SentinelOne Singularity Cloud Security vs Tracee
SentinelOne Singularity Cloud Security
sentinelone.comTracee
aquasecurity.github.ioSide by side
| Figure | SentinelOne Singularity Cloud Security | Tracee |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 3 | 1 |
| Spec score · Cloud Workload Protection Platforms | 7.8 (#8) | 7.4 (#13) |
| Deployment | The CSPM page describes agentless connections to AWS, Azure, and Google Cloud without infrastructure changes or agents. | Tracee is available as an executable binary, a Docker Hub container image, and a Helm chart in Aqua Security's registry. |
| Founded | 2013 | 2019 |
| Headquarters | Mountain View, California, United States | Boston, United States and Ramat Gan, Israel |
| Integrations | The Singularity Marketplace lists integrations including AWS, Splunk, ServiceNow, Microsoft, Okta, and Snyk. | Tracee supports Prometheus scraping by default, with metrics available at :3366/metrics. |
| Support | SentinelOne lists multi-channel support, a 90-day guided onboarding and deployment advisory service, technical account management, and on-demand training. | The project directs users to GitHub Discussions and Slack for community discussion and to GitHub issues for trouble reports and feedback. |
Plans
SentinelOne Singularity Cloud Security
- Singularity CommercialPrice not published
- Singularity CompletePrice not published
- Singularity EnterprisePriced on request
In their own words
SentinelOne Singularity Cloud Security
SentinelOne Singularity Cloud Security is a paid platform for protecting production workloads, cloud and AI infrastructure, and data stores. It brings together cloud posture, identity, workload, data and AI security capabilities. The platform identifies cloud misconfigurations and compliance gaps, while runtime protections detect threats in containers, virtual machines and AI workloads and help contain attacks and prevent lateral movement. Cloud Data Security scans files at ingestion for known and zero-day threats before execution; SentinelOne says the files are scanned in their existing environment without customer data leaving it. The platform correlates cloud, endpoint and identity telemetry for investigations, using Purple AI and automated workflows to help with response. CSPM resource discovery covers AWS, Azure, Google Cloud, Alibaba and Oracle Cloud, with agentless connections described for AWS, Azure and Google Cloud. It is a hybrid deployment with no free plan, and pricing is available on request. Listed platforms include Android, iOS, API and web.
Tracee
Tracee is a free, open-source runtime security and observability tool for Linux. Using eBPF, it watches system calls, network activity, and file operations in real time, then emits events for behavior patterns that may indicate threats. Events can include process lineage, file paths, and network connections. Listed uses include security monitoring, compliance monitoring, troubleshooting, and forensic investigation. Tracee is designed to operate without code changes and lists low overhead, container awareness, and adjustable policies. Deployment options are an executable binary, a Docker Hub image, or a Helm chart in Aqua Security’s registry; the quickstart covers Kubernetes installation with that chart. Prometheus scraping is enabled by default, with metrics at :3366/metrics. It supports x86 and arm64 processors and documents long-term kernel versions 5.4, 5.10, 5.15, 6.2, and 6.5, while some distribution kernels may work. Instrumentation needs elevated capabilities, with privileged or root execution described as easiest. Tracee does not run directly on macOS.