SentinelOne protects endpoints, cloud workloads, identities and data for organisations that want one security platform rather than separate point tools. It also protects the AI that businesses now rely on, from employee use of generative AI to the agents and identities acting inside the network.
Everything runs on the Singularity Platform. For identity teams, the focus is stopping attackers who use stolen or abused credentials against Active Directory and cloud identity providers.
At A Glance
| Vendor | SentinelOne (NYSE: S) |
|---|---|
| Category | Identity threat detection and response, endpoint, cloud and AI security |
| Identities covered | Directory and cloud IdP identities, human and non-human AI identities |
| Deployment | SaaS, on-premises, hybrid and air-gapped |
| Founded | 2013 |
| Market classification | Identity Threat Detection & Response |
What SentinelOne Does
Attackers increasingly log in with stolen credentials rather than break in, so identity has become a front line alongside the endpoint. Singularity Identity concentrates on detecting and responding to those threats across Active Directory and cloud identity providers. A single agent and console give real-time defence and end-to-end visibility for every identity, and identity and endpoint telemetry sit on one data foundation instead of being stitched together through integrations.
The same approach now extends to AI. The underlying view is that a non-human AI identity needs continuous validation of its intent through behaviour, not only a check at login. Singularity Identity supplies context about who or what is acting, Prompt Security surfaces misuse inside browsers and AI tools, and the endpoint agent checks whether behaviour on a system matches what that identity should be doing.
Products
Singularity Identity
Security teams responsible for Active Directory and identity providers such as Entra ID or Okta use Singularity Identity to catch attacks that abuse accounts and credentials.
- Identity threat detection and response that contains identity-based threats autonomously
- Deception that plants decoy credentials to expose reconnaissance early
- Posture management that finds and prioritises misconfigurations and exposures
- Policy-based conditional access with session blocking and MFA reauthentication
- Detection of stolen or compromised credentials exposed on the dark web
Prompt Security
Prompt Security addresses the risks of generative AI in the enterprise. It shows which AI tools employees use, including unapproved ones, and applies policy controls and defences against threats such as prompt injection across major LLM providers and self-hosted models. Protection runs in real time across browsers, desktop applications and APIs, and its MCP gateway secures traffic between AI applications and more than 13,000 known MCP servers.
How It Works
| Component | What it does |
|---|---|
| Agent and console | One agent and one console cover identity defence for both Active Directory and cloud identity providers. |
| Shared data foundation | Identity and endpoint telemetry land in the same data foundation, so detections can draw on both. The endpoint agent, Singularity Endpoint, is the same one that protects devices, which is how system-level behaviour reaches identity detections. |
| Detection engine | Autonomous Security Intelligence (ASI), the AI-native detection and response engine, drives detection and triggers automated response workflows across identity and endpoint. |
| Deployment | The platform can run as SaaS, on-premises, hybrid or fully air-gapped. |
Identities And Systems Covered
| Directories | Microsoft Active Directory. |
|---|---|
| Cloud identity providers | Microsoft Entra ID, Okta, Ping, SecureAuth and Duo. |
| Credentials | Compromised credentials found on the dark web, plus decoy credentials used for deception. |
| AI identities | Non-human AI identities, through the combined Singularity Identity, Prompt Security and Singularity Endpoint architecture. |
Company Background
| Founded | 2013. |
|---|---|
| Headquarters | Mountain View, California, United States. |
| Ownership | Publicly traded on the New York Stock Exchange since 2021. |
| Leadership | Tomer Weingarten (Chief Executive Officer, Co-Founder), Barry Padgett (President and Chief Operating Officer), Ana Pinczuk (President of Product and Technology), Sonalee Parekh (Chief Financial Officer), Chris Corde (Chief Product Officer). |
| Acquisitions | Prompt Security, announced on 5 August 2025. |
| Customers | Four of the Fortune 10 are reported customers. |
| Recognition | Included in the Gartner Magic Quadrant for Endpoint Protection Platforms (2026), the 2026 SC Awards for endpoint security, and the Software Analyst Cyber Research Majestic Technoscope. |
Note: This overview is compiled from SentinelOne’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.