SentinelOne on Oct. 21, 2026, at its OneCon customer conference in Las Vegas unveiled Singularity ASOC (Autonomous Security Operations Center), an integrated suite the company says ties real-time data ingestion, agentic investigation and automated response into one governed loop. The stack runs on Purple Security Superintelligence and the Singularity Platform, with analysts setting the limits on what automation can do.
In the release, SentinelOne said detection engineering remains highly manual, alert volumes outrun staffing, investigation queues thin coverage on nights and weekends, and siloed SIEM and SOAR stacks starve AI of connected data. Singularity ASOC packages Agentic Investigation, Hyperautomation, AI Data Pipelines, AI SIEM with incident and case management, and threat-intelligence and IOC management as one offering. Wayfinder MDR, threat hunting and incident response sit alongside for teams that want people next to Purple.
Purple is already doing this work for customers, the company said. Since launch, Purple Agentic Investigation has completed more than 400,000 investigations of critical alerts and saved customers an estimated 332,000 analyst hours. AI Data Pipelines ship with more than 50 out-of-the-box connectors spanning cloud, identity, email, network, SaaS, data platforms and vulnerability management, including sources from AWS, Google Cloud, Microsoft, Okta, Cisco, Proofpoint, Netskope, Snowflake, Atlassian, Oracle and Tenable, plus third-party security tools such as Microsoft Defender XDR, Palo Alto Networks Prisma, Wiz, Darktrace, Sophos Central and Check Point. Syslog and Kafka are supported today; OpenTelemetry and generic API collection are listed as on the way.
Credits, quotes and human limits
Singularity ASOC draws down Singularity Credits, SentinelOne’s unified currency for AI-powered work on the platform. Administrators set consumption guardrails so investigations and automated actions stay inside limits the organization defines.
“The Autonomous SOC is not optional anymore. Attackers are using AI to move faster than any human-paced process can follow,” said Chris Corde, chief product officer of SentinelOne. “Singularity ASOC brings Purple Agentic Investigation, AI SIEM, Hyperautomation, AI Data Pipelines and case management together as one offering on the Singularity Platform, so security teams run detection, investigation and response at machine speed, with analysts directing the work and every automated action staying inside the limits they set.”
“Purple isn’t a general superintelligence. It’s something narrower and far more useful: faster and better than any human team at one job, detecting, investigating and stopping attacks,” said Tomer Weingarten, co-founder and CEO of SentinelOne. “In the AI era, speed is the only thing that matters, and speed without evidence just amplifies mistakes. Singularity ASOC puts Purple to work across the whole SOC, with the evidence behind every verdict and people in command of every decision it’s allowed to make.”
“Security teams can’t act on exposures they can’t see in context,” said Ray Komar, vice president of cloud and technology alliances at Tenable. “Bringing Tenable exposure data into Singularity ASOC puts vulnerability context in front of the analysts and automated workflows responding to threats, enabling teams to focus on the exposure paths attackers are most likely to exploit.”
OneCon context, not a blank sheet
The ASOC launch lands one day after Chief Customer Officer Steve Stone’s OneCon session on pairing AI hunting with named analysts. In an Investing.com write-up of that Oct. 20 talk, Stone said AI-assisted threat hunting — live since Dec. 1, 2024 — had raised the company’s ability to find malicious activity by 2,200% over the past year and that SentinelOne now issues about 28 intrusion notifications a day found only through that method. He also pointed to more than 14 million true-positive detections in the last calendar year, a 50% increase while customer environments grew closer to 16%. Those metrics describe AI-assisted hunting already in use; Singularity ASOC was announced the next day.
Other vendors are pitching autonomous SOC tooling against the same staffing pressure. WebProNews previously covered Swimlane’s agent workforce claims and the wider push toward human-machine SOC teams. SentinelOne’s Oct. 21 release keeps the fence explicit: Purple investigates and can respond inside policy, and humans set the mission, risk tolerance and authority the system never expands on its own.