SentinelOne Purple AI

Purple AI is an AI-powered security operations tool from SentinelOne, built for SOC and SecOps teams that need to investigate threats faster and respond at scale. It sits inside the Singularity Platform and focuses on security analytics, threat hunting, incident triage, and response workflows rather than general-purpose chat.

According to SentinelOne, it works across native and third-party security data in the platform and can translate natural-language questions into threat-hunting queries. It is positioned for enterprise security teams, especially those already using SentinelOne’s endpoint, cloud, or AI SIEM products.

Purple AI is meaningfully agentic, but not fully autonomous in the strict sense. The content emphasizes human-in-the-loop authority and secure-by-design controls, and it says the AI Verdict can serve as a trigger for automated remediation workflows. That makes it closer to a guided security analyst than a hands-off security operator.

Privacy appears to be a strong focus: SentinelOne says customer data is never used to train shared models. Pricing is not publicly available on the page, and setup details are mostly tied to the broader SentinelOne platform rather than a standalone install. It is probably not a fit if you want a general-purpose agent, a standalone SOC tool independent of SentinelOne, or a product with clearly published pricing and model details.