SentinelOne
AI-powered XDR with Purple AI security analyst.
About
SentinelOne's Singularity platform unifies endpoint, cloud, identity, and data lake security under one AI-driven architecture. It was named a Leader in the 2025 IDC MarketScape for XDR and the 2025 Gartner Magic Quadrant for Endpoint Protection Platforms, with behavioral AI used for autonomous prevention, detection, and response.
Purple AI is the platform's generative AI security analyst, turning natural language questions into threat-hunting workflows with OCSF-normalized telemetry. The company has extended into GenAI security with its Prompt Security acquisition and ships AI-powered EDR through AWS Security Hub Extended for pay-as-you-go procurement inside existing AWS commitments.
What it can do
- Purple AI natural-language threat hunting
- Autonomous prevention, detection, and response
- Storyline attack visualization
- Singularity Data Lake for unified telemetry
- AI EDR via AWS Security Hub Extended
Setup
Install the Singularity agent on endpoints or enable the AWS Security Hub Extended listing; configure Purple AI in the console.
Prerequisites
Endpoints or cloud workloads to protect and an admin console account.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 119; Trending score 80/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.