In short: SentinelOne Singularity Network Discovery, formerly Ranger, finds and fingerprints devices on your networks using existing SentinelOne agents, with no extra hardware or network changes. It shows unmanaged and unknown devices, lets you push agents to unprotected ones and block rogue devices. It is a per-endpoint add-on to Singularity Control or Complete.
What Network Discovery is
You cannot protect devices you do not know about. Singularity Network Discovery, previously called Ranger, is SentinelOne's network visibility add-on. It turns the SentinelOne agents already on your laptops and servers into sensors that map every IP-enabled device around them: printers, phones, cameras, IoT and OT kit, and computers that never received an agent.
It is part of the SentinelOne agent code base, so it needs no new software, no hardware appliances, no SPAN or TAP ports and no network changes.
How it works
- The platform elects a small number of agents on each subnet to do the discovery work.
- Those agents listen passively to broadcast traffic such as ARP and DHCP.
- If you allow it, they also scan actively using protocols such as ICMP, SNMP, TCP, UDP and SMB.
- SentinelOne correlates the results to fingerprint each device and builds an inventory you can view and export.
Policies are set per network or subnet: scan intervals, what may and may not be scanned, a minimum number of managed agents before scanning starts (so a laptop on a coffee-shop network does not scan it), and whether scans run automatically or need administrator approval. For sensitive OT or healthcare networks you can switch active probes off and listen passively only.
Included unmanaged-asset view versus the add-on
| Capability | Control and Complete | With Network Discovery |
|---|---|---|
| Unmanaged Assets: see devices that still need an agent | Yes | Yes |
| Full network device inventory and fingerprinting | No | Yes |
| Passive and active discovery policies per subnet | No | Yes |
| Alert on new devices without an agent | No | Yes |
| Block or isolate unknown devices | No | Yes |
| Peer-to-peer agent deployment to close gaps | No | Yes |
Blocking works by having managed Windows, macOS and Linux hosts apply local firewall rules, isolating the unknown device from them.
How Network Discovery is licensed
Network Discovery is an add-on licensed per endpoint, applied across your SentinelOne estate on top of Singularity Control or Singularity Complete. You do not license the unmanaged devices it finds. We can supply it month to month or on an annual commitment billed monthly; pricing depends on endpoint numbers and term, so ask us for a quote.
Who it suits
- organisations with sprawling or inherited networks and no reliable asset register
- schools, colleges and multi-site businesses where devices appear on the network without IT knowing
- anyone preparing for Cyber Essentials, where the scope must include all in-scope devices
- teams that want to find gaps in their SentinelOne rollout
It pairs naturally with Vulnerability Management, which assesses the managed devices for weaknesses.
How we help
- Agree what may be scanned: we set per-subnet policies with you, including passive-only listening for sensitive OT or medical networks.
- Protect people on the move: we set a minimum number of managed agents per subnet so home and public networks are left alone.
- Review the first inventory: we go through what was found, flag the devices that should have an agent and close the gaps.
- Decide on blocking: we agree when an unknown device should be isolated, and who approves it.
See also device visibility and recovery.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is SentinelOne Ranger?
Ranger, or Singularity Ranger, was the earlier name of SentinelOne's network discovery add-on. It is now called Singularity Network Discovery and does the same job: finding and controlling unmanaged devices using existing agents.
Does Network Discovery need extra hardware?
No. Discovery is built into the SentinelOne agent, so it needs no appliances, SPAN or TAP ports or network changes.
Can Network Discovery block a rogue device?
Yes. You can block an unknown device, and managed Windows, macOS and Linux hosts then isolate it using local firewall rules.
Is Network Discovery safe on OT networks?
You can disable active probes for sensitive networks so that agents only listen passively, and require administrator approval before any scan runs.