|
At its OneCon customer conference in Las Vegas, SentinelOne unveiled Singularity ASOC (Autonomous Security Operations Center), an integrated suite the company says ties real-time data ingestion, agentic investigation and automated response into one governed loop. The stack runs on Purple Security Superintelligence and the Singularity Platform, with analysts setting the limits on what automation can do.
In the release, SentinelOne said detection engineering remains highly manual, alert volumes outrun staffing, investigation queues thin coverage on nights and weekends, and siloed SIEM and SOAR stacks starve AI of connected data. Singularity ASOC packages Agentic Investigation, Hyperautomation, AI Data Pipelines, AI SIEM with incident and case management, and threat-intelligence and IOC management as one offering. Wayfinder MDR, threat hunting and incident response sit alongside for teams that want people next to Purple.
 Purple is already doing this work for customers, the company said. Since launch, Purple Agentic Investigation has completed more than 400,000 investigations of critical alerts and saved customers an estimated 332,000 analyst hours. AI Data Pipelines ship with more than 50 out-of-the-box connectors spanning cloud, identity, email, network, SaaS, data platforms and vulnerability management, including sources from AWS, Google Cloud, Microsoft, Okta, Cisco, Proofpoint, Netskope, Snowflake, Atlassian, Oracle and Tenable, plus third-party security tools such as Microsoft Defender XDR, Palo Alto Networks Prisma, Wiz, Darktrace, Sophos Central and Check Point. Syslog and Kafka are supported today; OpenTelemetry and generic API collection are listed as on the way.
Credits, quotes and human limits
Singularity ASOC draws down Singularity Credits, SentinelOne's unified currency for AI-powered work on the platform. Administrators set consumption guardrails so investigations and automated actions stay inside limits the organization defines. |