Vendor briefing / SentinelOne

SentinelOne MDR pricing / 2026

Wayfinder MDR (formerly Vigilance) is the add-on managed layer for the Singularity platform. Real pricing data on top-of-platform cost, total spend by Singularity tier, the $1M breach warranty, and how the add-on model affects buying decisions.

How much does SentinelOne Wayfinder MDR (formerly Vigilance) cost?

SentinelOne's managed service is priced as an add-on on top of a Singularity platform licence, not as a standalone tier. Buyer-reported add-on rates run $17 to $50 per endpoint per year depending on tier. Paired with a Singularity Complete licence at $179.99 per endpoint per year, total spend lands around $18 per endpoint per month (roughly $215 per year). SentinelOne does not publish list pricing for the new Wayfinder tiers, so these are the best available public anchors. There is no hard endpoint minimum, and Wayfinder MDR customers receive up to $1M of breach response warranty.

Managed add-on

$17-50

per endpoint / yr

Combined (Complete)

~$18

per endpoint / mo

Model

Platform + add-on

not a single SKU

Platform list prices from SentinelOne's public package page (Core $69.99, Control $79.99, Complete $179.99, Commercial $229.99 per endpoint per year; checked June 2026). Add-on figures are buyer-reported rates carried over from the Vigilance era, since Wayfinder tier list pricing is not published.

Name change: Vigilance is now Wayfinder MDR

SentinelOne folded Vigilance MDR and WatchTower threat hunting into Singularity MDR in August 2024, then rebranded the managed portfolio to Wayfinder Threat Detection and Response at OneCon in November 2025 (launched with Google Cloud). Current tiers are Wayfinder MDR Essentials, Wayfinder MDR Elite, and Incident Readiness & Response. The add-on pricing model and Singularity platform dependency are unchanged.

Add-on layer pricing

$17-50

per endpoint per year (add-on)

On top of Singularity platform licence ($70-230/endpoint/year). Combined total ~$7-23 per endpoint per month depending on tier. Volume discounts at 500+ endpoints, multi-year savings of 15-30%. Buyer-reported rates; Wayfinder list pricing is not published.

Quick facts

ServiceWayfinder MDR (ex-Vigilance)

Min. endpointsNo hard minimum

Contract1-3 year typical

SLA4-hour response

Coverage24x7x365

WarrantyUp to $1M breach

Pricing modelAdd-on per endpoint

Total cost build

Singularity platform plus the managed add-on

SentinelOne pricing makes sense once you separate the platform licence from the MDR add-on. The platform is the EDR/XDR software; Wayfinder MDR is the managed analyst service that sits on top.

Singularity tier	Platform / endpoint / yr	+ Wayfinder MDR / endpoint / yr	Combined / endpoint / mo
Singularity Core	$69.99	+$17-25	~$7.3-7.9
Singularity Control	$79.99	+$25-35	~$8.7-9.6
Singularity Complete	$179.99	+$35-45	~$17.9-18.7
Singularity Commercial	$229.99	+$40-50	~$22.5-23.3

Platform list prices from SentinelOne's public package page (Core $69.99, Complete $179.99, Commercial $229.99 per endpoint per year; checked June 2026). Add-on figures are buyer-reported rates carried over from the Vigilance era, since Wayfinder tier list pricing is not published.

Most buyers pair the managed service with Singularity Complete because Complete includes EDR, XDR, and the broader detection capabilities that the SOC analysts need to operate effectively. Pairing it with the cheaper Singularity Core misses meaningful detection signal and undermines what you're paying analysts to do.

Volume tiers

Where the meaningful discounts kick in

SentinelOne, like most enterprise MDR vendors, doesn't publish list pricing. The figures above are buyer-reported list pricing. Real deals close significantly below list at volume.

100-500 endpoints: 5-15% off list. Modest negotiating leverage at this scale.
500-2,000 endpoints: 20-30% off list. The first major break point. Push hard at end of fiscal quarter.
2,000-10,000 endpoints: 30-40% off list. Custom configurations and dedicated CSM common at this band.
10,000+ endpoints: Fully custom pricing. Discounts of 40%+ off list typical.

Multi-year compounding

A 3-year contract layered on top of volume discount stacks to 30-40% total saving versus annual list pricing at 1,000+ endpoints. Worth the lock-in only if endpoint count is stable.

What Wayfinder MDR includes

Service scope

24x7 monitoring by SentinelOne SOC analysts on your Singularity tenant.
Alert triage with investigation, false-positive filtering, and prioritisation.
Threat hunting on Singularity telemetry. Proactive intelligence-led hunting is offered as a dedicated Wayfinder service tier.
Response guidance with recommended actions and runbooks. Active containment available at higher tiers.
Dedicated threat advisors and incident-readiness specialists at the Elite tier.
Up to $1M breach warranty covering Windows, Linux, macOS, and cloud workloads.

Comparison

Wayfinder MDR vs Falcon Complete: different models, similar price

The two services land in roughly the same per-endpoint band ($18-23 monthly SentinelOne combined vs $25-45 Falcon Complete) but the buying decision is structurally different.

Dimension	SentinelOne Wayfinder MDR	Falcon Complete
Pricing model	Platform + add-on	Single bundled tier
Combined per endpoint / mo	$18-23	$25-45
Buyer flexibility	Can self-manage by dropping the add-on	Single SKU, all-or-nothing
Active response authority	Tiered (higher at Elite)	Default delegated
Best fit	Existing S1 platform users	New deployments wanting all-in-one

Fit profile

Who it suits and who should look elsewhere

Best fit: organisations already standardised on the Singularity platform, mid-market and enterprise buyers wanting to retain the ability to self-manage if needed, security teams that want to start with self-managed Singularity and add the managed layer later, and orgs that want a dedicated Wayfinder threat-hunting tier layered on top.

Poor fit: SMBs (price too high relative to Huntress and Sophos), greenfield deployments where the buyer has no platform preference (Falcon Complete simpler), and organisations that explicitly want a Concierge Security Team relationship (Arctic Wolf better).

Just the Singularity platform without the managed service?

For Singularity Core, Control, Complete, and Commercial pricing without the MDR add-on, see SentinelOne pricing on edrcost.com.

Tool

Cost calculator

Model platform + add-on.

Vendor

Falcon Complete

The most common alternative.

Compare

MDR vs EDR

Decision framework.

FAQ

SentinelOne MDR pricing questions

How much does SentinelOne MDR (Wayfinder) cost?

SentinelOne's managed service is priced as an add-on on top of the Singularity platform licence. Buyer-reported add-on rates run $17 to $50 per endpoint per year depending on tier. Combined with a Singularity Complete licence at $179.99 per endpoint per year, total spend lands at roughly $215 per endpoint per year, or about $18 per endpoint per month. Adding the managed layer effectively doubles per-endpoint cost at lower platform tiers. SentinelOne does not publish list pricing for the new Wayfinder tiers, so these figures are the best available public anchor.

Is it still called Vigilance, or has SentinelOne renamed the service?

It has been renamed twice. SentinelOne consolidated Vigilance MDR and the WatchTower threat-hunting offering into Singularity MDR in August 2024, then rebranded the managed portfolio to Wayfinder Threat Detection and Response at OneCon in November 2025 (launched with Google Cloud). The current MDR tiers are Wayfinder MDR Essentials, Wayfinder MDR Elite, and Incident Readiness & Response, with a standalone Threat Hunting service. Many buyers still search for 'Vigilance', which is why this page keeps the name; the service itself is now Wayfinder MDR.

Why does SentinelOne price MDR as an add-on?

SentinelOne's primary product is the Singularity XDR platform. Wayfinder MDR extends it with managed analysts, but the architecture assumes you've already licensed the platform. This is structurally different from CrowdStrike Falcon Complete, where the MDR layer is sold as a single bundled tier rather than as an add-on.

What's the minimum endpoint count?

There's no hard minimum, which is unusual in the MDR market. SentinelOne will sell the managed service at very small scale (50 endpoints and below) for organisations already on Singularity. In practice, the per-endpoint cost is high enough below 100 endpoints that most SMBs prefer Huntress or Sophos at that scale.

Does Wayfinder MDR include incident response and a warranty?

The Essentials tier includes alert triage, investigation guidance, and recommended response actions. Wayfinder MDR Elite adds dedicated threat advisors and incident-readiness specialists, and full forensic work runs through the Incident Readiness & Response tier or external IR partners. Wayfinder MDR customers also receive up to $1M of breach response warranty coverage across Windows, Linux, macOS, and cloud workloads.

Disclaimer

MDRCost.com is an independent pricing guide. We are not affiliated with any MDR vendor. Pricing data is compiled from public sources, partner channels, Vendr transaction data, and verified buyer reports. Always request a direct quote for your environment.