At AWS re:Invent 2025, SentinelOne announced a suite of new integrations and marketplace offerings with Amazon Web Services designed to accelerate AI-powered security outcomes. These innovations focus on unifying visibility, simplifying data pipelines, and extending agentic AI capabilities to help organizations secure their expanding cloud, endpoint, and AI attack surfaces more efficiently and effectively.
New integrations stream AWS Security Hub findings into SentinelOne's Singularity AI SIEM for unified threat correlation and response.
Bidirectional integration with new Amazon CloudWatch capabilities unifies operational and security data using the OCSF standard.
The Purple AI MCP Server is now on AWS Marketplace, allowing developers to build custom agentic AI experiences with SentinelOne context.
SentinelOne's Observo AI data pipeline is available on the AWS GenAI Marketplace, reducing data noise and costs by up to 50%.
Support for AWS IAM temporary delegation enables a one-click setup for faster integration and time-to-value.
The announcements build on deep technical alignment, with SentinelOne integrating with over 20 AWS services.
Building on a shared vision for security in the AI era, SentinelOne is expanding its integration with core AWS security services. A new integration with AWS Security Hub allows organizations to seamlessly stream prioritized security findings directly into the Singularity AI SIEM. There, they are automatically correlated with endpoint, identity, and AI telemetry, enabling automated response and accelerated investigation. Furthermore, a bidirectional integration with new Amazon CloudWatch capabilities leverages the OCSF open data standard, giving customers unified visibility and greater flexibility for enriching and storing security data across their environment.
SentinelOne is introducing support for AWS IAM temporary delegation to streamline the setup of its new AWS Security Hub integration. This one-click experience automatically configures the required IAM resources, dramatically accelerating time-to-value for AI-driven security outcomes by enabling faster, more secure data ingestion with full customer control. This focus on operational simplicity extends the agentic power of SentinelOne's platform within the AWS ecosystem.
Following recent product introductions, SentinelOne is expanding its availability in AWS Marketplace. The new Purple AI MCP Server, designed to extend the power of the agentic analyst Purple AI, is now listed. It acts as a universal translator, allowing developers and partners to build custom agentic AI experiences powered by the full context of SentinelOne's platform. Additionally, the recently acquired Observo AI data pipeline is now available on the AWS GenAI Marketplace. Observo AI uses AI/ML models to intelligently reduce data noise by up to 80% before ingestion, helping customers cut observability costs by 50% or more while resolving incidents faster.
SentinelOne's collaboration with AWS is built on deep technical alignment and a shared focus on customer outcomes. “Security data is the fuel that powers AI-driven, autonomous security. SentinelOne in collaboration with AWS has long believed that open platforms, open data standards like OCSF, and intelligent, unified data lakes are key to protecting customers’ ever growing attack surface – from endpoints to the cloud to AI,” said Ely Kahn, chief product officer at SentinelOne. Today, the AI-powered Singularity platform integrates with more than 20 AWS services, providing a clear path from visibility to velocity that reduces complexity and helps organizations securely build and scale their AI initiatives.
These new integrations and marketplace offerings provide a streamlined, powerful path for organizations to enhance their security posture as they innovate on AWS, turning shared telemetry into actionable, autonomous defense.
About SentinelOne
SentinelOne is a leading AI-powered cybersecurity platform. Built on the first unified Data Lake, SentinelOne empowers the world to run securely by creating intelligent, data-driven systems that think for themselves, stay ahead of complexity and risk, and evolve on their own. Leading organizations—including Fortune 10, Fortune 500, and Global 2000 companies, as well as prominent governments—trust SentinelOne to Secure Tomorrow™.