SentinelOne Singularity Endpoint
SOC Analyst Intern notes blocklist functionality lacks broader IOC support
What happened
A Cyber Security / SOC Analyst Intern at a mid-market company highlights that the blocklist functionality only supports file hashes and lacks support for broader indicators of compromise (IOCs) such as IP addresses, domain names, and URLs.
Source
From the reviews
- 4.5 of 5
“One area for improvement is the blocklist functionality. Currently, it only supports blocking file hashes, whereas I would like to see support for a broader range of indicators of compromise (IOCs), such as IP addresses, domain names, and URLs.”
Elizabeth E., Cyber Security / SOC Analyst InternJul 27, 2026View
Extracted by Autobound
From the Signal API record- Signal
- Missing features
What this signalsReview themes often show where customers may look for an alternative.
- Product
- SentinelOne Singularity Endpoint
- Star rating
- 4.5 of 5
- Reviewer
- Elizabeth E.
- Reviewer details
- Cyber Security / SOC Analyst Intern
More from SentinelOne
- PatentsSentinelOne, Inc.'s patent output is accelerating: 5 grants in the past year, 1 in the past 30 days.Patents
- RedditA customer reports that three Windows servers failed to boot after the SentinelOne agent was updated to version 26.1.2.177, with the issue only resolving after uninstalling the agent.Reddit
- GlassdoorMultiple reviewers cite unclear strategy and indecisiveness impacting workGlassdoor
- PodcastsDevOps Paradox discusses SentinelOne: tech adoptionPodcasts
- 10-QCEO, CFO, and CAO adopted new Rule 10b5-1 trading plans in Q2 202610-Q
- Website changesThe website's language and internationalization options were expanded to include Chinese and Japanese translations.Website changes
More product review signals at other companies
- Product reviewsFireworks AIProject Manager expects more support and native integrations from Fireworks AIProduct reviews
- Product reviewsArmisEnterprise user notes Armis occasionally provides multiple serial numbers for CIsProduct reviews
- Product reviewsGrafana LabsSmall business users find Grafana Labs pricing too high for offered featuresProduct reviews
The full record
From the Signal API recordExtraction
- Detected
- Aug 11, 2026
- signal_type
product-reviews- signal_subtype
MissingFeatures
Use this data
Get every product review signal for SentinelOne and the companies you sell to, in the tools you already use.
Ask Claude about it
Connect Autobound to Claude, Claude Code or Cursor with MCP. Then ask: “What changed at SentinelOne this week?”
Send it to your own tools
The Signal API returns product review signals for any list of companies as JSON, for your CRM, warehouse or app.
Try it free
Sign up and spend your free credits on the companies you sell to.
Start Free1,000 free credits
The API returns more than this page shows
This page shows a preview. The full product-reviews record in the Signal API and MCP can also have these 8 fields. Some fields are empty for some signals.
Company
linkedin_urlValue in the APIindustriesValue in the APIemployee_count_lowValue in the APIemployee_count_highValue in the APIrevenueValue in the APIdescriptionValue in the API
Signal
signal_nameValue in the APIassociationValue in the API
Show the full JSONHide the full JSONThe record on this page and the API request
GET /v1/signals/f49e2c49-06d1-4e04-80ae-81ca8c1a321a returns this record as JSON. POST /v1/companies/enrich returns every signal for sentinelone.com.
{
"signal_id": "f49e2c49-06d1-4e04-80ae-81ca8c1a321a",
"signal_type": "product-reviews",
"signal_subtype": "MissingFeatures",
"detected_at": "2026-08-11T12:38:45.694+00:00",
"company": {
"name": "SentinelOne",
"domain": "sentinelone.com"
},
"data": {
"summary": "A Cyber Security / SOC Analyst Intern at a mid-market company highlights that the blocklist functionality only supports file hashes and lacks support for broader indicators of compromise (IOCs) such as IP addresses, domain names, and URLs.",
"evidence": [
{
"quote": "One area for improvement is the blocklist functionality. Currently, it only supports blocking file hashes, whereas I would like to see support for a broader range of indicators of compromise (IOCs), such as IP addresses, domain names, and URLs.",
"review_url": "https://www.g2.com/products/sentinelone-singularity-endpoint/reviews#review-13169652",
"review_date": "2026-07-27",
"star_rating": 4.5,
"reviewer_name": "Elizabeth E.",
"reviewer_title": "Cyber Security / SOC Analyst Intern"
}
],
"headline": "SOC Analyst Intern notes blocklist functionality lacks broader IOC support",
"relevance": 60,
"product_name": "SentinelOne Singularity Endpoint",
"source_page_url": "https://www.g2.com/products/sentinelone-singularity-endpoint/reviews/reviews",
"switching_intent": {
"urgency": "none",
"detected": false
},
"quantified_impact": {
"has_numbers": false
},
"decision_maker_complaint": {
"title": "Cyber Security / SOC Analyst Intern",
"is_decision_maker": false
}
}
}
curl https://signals.autobound.ai/v1/signals/f49e2c49-06d1-4e04-80ae-81ca8c1a321a \
-H "X-API-KEY: $AUTOBOUND_API_KEY"curl -X POST https://signals.autobound.ai/v1/companies/enrich \
-H "X-API-KEY: $AUTOBOUND_API_KEY" \
-H "Content-Type: application/json" \
-d '{"domain":"sentinelone.com","limit":20}'Long text fields are shortened on this page.
Looking up one signal by its id is free. Enrich costs 2 credits per signal returned; a call with no results is free.