In short: SentinelOne Singularity Vulnerability Management scans Windows, macOS and Linux endpoints for operating system and application vulnerabilities using the existing SentinelOne agent, with no separate scanner. Findings are prioritised with EPSS, the CISA Known Exploited Vulnerabilities list and business criticality, combined into a SentinelOne Risk Score. It is a per-endpoint add-on.
What Singularity Vulnerability Management is
Unpatched software is still one of the most common ways attackers get in. Singularity Vulnerability Management uses the SentinelOne agent already on each device to assess its operating system and installed applications for known vulnerabilities, so you can see where the risk is without deploying and maintaining a separate scanner.
It is switched on by a policy setting in the Singularity console. Scans can run automatically or on demand across Windows, macOS and Linux endpoints that SentinelOne protects.
How findings are prioritised
A long list of CVEs is not much use on its own. SentinelOne ranks findings using more than the CVSS severity score:
| Signal | Why it matters |
|---|---|
| EPSS score | The estimated likelihood a vulnerability will be exploited |
| CISA Known Exploited Vulnerabilities list | Whether attackers are already using it |
| Business criticality | How important the affected device is to you |
| SentinelOne Risk Score | A single remediation priority combining these signals |
That lets a small team fix the handful of issues most likely to be used against them first, rather than chasing every medium-rated finding.
What it covers and what it does not
- Covers: managed Windows, macOS and Linux endpoints running the SentinelOne agent, for OS and application vulnerabilities
- Unmanaged devices: these are found by Network Discovery, which can also deploy an agent to bring them into scope
- Patching: Vulnerability Management tells you what to fix and in what order; deploying patches is done with your patch management or device management tooling
- External testing: it does not replace an external vulnerability scan or a penetration test, which test your systems from the outside
Compare other options in vulnerability management and penetration testing.
How Vulnerability Management is licensed
Singularity Vulnerability Management is an add-on licensed per endpoint, on top of Singularity Control or Singularity Complete. We can supply it month to month or on an annual commitment billed monthly. Pricing depends on endpoint numbers and term, so ask us for a quote.
If you already pay for a standalone vulnerability scanner, we can compare the two honestly, including what each covers that the other does not.
Who it suits
- organisations working towards Cyber Essentials, whose security update management control requires high-risk and critical updates within 14 days
- IT teams who want vulnerability data in the same console as their endpoint alerts
- businesses that need evidence of patching for insurers or customers
See the Cyber Essentials requirements for how update management is assessed.
How we help
- Turn it on safely: we enable scanning by policy, starting with a pilot group, and set scan scope and frequency.
- Make the list manageable: we translate the first results into a short, ranked fix list instead of hundreds of CVEs.
- Line it up with patching: we match findings to your patch or device management tool so fixes actually get deployed.
- Report monthly: we review new findings with you and keep evidence of progress for insurers or Cyber Essentials.
We can also review findings with you each month and agree what gets patched first.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does SentinelOne Vulnerability Management need a scanner?
No. It uses the SentinelOne agent already on each device and is enabled by a policy setting, with no scanner appliance or extra agent.
Does SentinelOne patch vulnerabilities?
Singularity Vulnerability Management identifies and prioritises vulnerabilities. Patches are deployed with your patch or device management tools.
How does SentinelOne prioritise vulnerabilities?
It uses EPSS scores, the CISA Known Exploited Vulnerabilities list and business criticality, combined into a SentinelOne Risk Score, rather than relying on CVSS alone.
Will it help with Cyber Essentials?
It helps you find missing security updates on managed devices, which supports the update management control. Certification still needs the other controls and an assessment.