Sold by: SentinelOne
Secure endpoints, servers and cloud workloads with SentinelOne Singularity, an AI-powered platform for autonomous prevention, detection, and response. SentinelOne sets the standard for how AI and automation transform security operations, stopping novel and evolving threats at machine speed, scaling under-resourced teams, and simplifying data to outpace adversaries. This pay-as-you-go (PAYGO) listing provides a unified platform defense against the most sophisticated attacks.
4.7
Overview
SentinelOne Singularity Endpoint is a market-leading security solution that reduces complexity, improves security posture, and seamlessly integrates powerful AI to protect endpoints, servers, and cloud workloads. This PAYGO model ensures you only pay for the endpoints you protect, providing the elasticity needed for growing businesses and dynamic teams.
Powered by Autonomous Security Intelligence, the Singularity Platform gives defenders a decisive operating advantage, leveraging an advanced AI-native architecture, agentic human-level reasoning, and autonomous response capabilities to give customers the advantage.
Contain Threats in Real Time: Instantaneous defense that achieves a state of constant protection against ransomware, zero-day exploits, and fileless malware.
Eliminate Blind Spots to Reduce Risk: Seamless integration of identity, cloud, and third-party telemetry with runtime activity to expose hidden lateral movement without the limitations of traditional dashboards.
Ensure Control and Resilience Across Critical, Complex Environments: AI-driven security tailored for SaaS, on-premises, hybrid, and air-gapped environments.
Reduce MTTR for Improved Efficiency: Built-in automation that slashes investigation times from hours to seconds by providing actionable intelligence.
Key AWS Service Integrations
SentinelOne Singularity Endpoint integrates seamlessly with the AWS ecosystem to centralize management and automate responses:
AWS Security Hub: Automatically exports endpoint threat findings into a centralized dashboard for a unified view of your security posture.
Amazon CloudWatch: Streams detailed security telemetry and logs for advanced monitoring and long-term operational analysis.
AWS Systems Manager (SSM): Simplifies the deployment and management of the SentinelOne agent across your managed instances at scale.
Amazon GuardDuty: Complements network-level threat detection by providing deep, agent-based visibility into host-level behavior.
Amazon S3: Facilitates the secure storage of forensic data and historical threat telemetry for compliance and deep-dive investigations.
Achieve Operational Efficiency
Singularity Endpoint is built to minimize the manual effort required by security teams. Because the AI resides directly on the agent, it can prevent and remediate threats even when a device is offline. With the 1-Click Rollback feature, administrators can instantly revert the unauthorized changes made by ransomware, restoring files to their original state without the need for manual reimaging or data recovery from backups.
Highlights
- 5-Year Gartner Magic Quadrant Leader for Endpoint Protection Platforms
- 2026 SC Awards "Best Endpoint Security" for three consecutive years, outperforming both legacy and modern alternatives.
- Autonomous AI Protection & Rollback: Instantly detect and block ransomware, fileless malware, and zero day threats using on agent behavioral AI that can revert infected Windows devices to a clean state with a single click.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/unit |
|---|---|---|
Singularity Complete (Per Workstation) | Per month for Singularity Complete per Workstation, including Purple AI & Standard Support | $13.00 |
Singularity Complete Cloud Workload Security (Per Container Host) | Per month for Singularity Complete per Container, including Purple AI & Standard Support | $52.75 |
Singularity Complete Cloud Workload Security (Per Server) | Per month for Singularity Complete per Server, including Purple AI & Standard Support | $16.50 |
Singularity Complete Cloud Workload Security for Fargate (Per Pod or Task) | Per month for Singularity Complete per Pod/Task, including Purple AI & Standard Support | $9.90 |
Dimensions summary
You pay monthly based on what you protect. Each dimension bills per unit, so your cost scales with the number of units you run. One dimension covers workstations, priced per workstation. Three dimensions cover cloud workloads: one per container host, one per server, and one per pod or task for serverless container workloads. Pick the dimensions that match your environment and add units as you grow. Every dimension includes Purple AI and Standard Support at the same monthly per-unit structure.
Top-of-mind questions for buyers
A container host is one machine running containers. A server is one operating system instance. A pod or task is one serverless container unit on Fargate. Each running instance counts separately. The workstation dimension counts one unit per protected workstation device.
Each dimension bills independently and appears on the same invoice. Your total adds the per-workstation charge, per-container-host charge, per-server charge, and per-pod-or-task charge. The dimension with the most units usually drives your cost. You only pay for the environment types you actually run.
Each dimension includes Purple AI and Standard Support at the same monthly per-unit rate. Purple AI is an AI security assistant that helps investigate threats. The platform combines threat prevention, detection, and automated response in one agent across the units you protect.
sentinelone.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Multiple support options are available. Contact: support@sentinelone.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
SentinelOne Singularity AI SIEM revolutionizes your security operations on AWS. Eliminate the skyrocketing ingestion costs and data overloads of legacy SIEMs by utilizing Observo AI to filter data volumes. This provides a deeper, richer dataset, enabling smarter and more accurate detections, accelerated generative AI investigations, and precise responses with Singularity Hyperautomation. AI SIEM is fundamentally shifting the role of security analyst from manual, repetitive tasks to strategic defense. Empower your team to accelerate investigations and mitigate critical risks with a fast, scalable, and intelligent SIEM built for the Autonomous SOC.
Unlock enterprise-wide security for your AWS environment with SentinelOne Singularity Platform. This AI-powered solution provides real-time threat detection and automated response across your infrastructure, ensuring continuous protection at infinite scale. By autonomously securing endpoints, cloud workloads, and identity, SentinelOne delivers total visibility while eliminating security silos. Integrate seamlessly with AWS and leverage our unified data lake and Purple AI to accelerate investigations and gain deeper insights. Secure your AWS cloud and focus on innovation with the speed and efficiency of AI.
Boost your IT Security with the SentinelOne Complete AWS Bundel. Tailored EDR solutions, expert support, and training by MyDigitals. Secure your digital assets now!
Block attacks and secure your entire cloud with SentinelOne Singularity Cloud Security, an AI-powered CNAPP providing deep visibility and robust, real-time protection to defend your AWS environment from initial access to mission target. It unifies proactive exposure management, and real-time protection to safeguard your AWS infrastructure, workloads (VMs, containers), and data with AI-powered detection and automated response. Try Cloud Security for free!
Purple AI Model Context Protocol (MCP) Server provides secure, seamless integration between the Singularity Platform and any AI framework or large language model. Acting as a universal translator and intelligence hub, it empowers developers and partners to build custom agentic AI experiences powered by the full context and analytics of the SentinelOne platform. The open-source Purple AI MCP Server is available today on GitHub and will also be deployable as an EKS and through Amazon Bedrock, using Agent Core. Users will need to have an active deployment of SentinelOne console and be able to obtain the SentinelOne Singularity Console token and url to be able to deploy and use the Purple AI MCP server.
Customer reviews
Ashim C.
Easy-to-Use GUI with Efficient Tools and Flexible Policy Customization
Reviewed on Oct 29, 2026
Review provided by G2
What do you like best about the product?
The GUI is easy to use, and the tools are efficient. I also like the flexibility to customize policies, including allowing or blocking specific file types and other categories. Another plus is that permissions can be divided easily based on hierarchy.
What do you dislike about the product?
Sometimes support is delayed, and for P1 issues we sometimes need help ASAP. If an AI agent, chat agent, or KB article could at least help in the meantime, that would make a difference. Even a single email with clear communication on how much time it will take, along with an ETA, would be helpful.
What problems is the product solving and how is that benefiting you?
Protecting our machines from attacks and ensuring our clients’ data is safe. It also helps our clients feel secure when using software and email, knowing that even on bad days their data will still be protected.
Navdeep K.
Unmatched Automated Remediation and 1-Click Ransomware Rollback
Reviewed on Oct 29, 2026
Review provided by G2
What do you like best about the product?
The automated remediation and 1-click ransomware rollback are unmatched. Having the agent kill malicious processes, isolate the endpoint, and revert encrypted files on its own—even when offline—eliminates hours of manual incident triage and machine reimaging. Storyline also stitches attack events together clearly, making root-cause analysis fast and painless.
What do you dislike about the product?
Initial onboarding requires disciplined policy tuning, as benign administrative scripts and developer utilities can trigger false positives until exclusions are properly configured. Agent version upgrades across large fleets also require careful scheduling to avoid unexpected reboot prompts.
What problems is the product solving and how is that benefiting you?
It replaced our legacy antivirus with proactive, real-time behavioral protection. It drastically lowers our mean time to respond (MTTR) and stops ransomware before lateral movement occurs, giving our lean team reliable 24/7 endpoint defense without dragging down endpoint performance.
Mukesh K.
Easy Setup, Strong Threat Detection, but Resource-Heavy Scans
Reviewed on Oct 29, 2026
Review provided by G2
What do you like best about the product?
I like the detection rules and event search. The initial setup was so easy.
What do you dislike about the product?
I find that SentinelOne Singularity Endpoint uses a lot of resources during a full disk scan.
What problems is the product solving and how is that benefiting you?
I use SentinelOne Singularity Endpoint to detect threats and take action accordingly.
Manufacturing
Legacy OS Support, but High CPU and Unreliable Agent Reporting
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
Supports multiple operating system versions, including legacy. This was the only reason for us to replace our previous EDR to SentinelOne that was able to be deployed on legacy OS
What do you dislike about the product?
We're experiencing major issues with SentinelOne that includes heavy impact on endpoint performance with high CPU usage and agents that stop reporting to the management console. Support were unable to resolve these issues.
What problems is the product solving and how is that benefiting you?
The only issue that it solves for us is the ability to run EDR on legacy operating systems, primarily older versions of Windows 10 which we still have in our organization.
Information Technology and Services
User-Friendly Interface with Powerful Detection and One-Click Rollback
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
The Sentinelone interface is user-friendly. Its detection capabilities are built into the agent itself, and the one-click rollback feature is very useful.
What do you dislike about the product?
Wherever a system has a full drive and very high utilization, the agent disables itself. There are also a few false positives that require manual intervention.
What problems is the product solving and how is that benefiting you?
SentinelOne Singularity Endpoint helps us protect our endpoints from malware, ransomware, and other advanced cyber threats with real-time detection, behavioral analysis, and automated threat response. It has also reduced our overall operational workload by automating routine security tasks, cutting down on manual intervention, and making endpoint monitoring and incident investigation more straightforward. As a result, our security posture has improved, we can respond to threats faster, downtime is reduced, and our IT and security teams are able to focus on other critical tasks.