com/p/251770/Malwarebytes-for-Business/) MWB was initially the cheaper option; but that changed. Not only that, but MWB was becoming increasingly unstable on PCs, constantly filling HDDs with junk data while running endless scans. Review Source NB Nick B. Systems Engineer Information Technology and Services Used the software for: Less than 6 months ### "A Great EDR That Keeps Our Customers Safe" May 28, 2026 5.0 We have had a great experience with SentinelOne. It protects our customers, alerts us to any quarantines or bad files/actions, and automatically stops these from running until we review. We have been able to make exclusions when needed, and overall the transition to SentinelOne has been very smooth. Pros SentinelOne is a great EDR that we have deployed to replace our previous AV software. We have found it is much better at threat detection and stopping malware before it spreads. It is easy to deploy to devices and we can monitor these devices from the dashboard. Devices can be assigned to different customers and different policies and exclusions can be set for each customer. The value for the cost is great, and the increase in security is necessary. Cons There is a bit of a learning curve to the dashboard, settings, policies, and exclusions. But once learned, it is easy to manage. Switched from [Bitdefender Antivirus Plus](https://www.capterra.com/p/266585/Bitdefender-Antivirus-Plus/) To increase security for our customers and have better monitoring and alerts Review Source CS Christopher S. Chief Technology Officer Information Technology and Services Used the software for: 1-2 years ### "A quick honest opinion of Sentinel One" June 18, 2025 5.0 The program works very well for an EDR. The AI once in a while has a false positive, but it is very easy to rectify. The client also dosent over load system processes. Very light weight. Pros Ease of use , is the main reason we love the platform. It is very easy to intagrate in to modern RMM platforms to deploy the client. Cons It is a little dificult to import customers at times. Also setting up the scanning profiles for the first time is a little challenging. Alternatives considered [Datto EDR](https://www.capterra.com/p/10013021/Datto-EDR/) Reason for choosing SentinelOne We do not like the Kaseya model. Just to busy and cant get out of its own way. Switched from [Worry-Free Services Suites](https://www.capterra.com/p/238489/Worry-Free-Business-Security-Advanced/) Real time scanning and true live definitions. I dont like reading definition files, if it is seen in the wild it is added the same day to all scan systems. Review Source CD Chris D. Owner Computer & Network Security Used the software for: 1-2 years ### "SentinelOne A/V, MDR, XDR, EDR, Etc." July 1, 2025 5.0 I have had a wonderful experience and would recommend it to friends and colleagues. I've so far had very little in the way of false positives with my clients, and everyone has been happy with it. Pros Wonderful Management Portal, Easy To Use, Implemented it with my PSA, SuperOps, Low Memory Footprint, and Storage. Cons Extremely hard to uninstall if the endpoint is deleted from the Management Portal. Other than this, I love everything about the product. Switched from [Bitdefender GravityZone](https://www.capterra.com/p/58388/BitDefender-Enterprise-Manager/) I was unimpressed with the results we had over the last few years with BitDefender and needed a newer product that was more up to date with the modern-day EDR and XDR, etc. Review Source MS Michael S. Cyber Manager Information Technology and Services Used the software for: 2+ years ### "Great MDR provider" September 8, 2025 5.0 Pros We love the simplicity of the administrator platform and the protection that the suite offers to our clients. Cons The support that we get from the MDR team is not the best. That is definitely the biggest area of improvement. Switched from [Webroot SecureAnywhere](https://www.capterra.com/p/266615/Webroot-SecureAnywhere-AntiVirus/) We needed a platform that would better meet the monitoring needs of our clients Review Source PB Paul B. Owner Information Technology and Services Used the software for: 2+ years ### "Great EDR Product" April 24, 2025 5.0 Very positive experience. I do not have to think too much about it. Review the dashboard and make sure all my clients are running smoothly. Pros The level of protection it provides my clients is amazing. I have watched it in real time restore a client's encrypted files (ransomware related encryption). Amazing! Cons The first version of the product was very limited but we moved to a standalone system (verses integrated with N-Central) and our options are much better. I recently had to approve it tagging Norton VPN and it would not approve the entire string of hits. Another issue I have had is corrupted installs giving me trouble. Switched from [Bitdefender Antivirus Plus](https://www.capterra.com/p/266585/Bitdefender-Antivirus-Plus/) SentinelOne is a much better product. Price point at the time was slightly higher but low enough to make it cost effective. Review Source SL Steve L. Technical Director Computer & Network Security Used the software for: 2+ years ### "very effective product" May 14, 2025 5.0 It has been a very positive experience using the product and we have a greater depth of knowledge of threats since using it. Pros Its ability to detect threats and network disconnect the device to protect it and other devices on the network. Cons I dislike that agents that are auto removed from the console cannot be uninstalled from the device without a lot of hassle. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/) Reason for choosing SentinelOne We felt more comfortable with the offering of SentinelOne over Crowdstrike Switched from [Bitdefender GravityZone](https://www.capterra.com/p/58388/BitDefender-Enterprise-Manager/) Better features than the previous product Review Source pS patrick S. IT Manager Hospital & Health Care Used the software for: Less than 6 months ### "Simple and effective, just get it bundled with something else" April 14, 2025 5.0 Everything has been super easy to manage and deploy. All of the workstations with it are running well and it has caught and cleaned up several infections and issues missed by previous solutions. Pros Easy to setup and manage. Services work well and their protection runs silently without any issues. Cons The price, it is a little high if you pay for it directly. I would recommend finding a VAR or solution provider and have it bundled in with a RMM, then the price is much better. Alternatives considered [Microsoft Defender for Business](https://www.capterra.com/p/253101/Microsoft-Defender-for-Business/) Reason for choosing SentinelOne Better engine, better management, and it is built into our RMM platform. Switched from [OpenText Core Endpoint Protection​](https://www.capterra.com/p/166552/Webroot-SecureAnywhere-Endpoint-Protection/) Webroot was ineffective and was not catching anything. Review Source mC matt C. Network Engineer Information Technology and Services Used the software for: 1-2 years ### "S1 SOC is Top Notch" September 26, 2024 5.0 I have a great experience with S1 and their SOC was always helpful and attentive to my needs and kept me informed throughout any issues I had. Pros Sentinel One is a top notch Cyber security product that saved one of our customers from a large wide Malware/virus threat. All machines that had S1 enabled were virus free and the other computers that were in transition were infected. Cons I the major con that I had issues with the S1 portal was deleting or uninstalling an endpoint or updating endpoints. I had to manually update agents and they weren’t updating on their own. Switched from [Webroot SecureAnywhere](https://www.capterra.com/p/266615/Webroot-SecureAnywhere-AntiVirus/) Webroot was infected and the other machines that had the S1 trial had no issues and we swapped products. Review Source sS shabbir S. security analyst Information Technology and Services Used the software for: 2+ years ### "Sentinel One - Next Generation detection and response tool with AI based" September 28, 2021 4.0 SentinelOne is way ahead of all the traditional EDR solutions and exceptionally well in terms of its capabilities (roll-back) and in Machine learning in understanding the behaviour and protecting from Zero-day vulnerabilities. Pros Sentinel One is very simple in deployment all the resources are available easy to understand for even a new user. the built-in architecture is very simple and the rollout agent is easy to deploy or pushing with 3rd party tools. When it comes to its XDR capabilities way ahead of all the traditional products, its Machine learning capabilities, and roll-back features, etc.. special comment for its storyline based on events and any incident that happens. Auto remediation capabilities are exceptional. Cons as the product has good capabilities but lack's in defining things deeply. building deep level policy fro endpoints or DLP based policy on products are limited. Endpoint-specific policies are not so flexible and also not feasible for some customers because of their price. Alternatives considered [Intercept X Endpoint](https://www.capterra.com/p/151731/Sophos-Endpoint-Protection/) Reason for choosing SentinelOne Sentinel One is excellent in its auto-remediation and machine learning capabilities. we really like its rollback feature, inbuilt device control basic DLP policies, and its architecture from account to the group level is easy in customization and maintaining the agents in terms of building-specific policy or maintaining storyline. Switched from [Symantec Endpoint Security](https://www.capterra.com/p/227396/Symantec-Endpoint-Protection/) because of its support and weak capabilities in handling zero-day threats and no storyline of incidents, capabilities in rollout agents, machine learning, threat prevention, remediation actions, and so on. Review Source RC Russell C. IT Associate Non-Profit Organization Management Used the software for: 6-12 months ### "Endpoint Detection and Response that delivers what it promises." November 7, 2023 5.0 Very positive, I am made aware of version changes, issues, threats, and configuration problems quickly, which allows me to address these issues immediately. I have been very impressed by this product and by their support. Pros The pricing is good for the quality of product you're purchasing, the detection is solid and picks up where other products might miss. Configuration and setup was intuitive and easy. Support has always been on top of whatever issues I have and resolves them quickly. Cons So far I have only had minor issues which their support has been quick to address. Thankfully we have had no major issues with it and it is working like it should! Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/)[Carbon Black EDR](https://www.capterra.com/p/240695/Carbon-Black-EDR/) Reason for choosing SentinelOne Price, features, and support. Also, I found their reputation to be solid and their product demo to demonstrate that the product worked as advertised. Switched from [Symantec Endpoint Security](https://www.capterra.com/p/227396/Symantec-Endpoint-Protection/) Symantec cost close to the same and was much less robust and missed things that SentinelOne caught. Review Source RT Romil T. IT Helpdesk Education Management Used the software for: 2+ years ### "Best AI Antivirus " April 3, 2024 5.0 Overall, its best antivirus and we can rely on it up to certain point. Pros It stops almost all malwares and also we can remote in into the device. We can send broadcast messages which I really like. Cons It gives many false positives which sometimes are annoying. Switched from [Microsoft Defender XDR](https://www.capterra.com/p/219687/Microsoft-365-Defender/) SentinelOne works AI based so we thought it would work best. Review Source MO Mark O. Director of Information Technologies Packaging and Containers Used the software for: Less than 6 months ### "Sentinel One review" January 17, 2023 4.0 Excellent so far, and a great approach with everything that was done for us. The reseller and the company went the extra mile to ensure all our questions were answered. Pros Excellent deployment, great team follow up with weekly deployment schedules. Cons Active Directory Ranger is not fully integrated. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/)[Carbon Black EDR](https://www.capterra.com/p/240695/Carbon-Black-EDR/) Reason for choosing SentinelOne The costs and the overall package seemed to be a better fit. The managed service was also comparable to leading edge software. Switched from [Apex One](https://www.capterra.com/p/238492/Trend-Micro-OfficeScan/) We were finding issues where viruses were getting through, and as a result, we had compromised equipment. Review Source MM Megan M. IT Manager Facilities Services Used the software for: 1-2 years ### "Good for Small Business" January 9, 2023 4.0 Pros The deployment was incredibly easy on each machine and we really like the USB device monitoring to control external devices. The Daily reports are helpful for documentation/record-keeping purposes. Cons The activity dashboard can be a little complicated if you aren't a technical person. Same with the threat hunting rules. The layout isn't super friendly and has a learning curve of where everything is. Alternatives considered [Cynet 360](https://www.capterra.com/p/177290/Cynet-360/) Reason for choosing SentinelOne More cost effective for the features offered. Review Source JP Johnny P. UX Designer II Computer Software Used the software for: 1-2 years ### "Keeping you safe from bugs, viruses, and more!" June 12, 2025 5.0 When I'm downloading various assets and files for design work, SentinelOne gives me peace of mind. I know I'm protected as I explore the web for things to use in my designs. Pros The design of it is really cool. It's modern and clean and keeps my computer safe from viruses and other threats. Cons It's usually been a great experience! Recently it has this consistent false positive that's been stuck there for a couple months. It doesn't seem to be malicious, but I have to double check sometimes. Review Source KR Kiran R. Vulnerability Assessor Computer & Network Security Used the software for: 1-2 years ### "Powerful AI-Driven Protection" February 23, 2025 5.0 Pros Its a very good product and provides overall security. I like most about behavior analysis using AI to detect and respond. Agent installation is easy and light on devices. Integration with our other tools is very good and was setup with no complications. Cons Some settings are complex and need extensive knowledge to understand and operate. Overall a good product. Review Source VR Verified Reviewer Systems and Security Architect Education Management Used the software for: 2+ years ### "Cost per feature and overall strengths is great" April 22, 2023 5.0 We don't have a lot of virus activity, but we do feel very safe with the detection AI S1 uses, and love the lack of false positives in our alerts that don't waste our time. The central management is nice, but almost TOO centralized, since if a device is "offline" there's not much you can do to repair the network stack or whatever it is that S1 does to kill the network connection. We've only had one instance in the past year were the network connection went offline and we could not get it back up and running with a repair or offline uninstall. May have been my own fault for not reaching out to S1 support since they are usually pretty responsive and helpful - this was a non-important server I decided could be rolled back manually from backups which resolved the issue. Pros The price point to get the EDR values is the winning solution for us. Crowdstrike was considered multiple times, but S1 beat it in our review when taking in price/value concerns, not to mention the alert values were more spot on with "real" alerts that wasted our time much less. S1 also ties in with tons of other services in the cybersec world with it's API options. Cons The occasional alert that's false-postive or the pulling-network-cord feature on endpoints that don't appear to have a lateral spreading virus. (Rare detection flaw maybe). The biggest gripe would be years ago if the S1 software had some kind of internal database corruption, rebooting our domain controllers could nuke it from orbit... thankfully, this has not happened for over a year and we're very happy now. Alternatives considered [CrowdStrike](https://www.capterra.com/p/147662/CrowdStrike-Falcon/)[Emsisoft Business Security](https://www.capterra.com/p/213154/Emsisoft-Business-Security/) Reason for choosing SentinelOne Price/function/API/support. Review Source CH Chris H. Systems Engineer Information Technology and Services Used the software for: 2+ years ### "Great product - it’s too good sometimes but not too annoying" November 30, 2023 5.0 Pros It monitors behavior, it thinks some legitimate software and commands are malicious, but also easy to reverse and continue on. Lots of options for whitelisting. Not easy to be removed, so it’s not easy to get around. Cons Sometimes I wish I could do VSS maintenance without having to disable the agent, but viruses and malware can attack VSS so I’m fine with it. Have had some issues with duplicating agents in the management side and trouble with updates. Review Source SC Simone C. Cybersecurity Analyst Information Technology and Services Used the software for: 2+ years ### "This is not just about marketing but real protection against the most complex threats." April 20, 2024 5.0 We've tested this solution a lot and we've assumed it is the best for us and for our customer. The agent that you install on servers or endpoints is lightweight and does not use so many resources that it slows down the system unlink other competitors. Moreover this solution doesn't produce so many false positive but all events ("incidents") are real events to investigate. In addition to this, the solution natively integrates with other products (not only for this brand) and offers an extensive API that you can use for integrating with custom applications (eg. Security Operation Center frameworks). Pros Lightweight agent. Low false-positive rate. API and integrations. Cons Not yet integrated mobile platform into the XDR platform. Review Source CH Chris H. Systems Engineer Information Technology and Services Used the software for: 2+ years ### "Great Product - Sometimes too good" June 21, 2024 5.0 Pros I like the detection response and the way it behaves. It doesn't just scan for malicious files, it looks for malicious behavior. It has protected clients/users from actual attacks. Cons Sometimes it does it's job too well, such as if you are just clearing out shadow copy data. But...things like that can be done in a malicious attack, so it's worth having to temporarily disable it from time to time. The updates fail sometimes and require a complete reinstall of SentinelOne and it can get a little difficult, sometimes requiring to use the cleaner tool and get into safe mode. Review Source MS Matt S. IT Manager Computer Software Used the software for: 2+ years ### "Great Product" January 5, 2023 5.0 Positive. Pros Very intuitive to use, not a big learning curve when configuring or rolling out new features. SentinelOne is always making product enhancements and overall just happy with the product. Cons There were some initial limitations with the firewall and blacklisting, but the enhancements have made up for this. Review Source AH Alan H. Chief Operations Officer Information Technology and Services Used the software for: 1-2 years ### "SentinelOne - Best EDR solution out there" April 11, 2022 5.0 Pros This system was easy to install, configure and use. It requires very little interaction once setup and configured. Its ability to block USB ports and isolate computers from the network is invaluable Cons The only minor con is that updates must be performed by an administrator through the portal. It would be great if it could roll out updates automatically to endpoints approved to be upgraded Review Source Similar Products Featured