SentinelOne Singularity Identity Detection & Response review
Broad identity and endpoint protection with identity coverage priced from $229.99 per endpoint annually.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
SentinelOne Singularity Identity Detection & Response is designed for organizations protecting hybrid identity environments through a shared identity and endpoint security platform. It correlates identity and endpoint telemetry to identify credential theft, privilege escalation, lateral movement, and other identity-based threats. Its coverage includes human and machine identities, Active Directory, cloud identity providers, deception techniques, conditional access, automated containment, remediation workflows, and compromised credential exposure monitoring. It is best suited to endpoint-centric security teams that want to add identity protection without separating identity and endpoint visibility.
Pricing is organized across the Singularity plans. Singularity Complete is listed at $179.99 per endpoint annually and includes AI-driven endpoint and cloud workload protection, real-time threat detection and response, and 14 days of data retention. Singularity Commercial is listed at $229.99 per endpoint annually and adds Identity Detection & Response, 90-day data retention, and Managed Threat Hunting. Singularity Enterprise lists Identity Threat Detection and Response, an Agentic AI SOC Analyst, and Full Visibility & Forensics. Identity Detection & Response is associated with the Commercial tier at $229.99 per endpoint annually, with prices displayed for 5-100 workstations.
Its ecosystem fit is a central strength. The product integrates with Microsoft Active Directory, Microsoft Entra ID, Okta, Ping, SecureAuth, and Duo, while policy-based conditional access and automated identity containment support response workflows. Deception can help expose attacker reconnaissance, and credential exposure monitoring extends visibility beyond active endpoint events. Teams needing identity and endpoint telemetry correlation, automated response, and broad identity-provider coverage should consider it. Organizations seeking a narrowly focused identity-only tool or a lower annual entry price may prefer an alternative.
SentinelOne Singularity Identity Detection & Response pros and cons
- Where it wins
- Correlates identity and endpoint telemetry across hybrid environments
- Detects credential theft, privilege escalation, and directory attacks
- Supports Active Directory, Entra ID, Okta, Ping, SecureAuth, and Duo
- Where it doesn't
- Identity Detection & Response starts at $229.99 per endpoint annually
- Enterprise plan pricing is not displayed with its listed features
- The offering is centered on endpoint and identity security rather than broad IT use
SentinelOne Singularity Identity Detection & Response fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update