SentinelOne Purple AI

Purple AI is SentinelOne's generative AI security analyst that transforms how security teams investigate and respond to threats. Analysts can describe what they're looking for in plain English, and Purple AI translates those queries into the appropriate searches across the Singularity platform's data lake. The AI can summarize complex alerts, correlate related events across endpoints, cloud workloads, and identity systems, and recommend response actions. It provides step-by-step investigation notebooks that document the analysis process, making it easy to train junior analysts and maintain audit trails. Purple AI leverages SentinelOne's telemetry from millions of endpoints combined with open-source threat intelligence. It excels at explaining what happened during an incident in plain language, identifying root causes, and suggesting hardening measures to prevent recurrence.