SentinelOne introduces Purple AI Agentic Investigations for security operations

SentinelOne introduces new AI capabilities with Purple AI Agentic Investigations, aimed at enhancing SOC efficiency through increased automation and AI-assisted processes

  • Monday, 29th June 2026 Posted 4 hours ago in by Katy Hill

SentinelOne has announced its Purple AI Agentic Investigations and Singularity Credits as part of the Singularity Platform, with a complimentary trial available for customers. The feature is designed to provide more autonomous security operations, including “zero-click” investigations that are initiated automatically and run at machine speed to identify and respond to threats without requiring direct human initiation.

Security teams are increasingly challenged not only by detecting threats, but by the volume of alerts that require investigation across a growing attack surface. This can lead to delays in analysis and decision-making, particularly as AI-assisted threats add to operational workload. Purple AI is intended to reduce this burden by automating and continuously running parts of the investigative process.

Purple AI Agentic Investigations: Key Characteristics

  • Integration: The feature is built into the Singularity Platform and operates using existing telemetry data, requiring no additional configuration for activation.
  • Analyst support: It performs initial investigative steps to reduce manual workload, allowing analysts to focus more on threat hunting and response activities.
  • Auditability: Investigations generate auditable records and evidence trails so analysts can review and verify AI-driven outcomes and reasoning.
  • AI reasoning: The system uses multiple AI models, including proprietary models and third-party technologies, to help accelerate investigative workflows.

Singularity Credits act as a usage-based mechanism within the platform to support AI-driven functions, including Agentic Investigations. Customers receive an initial complimentary allocation during the trial period, enabling them to test the capabilities without immediate cost.

The company describes its broader direction as an “agentic SOC,” where AI systems support and augment human security teams by handling repetitive or time-sensitive investigative tasks, while maintaining human oversight in decision-making.

The Purple AI Agentic Investigations trial is available within existing Singularity consoles. Singularity Credits are used to support usage during the trial period, which runs until August 15, 2026. After the trial, customers can obtain additional Credits through partners or direct purchase options.