What is Purple AI?
Purple AI is SentinelOne's agentic AI security analyst, embedded in its Singularity Platform. The vendor says it is used in security operations for alert triage, investigation, threat hunting and documentation, with natural-language questions instead of query writing.
Who it's for
SentinelOne describes it as aimed at SOC analysts, incident responders and security leaders, and says its guided investigations help junior analysts ramp up. It is deployed within the Singularity Platform, so it suits teams that use or plan to use that platform rather than those wanting a standalone tool.
Pros & cons
Strengths
- SentinelOne lists natural-language questions, AI-generated summaries, Auto-Triage that prioritizes high-risk activity, agentic investigation, and Investigation Notebooks that document work automatically.
- SentinelOne says Purple AI reasons over OCSF-normalized data from native SentinelOne telemetry and integrated third-party sources, across alerts, endpoints, cloud and identity.
- SentinelOne lists a Purple AI MCP Server that extends security data and workflows into a customer's own AI agents, and says Singularity Hyperautomation carries out responses.
- SentinelOne states that customer data is never used to train models, and that each AI verdict comes with a justification.
- SentinelOne says automated actions run only within pre-approved policies, are logged for compliance, and that human-in-the-loop authority is part of its safeguards; it also states FedRAMP High support.
- SentinelOne's June 17, 2026 announcement says new and existing Singularity customers can opt in to a trial of zero-click agentic investigations and that no payment method is required during the trial.
Limitations
- No standalone Purple AI price is published, and the Purple AI product page gives no pricing or licensing terms; it links to the Pricing and Packages page.
- SentinelOne's packages page lists Singularity Complete at $179.99 a year and Commercial at $229.99 a year per endpoint (shown for 5-100 workstations), but those are platform prices and the page does not name Purple AI in its tiers.
- SentinelOne's own pages differ on tier coverage: the Singularity Complete page lists Purple AI natural-language queries, while the packages page lists an AI Security Assistant and an Agentic AI SOC Analyst, the latter with Enterprise and with some cells marked Add On. Exactly which tier includes what could not be confirmed.
- The agentic investigation trial runs on Singularity Credits; SentinelOne does not state the trial length or the size of the allotment. After the trial, Credits are bought through partners, direct billing or eCommerce, and no Credit price is published.
- The packages page says purchases go through an authorized partner and that the partner's pricing controls if prices conflict. No refund or cancellation terms are stated on the page.
Plans and pricing
- Singularity Complete (platform): $179.99 a year per endpoint, billed annually. Platform price shown for 5-100 workstations. The packages page lists an AI Security Assistant here; the Purple AI cost is not stated.
- Singularity Commercial (platform): $229.99 a year per endpoint, billed annually. Platform price shown for 5-100 workstations. The Purple AI cost is not stated.
- Singularity Enterprise (platform): Contact sales. No public price. The Agentic AI SOC Analyst is listed in this tier's features, with some cells marked Add On.
- Agentic investigation trial: $0. Opt-in trial using a complimentary allotment of Singularity Credits for new and existing customers; length and amount not stated. Not a free plan.
Prices were read from SentinelOne's packages page (the Italian-locale URL, in English) and its June 17, 2026 press release; the English packages URL could not be fetched directly. All prices are in U.S. dollars, per endpoint, billed annually, and may exclude taxes. The cost of Purple AI itself is not published, so confirm on the live pricing page or with a SentinelOne partner.
Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗
Sources
This profile was compiled from these public pages. We have not run hands-on tests.
Purple AI — at a glance
Purple AI is SentinelOne's agentic AI security analyst, embedded in its Singularity Platform. The vendor says it is used in security operations for alert triage, investigation, threat hunting and documentation, with natural-language questions instead of query writing.
Try Purple AI →