Sold by: SentinelOne
Deployed on AWS
Unlock enterprise-wide security for your AWS environment with SentinelOne Singularity Platform. This AI-powered solution provides real-time threat detection and automated response across your infrastructure, ensuring continuous protection at infinite scale. By autonomously securing endpoints, cloud workloads, and identity, SentinelOne delivers total visibility while eliminating security silos. Integrate seamlessly with AWS and leverage our unified data lake and Purple AI to accelerate investigations and gain deeper insights. Secure your AWS cloud and focus on innovation with the speed and efficiency of AI.
4.6
Overview
The SentinelOne Singularity Platform is the industry's first AI-powered security solution for the modern enterprise, offering a unified defense across your entire infrastructure from endpoints and cloud workloads to identity. As cloud adoption accelerates, traditional, siloed security tools create complexity and leave gaps in protection. Our platform consolidates multiple security capabilities into a single, intelligent solution, providing AWS customers with real-time visibility and autonomous protection to simplify security operations and reduce risk.
Core Capabilities & Benefits
Autonomous Protection: Singularity Platform is designed for customers seeking enterprise-wide protection, detection, and response capabilities, augmented by the intelligence and speed of advanced AI and automation. SentinelOne's Singularity Platform protects thousands of customer environments, including Amazon cloud workloads, across the globe.
Unified Visibility: Break down data silos and security tool sprawl. Using patented Storyline™ technology, the platform automatically correlates and contextually groups related events into a single attack story, providing a consolidated view for faster investigation and response within our unified data lake.
Extended Detection & Response (XDR): Gain a complete, correlated view of the full attack story across endpoints, identities, and cloud workloads. Our XDR solution provides the context needed to understand and respond to threats at machine speed.
Cloud Workload Protection Platform (CWPP): Secure your AWS compute resources from runtime threats. Our Singularity Cloud Workload Security delivers real-time, AI-powered threat detection and response for Amazon EC2 instances, EKS clusters, and AWS Fargate. It provides deep visibility into vulnerabilities and configuration risk while autonomously blocking malware, ransomware, and fileless attacks without disrupting production performance.
Identity Threat Detection & Response (ITDR): Proactively defend against credential theft, privilege escalation, and lateral movement attacks across hybrid environments. Our solution provides continuous monitoring and protection for Active Directory and leading cloud identity providers, including Entra ID, Okta, Ping, SecureAuth, and Duo, ensuring identity infrastructure remains secure.
Accelerated Incident Response with Generative AI: Purple AI, our generative AI security analyst, acts as a force multiplier for your security team. It automates threat hunting, provides instant summaries of complex incidents, and accelerates investigations, allowing your team to focus on strategic initiatives.
Seamless Integration with AWS Services
The SentinelOne Singularity Platform is designed for seamless integration into your existing AWS environment. We provide bidirectional integrations for AWS Security Hub and Amazon CloudWatch, ensuring your security findings are centralized and actionable. Additionally, our AI-powered malware scanning for Amazon S3 protects sensitive data while maintaining compliance, helping you maximize your AWS investment and enhance your overall security posture.
How to Get Started
Secure your AWS cloud and focus on innovation with the SentinelOne Singularity Platform. Simply click on the Request private offer button at the top of this page to begin your procurement process.
Highlights
- 338% three-year ROI for SentinelOne customers using Purple AI, included with SentinelOne Singularity Platform Complete
- 96% of Gartner Peer Insights™ EDR reviewers recommend SentinelOne Singularity
- 5-Consecutive Year Gartner® Magic Quadrant™ Leader for Endpoint Protection Platforms
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Custom Pricing and Packaging | Contact SentinelOne for custom pricing and packaging including Private Offers | $10,000.00 |
Dimensions summary
This listing offers one pricing option: custom pricing and packaging. You contact SentinelOne to build a quote that fits your needs, including Private Offers negotiated through AWS Marketplace. There are no fixed tiers or set unit prices published here. Instead, the vendor tailors the scope, capabilities, and terms to your environment. Pricing scales based on what you agree to during that conversation. Use this path when you want a package matched to your specific security requirements rather than a standard, off-the-shelf rate.
Top-of-mind questions for buyers
A unit maps to the scope you negotiate with SentinelOne. The platform protects endpoints, cloud workloads, and identities through a single agent and console. Each device or workload the agent runs on counts toward your agreed quantity. The exact units are defined during your custom pricing conversation.
You are already on the platform once you start. Expanding coverage means activating capabilities across endpoint, cloud, identity, and AI security, not deploying new infrastructure. Because pricing is custom and packaged to your needs, any added scope is negotiated with SentinelOne and reflected in your agreed terms.
Packages can combine endpoint protection, cloud workload protection, identity threat detection, AI security, managed services, data retention, network discovery, and forensic data collection. You and SentinelOne decide which capabilities and terms fit your environment. Private Offers let you negotiate scope and pricing directly through AWS Marketplace.
sentinelone.com+1
Helpful?
Vendor refund policy
Refunds available as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Multiple support options available. Email support available: support@sentinelone.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By SentinelOne
By Trellix
By Vectra AI
Top
10
In Generative AI, Security Observability
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Autonomous Threat Detection and Response
AI-powered real-time threat detection and automated response across endpoints, cloud workloads, and identity infrastructure with autonomous blocking of malware, ransomware, and fileless attacks.
Extended Detection and Response (XDR)
Correlated view of full attack stories across endpoints, identities, and cloud workloads using patented Storyline technology that contextually groups related events into unified attack narratives.
Cloud Workload Protection Platform (CWPP)
Runtime threat protection for Amazon EC2 instances, EKS clusters, and AWS Fargate with deep visibility into vulnerabilities, configuration risks, and autonomous threat blocking without production disruption.
Identity Threat Detection and Response (ITDR)
Continuous monitoring and protection against credential theft, privilege escalation, and lateral movement attacks across Active Directory and cloud identity providers including Entra ID, Okta, Ping, SecureAuth, and Duo.
Generative AI-Powered Incident Analysis
Purple AI generative AI security analyst that automates threat hunting, provides incident summaries, and accelerates investigations through machine-speed analysis of complex security events.
Multi-Source Threat Data Integration
Correlates and ingests security data from Trellix Security Platform and over 500 third-party tools including 13 AWS integrations to create unified threat visibility across the security stack.
AI-Driven Detection and Alert Triage
Applies artificial intelligence-driven analytics and automated alert triage to prioritize threats and provide GenAI-powered insights for threat investigation and remediation guidance.
No-Code Automation for Investigation and Response
Provides UI-driven, point-and-click automation capabilities to offload repetitive security operations tasks and accelerate investigation and response workflows.
Pre-Built Analytics and Correlation Rules
Utilizes pre-built analytics and correlation rules to rapidly correlate multi-vector threat detections and reconstruct complete attack narratives from ingested security events.
Hybrid and Air-Gapped Deployment Support
Supports deployment across cloud, hybrid, and air-gapped environments with flexible integration architecture for diverse infrastructure configurations.
Unified Observability
Continuously monitor assets, human and non-human identities, AI agents, cloud workloads, and unmanaged devices across on-premises, cloud, SaaS, and connected enterprise environments to identify attack exposure and risky access paths.
Behavioral Detection and Correlation
Detect and correlate attacker behavior across network, identity, cloud, and SaaS using behavioral AI, automatically triaging and prioritizing activity including credential abuse, privilege escalation, command and control, and lateral movement.
Attack Signal Intelligence
Automatically correlate and prioritize detected activity with contextual attack narratives and attack progression analysis to provide analysts with clear visibility of real attacker behavior and high-confidence signals.
AI-Assisted Investigation Workflows
Conduct investigations and threat hunting with AI-assisted or agentic workflows that provide correlated context and recommended actions to accelerate analyst understanding of attack incidents.
Coordinated Response and Containment
Execute native and integrated response workflows to contain compromised accounts, isolate hosts, and block malicious traffic while maintaining operator control over containment actions.
Standard contract
No
No
No
Customer reviews
Vivek P.
Powerful EDR/XDR Solution with Excellent Visibility and Automated Response
Reviewed on Nov 07, 2026
Review provided by G2
What do you like best about the product?
SentinelOne covers all of our endpoints. SentinelOne Singularity Endpoint provides excellent endpoint visibility, detection, and response capabilities through a modern and intuitive interface. The platform is lightweight, has minimal impact on endpoint performance, and offers strong behavioral AI-driven threat detection that helps identify both known and unknown threats. Integration with SIEM and security tools is straightforward, making investigation and response workflows more efficient. The automated remediation and rollback capabilities significantly reduce analyst effort and improve incident response times.
What do you dislike about the product?
While the platform is powerful, some advanced features have a learning curve for new analysts. Certain investigations may require deeper knowledge of the console and query capabilities. Pricing can also be higher than some competing solutions, although the overall security value and operational savings justify the investment.
What problems is the product solving and how is that benefiting you?
SentinelOne helps us proactively detect, investigate, and respond to endpoint threats across our environment. Its AI-powered detection, automated response actions, and detailed threat intelligence reduce manual effort for SOC analysts while improving security posture. The platform has helped minimize alert fatigue, accelerate incident triage, and improve overall visibility into endpoint activity, resulting in faster threat containment and better operational efficiency.
Food & Beverages
Solid, Flexible SentinelOne Deployment for MSPs with Strong Detection and Visibility
Reviewed on Nov 05, 2026
Review provided by G2
What do you like best about the product?
We’ve deployed SentinelOne across multiple MSP clients, and overall, it’s been a solid solution. Easy to deploy and flexible enough to tune policies based on customer needs especially around rule tuning and exclusions.
The license we leverage and provide have full Device Control, Network Control, and Deep Visibility for detailed log analysis. From a performance and detection standpoint, SentinelOne scores well on independent benchmarks like Gartner and MITRE ATT&CK.
We’ve been using it for over 5 years without any major issues. Our clients are satisfied, and our security engineers are fully comfortable working with it. No strong reason so far to look elsewhere.
The license we leverage and provide have full Device Control, Network Control, and Deep Visibility for detailed log analysis. From a performance and detection standpoint, SentinelOne scores well on independent benchmarks like Gartner and MITRE ATT&CK.
We’ve been using it for over 5 years without any major issues. Our clients are satisfied, and our security engineers are fully comfortable working with it. No strong reason so far to look elsewhere.
What do you dislike about the product?
For now, it has been pretty good. I could not think straight on top of my head what one feature could be added. But for now, the features that SentinelOne Singularity Endpoint offers are pretty great. However, I wish there could be patching that could be happening through the EDR so that we would not need to manage any other separate tool for patching those vulnerabilities since it actively identifies vulnerabilities. Maybe that feature could be helpful. I am not sure whether the single agent can uplift the bulk activity or not. That is one thing I wish I could add in SentinelOne Singularity Endpoint. We need to set the guardrails for the Prompt AI because it actually queries the logs directly for whenever we want to search in the endpoint logs. Whenever we give a prompt to actively look for something, it actively queries directly inside the logs and returns the output directly instead of just giving a suggestion to go this way or do that way. It actively interacts with the application inside itself and provides results directly without showing the backend process. I am not sure about how the guardrails were set, but setting the guardrails for the AI needs to be taken care of. Since it has pretty much direct access to the endpoints and there are agent capabilities through SentinelOne Singularity Endpoint, we have to take care while handling or implementing AI.
What problems is the product solving and how is that benefiting you?
Eliminates a lack of insight into actual endpoint security statuses, unmanaged devices, and hidden lateral movements. Moves past traditional, slow signature-based detection that fails against zero-day exploits, fileless malware, and unknown threats
Illia T.
User-Friendly UI with a Smooth Path from EPP to SOC AI and CSPM
Reviewed on Nov 05, 2026
Review provided by G2
What do you like best about the product?
You can start with EPP and slowly progress from the basics to more advanced features such as SOC AI and CSPM. The UI is quite user friendly, it is hard to get lost, comparing with some competitors
What do you dislike about the product?
No real disadvantages, more like a specificity of the EPP/EDR solutions - some clients don't understand the difference between EDRs and typical antiviruses and expecting to get a signature based scanning
What problems is the product solving and how is that benefiting you?
Behavioral endpoint analysis, combined with possibility to crosscorrelate logs from other sources, as well as automatic Vulnerability Management and application inventory, are doing magic
Sandesh K.
Reliable Endpoint protection with powerful Threat Detection and Automated Response
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I like its ability to detect and respond to threats in real time with minimal manual intervention. I also like its automated threat response capabilities, which help reduce the time spent on manual analysis and allow the security teams to focus on other important tasks.
What do you dislike about the product?
One thing I dislike about SentinelOne Singularity Endpoint is that some features and settings can take time to understand, especially for new users. The dashboard could be a little more intuitive, and sometimes investigating alerts requires going through multiple details. Improving the reporting and making certain configurations simpler would make the overall experience even better.
What problems is the product solving and how is that benefiting you?
It helps us address endpoint security challenges by detecting and preventing malware, ransomware, and suspicious activities across our systems. Its automated threat detection and response capabilities help us identify potential threats quickly and reduce the need for manual intervention. It also helps us to save time and focus on other important security tasks.
Fanindra D.
Peace of Mind with Real-Time Threat Detection and Effortless Endpoint Management
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I really appreciate the strong real-time threat detection capabilities, which provide peace of mind. The AI-driven automation is incredibly efficient at blocking threats autonomously. Additionally, the platform is very easy to manage across all endpoints, making security operations much smoother.
What do you dislike about the product?
Sometimes the initial setup and fine-tuning of policies can feel a bit complex and time-consuming. Also, during deep system scans, there can be a noticeable impact on system resources, which may slightly slow down older machines.
What problems is the product solving and how is that benefiting you?
SentinelOne addresses the issue of delayed threat detection by delivering real-time, autonomous protection, so threats are neutralized before they can cause widespread damage. Its automated remediation capabilities have significantly reduced the manual workload for our IT team. It has also helped us consolidate our security stack into a single agent, which gives us better visibility across all endpoints and ultimately saves us time and resources.