SentinelOne is an autonomous cybersecurity platform that uses AI to provide endpoint protection, detection, and response across enterprise environments. Founded in 2013 by Tomer Weingarten and Almog Cohen and headquartered in Mountain View, California, SentinelOne delivers what it terms autonomous endpoint protection, where AI models running directly on each endpoint can detect and respond to threats without requiring cloud connectivity or human intervention. The platform's Singularity platform unifies endpoint protection (EPP), endpoint detection and response (EDR), and extended detection and response (XDR) into a single agent and console. SentinelOne's AI engine uses multiple detection mechanisms including static AI for pre-execution file analysis, behavioral AI for runtime threat detection, and machine learning models that identify malicious patterns across process trees, file operations, network activity, and registry changes. A distinguishing capability is its Storyline technology, which automatically correlates related events into structured attack narratives, providing security analysts with a complete timeline and context for each detected threat without manual investigation. The platform also features automated remediation and rollback capabilities that can reverse malicious changes, including ransomware encryption, restoring affected systems to their pre-attack state. Purple AI is SentinelOne's generative AI security analyst that enables natural language threat hunting, investigation, and response across the platform's data lake. SentinelOne supports Windows, macOS, Linux, Kubernetes, and cloud workloads. The platform integrates with a broad ecosystem of security tools through its Singularity Marketplace. Pricing is structured in tiers, with Singularity Core, Singularity Control, and Singularity Complete offering progressively more features, with enterprise pricing available on request.
sentinelone.com →