SentinelOne Launches Singularity Agentic Detection and Response to Stop Rogue and Malicious AI Agents at Machine Speed

New offering takes AI agent security from discovery and governance to runtime detection and response, so security teams can see every agent, control what it can do, and stop it the moment it goes off course

MOUNTAIN VIEW, Calif. & LAS VEGAS--(BUSINESS WIRE)--SentinelOne® (NYSE: S), the AI Security leader, today unveiled Singularity™ Agentic Detection and Response (ADR), a new offering that discovers AI agents, enforces what agents are allowed to do, monitors agent behavior in depth, and detects and stops unintended and malicious activity in real time. Bringing together visibility and governance of agent activity with SentinelOne’s signature runtime behavioral prevention, detection and response, the new offering is built directly on the Singularity Platform, giving new and existing customers a battle-tested foundation to secure AI running on endpoints, cloud workloads, and the broader enterprise. Singularity ADR is the newest addition to SentinelOne’s AI Security portfolio and a direct expansion of the company’s commitment to defend the surfaces AI runs on.

Singularity ADR is being introduced today at OneCon 2026, SentinelOne’s global customer conference, and is immediately available in early access.

Securing the Agents that Power the AI Enterprise

AI agents already hold real credentials, chain tool calls, and work independently across the modern enterprise, and with Claude Code and Cowork, Codex, as well as other tools, every employee is now an agent manager. As recent high profile events have shown, the risk AI agents now carry is as likely to come from a sanctioned agent going off course as from an attacker. SentinelOne already protects the endpoint, identity, mobile, and cloud workloads where these agents run. Singularity ADR builds on that proven defense by focusing on agentic behavior and actions in runtime.

The new Singularity ADR benefits from the capabilities of SentinelOne’s fast growing product lines, SentinelOne Prompt Security and Purple, along with the modern endpoint, cloud workload and identity security capabilities already in use by over 15,000 SentinelOne customers and partners worldwide. It governs which AI agents are allowed to run and what they can reach, and blocks known-bad actions at the moment of interaction. Anything that gets past policy is judged by the same behavioral detections the Singularity Platform already runs on those surfaces, so an agent acting outside its intent is caught and stopped like any other threat.

From Agent Governance to Runtime Protection

In March, SentinelOne bolstered its AI security portfolio with the introduction of Prompt AI Agent Security to discover AI agents and govern how they connect to tools and data. Singularity ADR builds on that foundation and takes agent security to the next level, pairing agent governance with the behavioral detection and response SentinelOne runs on endpoints, cloud workloads and identities, and ties every agent action to its origin. Security teams now get one view of what an agent was asked to do and what it actually did on the system, and they can stop a single agent mid-action without halting the rest of the workflow.

What Singularity ADR Delivers

• Agent and MCP inventory. Every agent, tool, skill, connector, and MCP server across endpoints, SaaS, and cloud providers, sanctioned or not, with the permissions each holds and the employees behind it. Security teams know exactly what agents exist before deciding what to allow.
• Multi-platform agent coverage. Goes beyond the MCP gateway into Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents. Coverage follows agents wherever the business builds them.
• Agent Traces. Every agentic event is monitored and sent to Singularity Data Lake so it can be visualized, retained, searched, and used in dashboards or detection rules.
• Unified Storyline. ADR event behavior is integrated with traditional EDR behavior in one execution graph, showing which AI components led to a process before it ran: the user request, the AI assistant, the MCP server that supplied the tool, and the file or process that followed. Analysts see the full chain in one place instead of piecing it together manually.
• Policy and execution governance. Allow and block controls for which agents run, who uses them, and what they can reach, with approval workflows for high-risk tools.
• In-line prevention. Blocks prompt injection, jailbreaks, credential exfiltration, and tool poisoning before the action executes.
• Intent drift detection. Flags the gap between what an agent was asked to do and what it did, so analysts stop reconstructing events by hand.
• Agent containment. Stops one agent mid-action while the rest of the workflow keeps running.
• Agentic Investigation and governed response. Automatically completes an investigation and executes a response within the boundaries set by customers.

“Securing AI agents goes beyond just stopping threat actors with malicious intent. As we’ve seen all too frequently, an equal if not more prominent risk comes from unintended behavior of sanctioned agents,” said Chris Corde, Chief Product Officer of SentinelOne. “By bringing to bear SentinelOne's AI-based behavioral prevention, detection and response capabilities, we can stop rogue agentic actions using the same platform our customers already use and trust to protect their core attack surfaces.”

“AI Security has to cover everything AI touches: the surfaces it runs on, the models behind it, and now the agents acting on its behalf,” said Tomer Weingarten, co-founder and CEO of SentinelOne. “Agents hold real credentials and act without waiting for anyone. Singularity ADR brings the runtime protection that already defends tens of millions of endpoints, workloads and identities to the agents doing real work inside the enterprise, so our customers can adopt AI at full speed.”

About SentinelOne

SentinelOne (NYSE: S) is the leader in AI security, setting the standard for using AI and automation to give defenders a decisive operating advantage. Built for those who secure our world, its platform delivers unified coverage across endpoints, identity, cloud, and AI. Powered by Autonomous Security Intelligence, SentinelOne stops attacks at machine speed, reducing risk and delivering clarity and control to stay one step ahead. Headquartered in Mountain View, California, with teams worldwide, SentinelOne protects nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. From Main Street to Wall Street, the world's most critical organizations trust SentinelOne with their security.

Third-Party Disclaimer

All third-party product names, logos, and brands mentioned in this publication are the property of their respective owners and are for identification purposes only. Use of these names, logos, and brands does not imply affiliation, endorsement, sponsorship, or association with the third party.

Forward-Looking Statements

This press release includes forward-looking statements. Forward-looking statements are subject to risks and uncertainties, including factors beyond our control, that could cause actual performance or results to differ materially from those expressed in or suggested by the forward-looking statements. These and other risk factors are described in the "Risk Factors" section of our most recent Annual Report on Form 10-K, subsequent quarterly reports filed on Form 10-Q, and other filings made with the U.S. Securities and Exchange Commission (SEC), which are available free of charge on our website at http://investors.SentinelOne.com and on the SEC's website at www.sec.gov.

You are cautioned not to place undue reliance on these forward-looking statements. Any future products, functionality and services may be abandoned or delayed, and as such, you should make decisions to purchase products and services based on features that are currently available.

Any forward-looking statements made in this document are based on our beliefs and assumptions that we believe to be reasonable as of the date hereof. You should not rely upon forward-looking statements as predictions of future events. Except to the extent required by law, we undertake no obligation to update these forward-looking statements to reflect new information or future events.

Category: Investors