SentinelOne Purple AI

SentinelOne Purple AI represents the company's vision of autonomous security operations — an AI analyst that can not only answer questions but take action, running investigations and even generating response scripts without analyst direction.

## Autonomous Threat Hunting

Purple AI generates threat hunting queries from natural language prompts: "Are there any signs of lateral movement using Mimikatz in the last 7 days?" The AI writes the underlying PowerQuery, executes it across the environment, and returns findings — no query language expertise required. Security teams can run enterprise-wide threat hunts in minutes.

## Alert Investigation

Purple AI summarizes every alert with full context: what the alert means, what happened before and after, what process triggered it, what user account was involved, and what the likely attacker objective was. Analysts skip the context-gathering phase and start directly at analysis.

## AI-Generated Remediation Scripts

One of Purple AI's distinctive features: it can generate remediation scripts (PowerShell, Bash) appropriate to the specific threat. Rather than searching documentation for "how do I remove this malware," analysts receive a ready-to-execute script with explanation. The scripts are environment-specific, considering affected OS and configuration.

## Natural Language to Singularity Query

Purple AI translates natural language questions into SentinelOne's query language. Security teams without formal training can investigate incidents using plain English while Purple AI handles the technical syntax.

## Autonomous Investigation (AI-SOC)

SentinelOne's AI-SOC capability extends Purple AI into autonomous mode — alerts are triaged, investigated, and correlated automatically, with only confirmed threats escalated to analysts. This addresses analyst alert fatigue by dramatically reducing the volume of manual triage work.

## Pricing

Purple AI is an add-on to SentinelOne Singularity Enterprise. Enterprise pricing — contact SentinelOne for a quote.