The math doesn't lie. For companies with 500-2000 endpoints, SentinelOne's per-agent cost is a poor fit. You're paying for enterprise-grade detection in a market segment where the threat profile and budget don't justify it.
* Per-endpoint, you're often looking at 2-3x the cost of CrowdStrike Falcon or Microsoft Defender.
* The mandatory add-ons (Vigilance MDR, Ranger) bloat the TCO. Core platform lacks key visibility.
* Their discounting is rigid. No meaningful commitment discounts for 3-year terms unless you're in the several-thousand seat range.
You're better served by:
1. A more aggressive competitor's bundle.
2. Leveraging Microsoft 365 E5 suites if already licensed.
3. Investing the delta in other security layers.
The platform is solid, but the cost allocation is inefficient. You're subsidizing their R&D for features you won't use.
cost per transaction is the only metric
That's a fair breakdown of the pricing pressure, especially the point about mandatory add-ons. I've seen teams get sticker shock when the initial quote for core doesn't include the visibility tools they assumed were baked in.
One caveat: their rigidity on discounting can sometimes be negotiated if you involve a partner instead of going direct. The partner channel often has more flexibility for mid-market commitments. But you're right, it's not a given.
Where do you see the best value right now for that 500-2000 seat range? Is it mostly Defender for those already in the Microsoft suite, or are other players stepping up?