Factual Product Summary
24/7/365 managed detection, response, and threat hunting service augmentative to the Singularity Platform.
Provides dedicated SOC oversight with proactive threat hunting and expert policy tuning.
Documented Capabilities & Sourced Claims
Every claim is checked against official engineering documentation or compliance reports.
24/7 continuous threat monitoring with sub-20 minute critical notification SLA
Audited Capability Specifications
Structured criteria validated against official vendor documentation for buyer comparison.
SOC operational monitoring schedule (e.g. 24/7/365).
Contractual mean time to investigate or respond to critical alerts.
Supported signal domains (Endpoint, Identity, Network, Cloud, SaaS).
Hands-on-keyboard containment and threat termination performed by provider.
Human-led hypothesis-driven threat hunting included in standard tier.
Capability to manage third-party endpoint agents already deployed.
Official Sources & References
Deployment & Specifications
- Deployment Models
- Managed Cloud Service
- Supported Platforms
- Windows, macOS, Linux
- Customer Segments
- Enterprise, Mid-Market
- Service Geography
- Global 24/7/365
- Plan Limitations & Prerequisites
- Requires SentinelOne Singularity Control or Complete sensor licenses.
Pricing Transparency
Add-on subscription per endpoint to Singularity Complete.
About the Vendor
SentinelOne offers a portfolio covering collecting and analyzing security-relevant events, assessing cloud exposure or protecting running workloads, endpoint protection and incident investigation and authentication, access policy or identity lifecycle administration. The entries in this catalog include Purple AI, Singularity Cloud Security, Singularity Complete and Singularity Identity. Purple AI focuses on ai-assisted threat hunting and security investigation. Singularity Cloud Security focuses on cloud security posture and workload protection. Singularity Complete focuses on endpoint protection and detection and response. When reviewing SentinelOne, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for source onboarding, detection content, query performance, data retention and the cost implications of event volume. Portfolio detail - Purple AI: the catalog lists AI-assisted security investigation, Event correlation, Threat hunting. - Singularity Cloud Security: the catalog lists Cloud security posture management, Cloud workload protection, Cloud entitlement analysis. - Singularity Complete: the catalog lists Storyline investigation context, Endpoint recovery controls, Device control. - Singularity Identity: the catalog lists Conditional access, Identity threat detection, Directory integration. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.