SentinelOne Purple AI
AI security analyst that investigates alerts and hunts threats autonomously in your SOC
Overview
Purple AI is SentinelOne's AI assistant designed for SOC teams. It allows asking natural language questions about security incidents and automatically translates them into threat hunting queries. Since June 2026, agentic investigation is open to all customers: the AI analyzes alerts, collects evidence and delivers an actionable verdict without manual intervention.
Purple AI relies on Singularity Credits, a common consumption unit for AI functions on the platform. It also integrates an MCP server to connect security workflows to personalized AI experiences. Designed for expert security teams, it is not intended for non-technical users.
Our verdict
Purple AI is one of the most advanced SOC AI solutions on the market in 2026, notably thanks to its free agentic investigation trial for all customers. If you already use SentinelOne Singularity, test it immediately: ROI is measurable. For an SMB without an internal SOC, SentinelOne globally remains a mid-market/enterprise solution; seek an MDR partner to operate it for you.