SentinelOne (NYSE: S) has made its Purple AI Agentic Investigation capability available to all customers on its Singularity Platform, according to a company press release. The tool allows security operations center teams to run automated threat investigations without manual analyst input.

The capability operates within existing Singularity Platform workflows and requires no additional configuration. When a threat crosses a defined threshold, the system investigates, renders a verdict, and can initiate a response automatically. Analysts retain visibility and control throughout the process.

"Investigation capacity has become the binding constraint of the modern SOC: detections climb, alerts queue, and verdicts wait on analyst availability," said Chris Corde, Chief Product Officer of SentinelOne. "Purple AI's Agentic Investigation capability is designed to remove that constraint by making investigations automatic, continuous, and immediate."

The tool uses a combination of Anthropic's Claude, OpenAI's GPT, and SentinelOne's proprietary Ultraviolet models. It draws on telemetry across endpoint, identity, cloud, and third-party data already present in the platform. Every automated verdict includes an auditable evidence chain, and customers can adjust the degree of autonomous action through configurable human-in-the-loop settings.

Alongside the capability launch, SentinelOne introduced Singularity Credits, a unified currency for AI-powered work across the Singularity Platform. Existing and new customers can currently trial Agentic Investigation using a complimentary allotment of Credits, with no payment method required. Following the trial period, Credits will be available for purchase through partners, direct billing, and eCommerce.

SentinelOne is headquartered in Mountain View, California.