Purple AI
An agentic AI security analyst embedded in the Singularity Platform that auto-triages alerts, runs investigations and threat hunts, and recommends or executes response actions over OCSF-normalized SentinelOne and third-party telemetry.
Find alternatives to Purple AI
No published price. Sold as a package add-on: the platform-packages comparison table lists "Agentic AI SOC Analyst (New)" as "Add On" for Singularity Complete and Singularity Commercial, and included in Singularity Enterprise.
What it does
- Threat detection and response
Sources
- Pricing
-
Named as an add-on row; no dollar figure published.
- Description
-
Official documentation · 4 Sep 2026
H1 verbatim "Purple AI. The Agentic Security Analyst."; sold-within proof "Purple AI is an agentic AI security analyst embedded in the Singularity™ Platform."
- Sold within
Also from SentinelOne
-
Singularity Platform Platform
Umbrella platform that runs SentinelOne's endpoint, cloud, identity and mobile protection on one agent and console with autonomous detection, response and rollback; the modules a buyer licenses are recorded separately.
-
Prompt Security Application
Discovers and governs employee and developer use of AI services, redacts sensitive data in prompts, controls autonomous agents and MCP servers, and defends custom AI applications against prompt injection, jailbreaks and data poisoning.
-
Singularity AI SIEM Platform
A security information and event management platform that ingests and normalizes cloud, identity, endpoint and third-party telemetry, correlates signals into incidents via Purple AI, and executes containment from the investigation console.
-
Singularity AI Data Pipelines Data service
A security telemetry pipeline service that filters low-value logs, normalizes heterogeneous sources into OCSF, and enriches events before they reach a SIEM, built on technology from SentinelOne's acquisition of Observo AI.
-
Singularity Endpoint Application
AI-powered endpoint security that combines endpoint protection, detection and response, and automated remediation and rollback in a single agent across Windows, macOS, Linux and cloud workloads.
-
Singularity Cloud Security Application
Cloud-native application protection platform that defends production workloads, cloud and AI infrastructure and the data stores feeding models, detecting and responding to threats autonomously across the cloud estate.
-
Singularity Mobile Application
On-device mobile threat defense for iOS, Android and ChromeOS that stops phishing, malware and risky apps with an on-device model and needs no cloud connection to detect.
-
Singularity Identity Application
Identity-security module of the Singularity Platform that protects against credential misuse and identity-based attacks.
-
Wayfinder TDR Application
Managed AI-assisted threat detection and response (MDR-style) service delivered by SentinelOne's global services team.
Open SentinelOne in the directory
Something wrong here? Send a correction — quote this product id: sentinelone-purple-ai.