SentinelOne is a cybersecurity company known for autonomous endpoint protection. Its agent runs on computers and servers, uses machine learning to detect malicious behavior on the device, and can respond automatically by isolating a machine, killing a process, or rolling back changes made by ransomware. That local decision-making works even when a device is offline.
The Singularity platform extends this across the environment. It brings together endpoint detection and response with cloud workload security, identity threat detection, vulnerability management, and a data lake that collects logs from many sources for threat hunting. Purple AI is a generative assistant that lets analysts ask questions in natural language, such as whether a suspicious file appeared elsewhere, and turns them into queries, summarizes findings, and suggests next steps.
SentinelOne is sold by subscription, priced per endpoint or workload, with managed detection and response services for organizations without large security teams. Adoption involves deploying agents and tuning policies. Competitors include CrowdStrike, Microsoft Defender, Palo Alto Networks Cortex, Sophos, and Trend Micro. Buyers typically compare detection performance in independent tests, cost, and the ease of operating the product. It suits mid-sized and large organizations that want automated response.