--- title: SentinelOne vs Kaspersky description: How does SentinelOne XDR stand up against Kaspersky Endpoint Security? Get all the key details you need for a true comparison image: https://blog.ithq.pro/hubfs/S1KasperskyFI.png --- London, UK | [020 3997 7979](tel:02039977979) [![ITHQ_finall_ITHQ_LOGO_COLORS -1](https://blog.ithq.pro/hs-fs/hubfs/ITHQ_finall_ITHQ_LOGO_COLORS%20-1.png?width=2085&height=676&name=ITHQ_finall_ITHQ_LOGO_COLORS%20-1.png "ITHQ_finall_ITHQ_LOGO_COLORS -1")](https://ithq.pro/) - Strategies - [SAFE | Cyber Resilience](https://ithq.pro/safe) - [HCARS | Hybrid Cloud Infrastructure](https://ithq.pro/hcars) - Our Company - [What We Do](https://ithq.pro/about-us/what-we-do) - [About Us](https://ithq.pro/about-us) - [Careers](https://ithq.pro/about-us/careers) - [Resources](https://ithq.pro/about-us/resources) - Case Studies - [Struto](https://ithq.pro/about-us/case-study-struto) - [Les Ambassadeurs](https://ithq.pro/about-us/case-study-les-ambassadeurs) - [Partners](https://ithq.pro/partners) - [Insights](https://blog.ithq.pro) - [Contact Us](https://ithq.pro/contact-us) # SentinelOne vs Kaspersky **07 April 2022 | ITHQ Tech Team** **SentinelOne and Kaspersky Endpoint Protection Platforms make many shortlists, despite Kaspersky being a controversial contender. ** Kaspersky is banned across US government due to its links with the Russian government. It has also been reported to falsify malicious hashes in open source virus databases and has been at the centre of many controversies included executives being arrested for treason. Despite all this, it continues to score well as an anti virus platform and has been responsible for identifying several new malware variants. Notably, however, the malware they've discovered has always been linked to the US and European governments, further enhancing their reputation as a Russian state actor. SentinelOne is far more balanced when it comes to malware discovery, pointing the finger of shame in all directions equally depending on the evidence.   [![Got questions about SentinelOne? Talk to an expert](https://no-cache.hubspot.com/cta/default/7543437/42e87838-611b-4860-a9f3-8d72c679b3a4.png)](https://cta-redirect.hubspot.com/cta/redirect/7543437/42e87838-611b-4860-a9f3-8d72c679b3a4)   SentinelOne also performed far better than Kaspersky in the [MITRE ATT&CK APT29 2020](https://blog.ithq.pro/sentinelone-edr-leads-in-mitre-attack-apt-29) testing and places higher right on the Gartner Magic Quadrant. However, if you're looking for an [XDR solution](https://ithq.pro/xdr-sentinelone) and these two are on your list, here's a direct comparison page to help.   ### Endpoint Protection: Key considerations - Is it easy to deploy and manage? - Is it dependent on cloud command and control for detection and response? - How effective has it been against zero-day attacks? - Do you have feature parity across Windows, Mac and Linux? - How does it perform in real world test scenarios? - What do other customers say about it? ### **Comparison of Business Benefits and Features** |   | ![kaspersky logo](https://blog.ithq.pro/hubfs/kaspersky-logo.svg) | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=127&name=Vector_PRM.jpg) | | --- | --- | --- | | **Business Benefits** | | | | **Autonomous prevention, detection, and recovery from threats in real-time.** | Partial - legacy signatures but reliant on cloud | Yes | | **Fast Recovery** | Partial | Yes - Can be automated or 1-click | | **OS freedom (Windows / Mac / Linux feature parity)** | Yes | Yes | | **Fewer alerts with more context** | No | Yes | | **AI-powered prevention, detection, response, and threat hunting.** | Yes - Cloud Threat Intelligence. | Yes | | **API integration** | Limited | Yes | | **Scalability** | Yes - scalable management console. | Yes - Support for containers and serverless workloads, especially Kubernetes dynamic workloads. | | **Higher accuracy across entire attack surface.** | No | Yes - Consistent identification of tactics and techniques in the MITRE Phase 2 evaluations. | | **Centralised Visibility** | No - Disjointed solutions. | Yes - full storyline. | | **Automation & Control** | Yes - Adaptive Anomaly Control. | Yes - Automated mitigation options via the Storyline Active Response Capability. | | **Data analytics** | Yes | No - SentinelOne does not have its own network security sources to add. | | Collection and reporting of; inventory, config and policy management of endpoint devices. | No - significant policy tuning required. | Yes | | Mobile Threat Defence | Yes | Yes | | Ease of deployment | Yes - hybrid deployment model. | Yes - Excellent timeliness and quality of customer support. | | **Features** | | | | **AI across user endpoints, containers, cloud workloads, and IoT devices.** | Yes | Yes - New IoT discovery and protection capabilities in its Ranger product. | | **Static & Behavioural AI** | Partial - limited ML | Yes | | **Exploit protection** | Partial - legacy signatures | Yes + context | | **Lateral movement** | Partial - legacy signatures and OS events | Yes + context | | **Remediation** | Manual | Automated | | **Rollback** | Yes but no VSS - proprietary method | Automated | | **Integrated threat feeds** | Yes | Yes | | **Remote shell** | No | Yes | | **Device control** | Yes - unencrypted device discovery. | Yes - Device discovery via Ranger. | | **Firewall control** | USB - no Bluetooth control | Yes | | **Bluetooth control** | Yes | Yes | | **Threat hunting** | Cloud dependent | Yes - full storyline | | **Deep visibility** | Manual | Yes | | **Event Correlation** | Manual | Yes | | **Execution Restriction** | Yes - Dynamic allowlisting database. | Yes | | **Vulnerability scanning** | Yes | Yes - Priority list of vulnerable applications. | | **Security patching** | Yes | Yes | | **Triage** | Manual | Yes - Investigate in seconds with automated correlations and Storyline. | | **Disk Encryption** | Yes | No - Missing add-on for fully featured DLP. |     [![2023_S1_CTA_Demo](https://blog.ithq.pro/hs-fs/hubfs/2023_S1_CTA_Demo.jpg?width=1000&height=200&name=2023_S1_CTA_Demo.jpg)](https://land.ithq.pro/switch-to-sentinelone-ithq) ### Industry and Peer Reviews #### Gartner Peer Insights | ![kaspersky logo](https://blog.ithq.pro/hubfs/kaspersky-logo.svg) Endpoint Security for Business | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=130&name=Vector_PRM.jpg) Endpoint Protection Platform | | --- | --- | ![SentinelOneVsKasperskyGartnerPeerInsights](https://blog.ithq.pro/hs-fs/hubfs/SentinelOneVsKasperskyGartnerPeerInsights.png?width=800&name=SentinelOneVsKasperskyGartnerPeerInsights.png) #### Gartner Magic Quadrant for Endpoint Protection Platforms May 2021 ![GMQ_21_leaders_S1](https://blog.ithq.pro/hs-fs/hubfs/SentinelOne/GMQ_21_leaders_S1.png?width=570&name=GMQ_21_leaders_S1.png)   ### Independent Testing   | ![kaspersky-logo-1](https://blog.ithq.pro/hubfs/kaspersky-logo-1.svg) | **TESTING BODY** | ![Vector_PRM](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=120&name=Vector_PRM.jpg) | | --- | --- | --- | | Scored good results in Telemetry | ![MITRE ATT&CK logo](https://blog.ithq.pro/hs-fs/hubfs/Mitre%20no%20background.png?width=114&name=Mitre%20no%20background.png) APT29 2020 | Scored record results: - Least missed detections - Most high-quality detections - Most correlated detections | | AA rating 2020 | ![NSS labs](https://blog.ithq.pro/hs-fs/hubfs/NSS%20labs.png?width=126&name=NSS%20labs.png) | Top ROI score and Recommended rating 2019 | | N/A | ![VB100virus](https://blog.ithq.pro/hs-fs/hubfs/VB100virus.png?width=128&name=VB100virus.png) | 99.8% block rate across Windows testing | | Lowest number of false positives for the last 4 consecutive years. | ![AVTest](https://blog.ithq.pro/hs-fs/hubfs/1.png?width=126&name=1.png) | 100% protection against zero-day malware attacks on Windows | | ![BestSMBEndpointWinner2021](https://blog.ithq.pro/hs-fs/hubfs/BestSMBEndpointWinner2021.png?width=104&name=BestSMBEndpointWinner2021.png) | ![SentinelOne_SE_Labs_Best_Innovator_WINNER_2021](https://blog.ithq.pro/hs-fs/hubfs/SentinelOne_SE_Labs_Best_Innovator_WINNER_2021.png?width=112&name=SentinelOne_SE_Labs_Best_Innovator_WINNER_2021.png) | In top 10 vendors Recognized for the commitment to pushing the boundaries of autonomous technology — delivering innovation at scale and speed, and shaping the endpoint market. | | Lowest overall score | ![PassMarkLogo](https://blog.ithq.pro/hs-fs/hubfs/PassMarkLogo.png?width=135&name=PassMarkLogo.png) | Performs better than several legacy AV products for the following: - Quickest boot time - Quickest install time - Smallest install size - Lowest CPU usage during scan |   [![2023_S1_Expert_session_request](https://blog.ithq.pro/hs-fs/hubfs/2023_S1_Expert_session_request.jpg?width=1000&height=200&name=2023_S1_Expert_session_request.jpg)](https://meetings.hubspot.com/andrea-efstathiou/sentinelone-expert-session-request)   ### Pricing **All prices calculated at per endpoint per month, for comparison purposes.** **Pricing is 'starting from' and based on list pricing. It can be subject to change, volume discounts etc.** *Correct at February 2021*   [**Contact us for accurate pricing based on your specific requirements**](https://ithq.pro/contact-us) | ![SentinelOne logo](https://blog.ithq.pro/hs-fs/hubfs/Vector_PRM.jpg?width=144&name=Vector_PRM.jpg)  Minimum purchase - 5 endpoints - only through ITHQ Payment can be billed monthly - only through ITHQ *To achieve these prices below, minimum purchase 100 endpoints, billed annually.* *Quote always required for accurate pricing* | | | | --- | --- | --- | | **Core** | **Control** | **Complete** | | $4.16 | $4.90 | $9.00 | | Includes full advanced EDR | All Core features plus device, firewall and bluetooth control | All Control features plus threat hunting and deep visibility |   | ![kaspersky logo](https://blog.ithq.pro/hubfs/kaspersky-logo.svg) Minimum purchase - 5 users Payment always billed annually   | | | | --- | --- | --- | | **Small Office** | **Cloud** | **Cloud Plus** | | $2.50 | $3.38 | $5.42 | | Includes anti-spam, vulnerability scanning, and patch management | All Standard features plus web controls, enhanced auditing and cloud discovery | All Advanced features plus device controls, cloud discovery blocking, and data discovery |     ![Logo-with-certs-no-background](https://blog.ithq.pro/hs-fs/hubfs/Logo-with-certs-no-background.png?width=500&height=500&name=Logo-with-certs-no-background.png "Logo-with-certs-no-background") [G-Cloud 12](https://www.digitalmarketplace.service.gov.uk/g-cloud/search?q=ITHQ)[Cyber Security Services 3](https://supplierregistration.cabinetoffice.gov.uk/dashboard/dpscategories/appointed?caid=@NT08=UFdOcVRURkpWRTA9NjJ&nav_from_list=&page=5#dps_search_results) ### Strategies - [SAFE | Cyber Resilience](https://ithq.pro/safe) - [HCARS | Hybrid Cloud Infrastructure](https://ithq.pro/hcars) ### About ITHQ - [What We Do](https://ithq.pro/about-us/what-we-do) - [About Us](https://ithq.pro/about-us) - [Partners](https://ithq.pro/partners) - [Get In Touch](https://ithq.pro/contact-us) - [Insights](https://blog.ithq.pro/) - [Resources](https://ithq.pro/about-us/resources) - [Work With Us](https://ithq.pro/about-us/careers) ### Legal - [Privacy Policy](http://resources.ithq.pro/legal/ITHQPrivacy.pdf) - [Terms of Business](http://resources.ithq.pro/legal/ITHQTerms.pdf) - [Modern Slavery Statement](http://resources.ithq.pro/legal/ITHQSlaveryStatement.pdf) Created by ITHQ All Rights Reserved