SentinelOne Singularity Threat Intelligence
Threat intelligence software
System security software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if SentinelOne Singularity Threat Intelligence and its alternatives fit your requirements.
Contact the product provider
Free Trial unavailableFree version unavailable
Small
Medium
Large
- Energy and utilities
- Information technology and software
- Healthcare and life sciences
What is SentinelOne Singularity Threat Intelligence
SentinelOne Singularity Threat Intelligence is a threat intelligence capability within the SentinelOne Singularity security platform that helps security teams collect, analyze, and operationalize threat data for detection, investigation, and response. It is used by SOC analysts and incident responders to enrich alerts, track adversary activity, and prioritize remediation based on observed indicators and context. The product emphasizes integration with endpoint and cloud security telemetry from the broader Singularity platform, enabling intelligence to be applied directly to security operations workflows.
Native security telemetry enrichment
The product can apply threat intelligence directly to security events and endpoint activity within the Singularity platform. This reduces manual pivoting between separate intelligence portals and security tools. It supports faster triage by attaching context (e.g., indicators and related threat details) to detections and investigations.
Operational workflow alignment
The product is designed to be used in day-to-day SOC workflows such as alert investigation, incident response, and threat hunting. Intelligence is positioned to support actions like scoping, containment decisions, and prioritization. This operational focus can be more immediately actionable than intelligence tools centered primarily on external monitoring and reporting.
Platform integration for response
Because it sits within a broader security platform, intelligence can be used alongside detection and response capabilities rather than remaining a standalone feed repository. This can simplify deployment and administration for organizations already using the vendor’s security stack. It also supports consistent policy and access control across related security functions.
Best fit within ecosystem
Organizations not using the broader Singularity platform may realize fewer benefits from the tight coupling between intelligence and security telemetry. Integrations outside the vendor ecosystem may require additional configuration or may not provide the same level of context and automation. This can make it less attractive as a standalone intelligence hub for heterogeneous environments.
Less emphasis on digital risk
Compared with products focused on external digital risk protection, the product is less oriented toward brand protection, social media monitoring, and broad surface-web/deep-web exposure management. Teams primarily seeking external threat monitoring and takedown workflows may need complementary tooling. The core value skews toward operational security intelligence for detection and response.
Data coverage depends on sources
The usefulness of intelligence depends on the breadth and quality of included sources, feeds, and telemetry available to the customer. If an organization requires niche regional, industry-specific, or highly specialized intelligence sources, additional third-party feeds or services may be necessary. Validation of source coverage and update frequency is typically required during evaluation.
Plan & Pricing
| Plan | Price | Key features & notes |
|---|---|---|
| Singularity Threat Intelligence (product/add-on) | Not published — contact sales / get a demo | Official product page provides feature details and resources (solution brief, data sheets) but does not list public pricing; offers "Get a Demo" / "Contact Us" pathways. Powered by Mandiant threat intelligence. (Pricing not publicly listed on product page). |
Additional context — Singularity platform package pricing (official "Pricing & Packages" page) — listed here because Threat Intelligence is a Singularity product that integrates with the Singularity platform; these package prices are published on the vendor site but do not explicitly state they include or exclude Threat Intelligence:
| Singularity Package | Published Price (annual, per endpoint) | Notes |
|---|---|---|
| Core | $69.99 per endpoint (annual) | Cloud-native NGAV — listed on SentinelOne Pricing & Packages page. |
| Control | $79.99 per endpoint (annual) | Security + Suite Features. |
| Complete | $179.99 per endpoint (annual) | "Essential AI Security" (platform page shows $179.99). |
| Commercial | $229.99 per endpoint (annual) | "Foundational AI Security" (platform page shows $229.99). |
| Enterprise | Contact Sales for Pricing | Enterprise-level features — page shows "Call for Pricing". |
Notes: All prices shown on the Platform Packages page are labelled as annual per-endpoint and accompanied by statements that final pricing is agreed via authorized partners and may vary by region/partner.
Seller details
SentinelOne, Inc.
Mountain View, CA, USA
2013
Public
https://www.sentinelone.com/
https://x.com/SentinelOne
https://www.linkedin.com/company/sentinelone/
