SentinelOne has opened Purple AI Agentic Investigation to all customers, introducing a zero-click, autonomous capability that detects, investigates, and responds to threats within the existing Singularity Platform workflows. The company also introduced Singularity Credits, a unified currency for running AI-powered work across the platform. This launch addresses the investigation capacity constraints faced by security teams, where alerts often queue for attention and verdicts depend on analyst availability.

The new capability is designed to function as a force multiplier for analysts by autonomously initiating investigations when a threat crosses a defined threshold. Purple AI collects evidence, correlates telemetry, and builds an attack timeline, allowing analysts to begin at the verdict rather than the initial alert. The system operates on telemetry already present in the platform across endpoints, identity, cloud, and third-party security data, requiring no additional configuration or data deployment.

Key Features of Purple AI Agentic Investigation

Purple AI is built to integrate seamlessly with the Singularity Platform, offering governed autonomy with full auditability. Key features include:

• Seamless Integration: Built into the Singularity Platform, requiring zero configuration and no data leaves the environment.
• Analyst Force Multiplier: Automates investigation work to scale capacity without increasing headcount, freeing analysts for judgment and response decisions.
• Auditable Autonomy: Every verdict includes a complete evidence chain, with adjustable human-in-the-loop settings based on SOC maturity.
• Advanced Reasoning: Utilizes a multi-model approach combining Anthropic's Claude, OpenAI's GPT, and SentinelOne's proprietary "Ultraviolet" models to compress investigations.

Singularity Credits and Availability

Singularity Credits serve as the flexible currency for AI-powered work within the platform. To facilitate adoption, SentinelOne is granting customers a complimentary allotment of Credits to trial the Agentic Investigation capability. The trial is currently available in Singularity Platform consoles for new and existing customers, requiring no payment method during the period. Post-trial, Credits can be purchased through partners, direct billing, and eCommerce.

Strategic Vision for the Agentic SOC

This advancement supports SentinelOne's vision of the agentic Security Operations Center (ISOC), where frontier-AI reasoning amplifies human defenders. By operating natively on diverse telemetry sources, Purple AI aims to transform the Singularity Platform into an integrated system that autonomously detects, triages, and stops threats at machine speed.