SentinelOne Advances AI Security and Strengthens AWS Integrations at 2025 re:Invent Conference

SentinelOne has introduced a suite of major enhancements and deeper integrations with Amazon Web Services (AWS) at AWS re:Invent 2025, strengthening its AI-powered security platform for enterprises operating in the cloud and hybrid environments. The latest innovations include tighter connections between the Singularity Platform and AWS Security Hub and Amazon CloudWatch, along with the rollout of the Purple AI MCP Server and Observo AI data pipeline via the AWS Marketplace.

These advancements are designed to help organizations running on AWS unify security telemetry from cloud workloads, endpoints, identities and GenAI applications, while simplifying how security data is ingested, correlated, and acted upon.

According to SentinelOne, the new Security Hub integration streams prioritized findings directly into the Singularity AI SIEM, enabling more complete visibility and automated threat detection, investigation and response. Likewise, the expanded CloudWatch integration supports bidirectional data flows—leveraging the OCSF open standard—to improve threat correlation and operational insights across environments.

To accelerate deployment and reduce setup complexity, SentinelOne now offers one-click AWS IAM temporary delegation for connecting AWS Security Hub with its platform.

In addition, SentinelOne has made Purple AI MCP Server available on the AWS Marketplace, providing a secure interface between the Singularity Platform and any AI framework or large language model. The company has also listed its Observo AI data pipeline on the AWS GenAI Marketplace, which uses machine learning to filter noise and lower data ingestion costs.

Together, these enhancements reflect an ongoing effort to help enterprises accelerate AI-powered security outcomes, unify visibility across threat surfaces, and reduce complexity and costs when securing workloads on AWS.