Does Singularity USB device control support read-only operation for data loss prevention (DLP)?

Yes. Policies can be crafted to permit read-only operation of mass storage USB devices.

What are some use cases to help explain why I would want Bluetooth Control?

Some use cases for Bluetooth control include: Restricting Bluetooth operation to only newer Bluetooth versions in order to reduce the attack surface contributed by older versions. Restricting Bluetooth connectivity from devices to a specified list or type of peripherals.

What is meant by network control with location awareness?

SentinelOne offers native OS firewall control for Windows, macOS, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example, a more restrictive policy might be used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to before applying the correct firewall policy.

Singularity™ Control

Empower your enterprise with best-of-breed cybersecurity and native suite features.

Get a Demo

Control Network Flows
Enable granular, location aware network flow control with native firewall control for Windows, macOS, and Linux.
Control USB & Bluetooth
Control any USB, Bluetooth, or Bluetooth Low Energy device on Windows and Mac to reduce the physical attack surfaces.
Ensure 100% Deployment
Identify unprotected, out of compliance devices automatically to ensure compliance with organizational risk management KPIs.

More Capability, All in One Agent

Augment your team with holistic suite management features and flexible options for managing the attack surface.

Network Control

Control in-and-outbound network traffic for Windows, macOS, and Linux.
Centralize and customize policy-based control with hierarchical inheritance.
Streamline policy assignment with tagging mechanisms.
Adapt swiftly with touchless location awareness that dynamically assigns network control based on a system’s physical location.

Get a Demo

Device Control

Enable granular device control for USB and Bluetooth on Windows and macOS.
Centralize and customize policy-based control with hierarchical inheritance.
Control any USB device type, and specify full read-write or read-only operation.
Control Bluetooth by protocol version and by specific Bluetooth device type.

Get a Demo

Rogue Device Discovery

Identify any rogue endpoints that are not yet protected by SentinelOne.
Gain enterprise-wide visibility with passive and active network sweeps.
Remove the uncertainty of compliance by discovering deployment gaps in your network.
Get started with no additional software, network changes, or hardware appliances.

Get a Demo

Industry Recognition

The Standard in Security Excellence

Tried and trusted by the industry's leading authorities, analysts, and associations.

A Leader. Six Years Running.

For the sixth consecutive year, SentinelOne is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection Platforms.

Read the Report

Record-Breaking ATT&CKⓇ Evaluation

SentinelOne has once again proven its industry-leading capabilities in defense in the MITRE ATT&CKⓇ Enterprise Evaluation 2024.

See the Results

The Industry's Most Awarded Cloud Security Suite

SentinelOne has been recognized as a Customers' Choice in the inaugural Gartner® Peer Insights™ 'Voice of the Customer' for Cloud-Native Application Protection Platforms.

Trusted by

Related Resources

Need Answers?

Frequently Asked Questions

Singularity Control can control any kind of USB device. Administrators can create highly granular control for any type of USB device as defined by the USB standard. Policy can be defined by vendor ID, product ID, serial number or by class of device which includes things like audio, printers, mass storage, smart cards, video devices, USB-C devices, personal healthcare devices, and more. For example, Singularity Control can only permit IronKey™ encrypted external thumb drives as well as certain audio headsets and deny everything else that is USB.

Rogues is a feature that is included with Singularity Control and Singularity Complete. Its purpose is to discover whether there are hosts on the network that do not yet have the Sentinel Agent installed. Singularity Ranger is a module that helps you control your network attack surface. Ranger offers Rogue functions and adds extensive network discovery and fingerprinting of all IP-enabled devices. Ranger can also be used to protect SentinelOne devices from non-managed network-connected devices to ensure unauthorized lateral movement by an unmanaged device is disallowed.

Singularity™ Control

Control Network Flows

Control USB & Bluetooth

Ensure 100% Deployment