SentinelOne Unveils Enhanced AWS Integrations and AI Innovations to Accelerate Security Outcomes at AWS re:Invent 2025
At AWS re:Invent 2025, SentinelOne® (NYSE: S) announced a series of groundbreaking innovations and integrations with Amazon Web Services (AWS) designed to accelerate customers’ AI initiatives and enhance AI-powered security outcomes. These advancements include deeper integrations between SentinelOne’s AI-native Singularity cybersecurity platform and AWS Security Hub, as well as new capabilities with Amazon CloudWatch. Additionally, SentinelOne has introduced its Purple AI MCP Server and Observo AI data pipeline to the AWS Marketplace, simplifying how organizations can access, integrate, and leverage cutting-edge AI and data solutions.
These updates empower organizations running on AWS to secure their cloud workloads, endpoints, identities, and generative AI applications with unified visibility, agentic AI, and intelligent data pipelines that reduce costs, streamline operations, and accelerate time-to-value.
Harnessing the Power of AI and Data for Modern Security
“Security data is the fuel that powers AI-driven, autonomous security,” said Ely Kahn, Chief Product Officer at SentinelOne. “In collaboration with AWS, we’ve long believed that open platforms, open data standards like OCSF, and intelligent, unified data lakes are essential to protecting customers’ ever-expanding attack surfaces—from endpoints to the cloud to AI. At re:Invent, we’re once again working together to make it easier for customers to harness security data intelligently and cost-effectively across their entire digital footprint.”
The new integrations and offerings reflect a shared vision for securing businesses in the AI era, enabling organizations to unify data, protect diverse attack surfaces, and scale their security operations efficiently.
Unified Data and Enhanced Protections Across Endpoints, Cloud, and AI
AWS Security Hub Integration with Singularity AI SIEM
AWS Security Hub provides a near real-time view of an organization’s cloud security status by prioritizing critical security issues and enabling scalable responses. Through this integration, SentinelOne allows organizations to seamlessly stream prioritized AWS Security Hub findings into its Singularity AI SIEM. This creates a unified context by correlating AWS data with telemetry from endpoints, identities, and AI applications. The result is automated response capabilities, faster investigations, and the ability to remediate modern threats at scale.
Integration with New Amazon CloudWatch Capabilities
Amazon CloudWatch reduces operational complexity by unifying operational, security, and compliance data in one place, leveraging the OCSF open data standard. With SentinelOne’s integration, customers benefit from bidirectional data flows between the Singularity Platform and Amazon CloudWatch. This enables comprehensive visibility across attack surfaces, advanced correlations to detect potential threats, and greater flexibility for enriching and storing security data. Organizations can now gain deeper insights while optimizing their data management strategies.
Accelerating AI-Driven Security with Faster Data Onboarding
To further simplify adoption, SentinelOne has introduced support for AWS IAM temporary delegation, enabling a one-click setup for the AWS Security Hub integration. This streamlined process accelerates time-to-value by automatically configuring the necessary IAM resources, allowing customers to securely ingest AWS Security Hub data and correlate it with endpoint, identity, and AI telemetry quickly—all while maintaining full control over their data.
Expanding AI Capabilities in the AWS Marketplace
Building on its recent innovations, SentinelOne is expanding its presence in the AWS Marketplace with two key offerings: the Purple AI MCP Server and Observo AI data pipeline.
Purple AI MCP Server Now Available on AWS Marketplace
Introduced at SentinelOne’s OneCon 2025 event, the Purple AI MCP Server extends the power of SentinelOne’s category-defining agentic analyst, Purple AI. Acting as a universal translator and intelligence hub, the MCP Server facilitates seamless integration between the Singularity Platform and any AI framework or large language model. By offering this solution in the AWS Marketplace, SentinelOne empowers developers and partners to build custom agentic AI experiences on AWS and beyond, leveraging the full context and analytics of SentinelOne’s platform.
Observo AI Data Pipeline Added to AWS GenAI Marketplace
Observo AI, acquired by SentinelOne earlier this year, uses AI/ML models to help customers reduce security and observability costs by 50% or more while resolving incidents 40% faster. By intelligently filtering out 80% of data noise before ingestion, Observo AI ensures customers only pay for high-value data in their SIEM and APM tools. Native support for AWS services such as Amazon CloudWatch, Amazon S3, Amazon Kinesis Data Firehose, and Amazon Security Lake makes Observo AI an immediate asset for AWS customers seeking to optimize their data pipelines.
SentinelOne and AWS: Co-Innovation for Customer Success
SentinelOne’s partnership with AWS is rooted in co-innovation, deep technical alignment, and a shared focus on delivering exceptional customer outcomes. Today, SentinelOne’s AI-powered Singularity platform integrates with over 20 AWS services, enabling organizations to turn shared telemetry into actionable insights through unified visibility, autonomous detection and response, and safe adoption of generative AI.
This collaboration helps customers achieve faster time-to-value through native integrations and simplified procurement via the AWS Marketplace. By ensuring interoperability across endpoints, cloud workloads, identities, and data, SentinelOne and AWS provide a clear path from visibility to velocity. The result is reduced complexity, shorter response times, and the ability to securely build and scale AI initiatives while modernizing security operations.
A Clear Path to Securing AI-Powered Businesses
The announcements at AWS re:Invent 2025 underscore SentinelOne’s commitment to helping organizations navigate the complexities of securing AI-powered businesses. By combining advanced AI capabilities, intelligent data pipelines, and seamless integrations with AWS, SentinelOne is empowering customers to protect their digital ecosystems effectively and efficiently.
As cyber threats grow in sophistication and scale, the need for unified, AI-driven security solutions has never been greater. SentinelOne’s latest innovations not only address these challenges but also pave the way for organizations to confidently embrace the opportunities of the AI era. With these enhancements, SentinelOne continues to lead the charge in delivering innovative, scalable, and future-ready security solutions that meet the evolving needs of modern enterprises.
For more information about SentinelOne’s integrations with AWS and its latest offerings, visit SentinelOne or explore the AWS Marketplace.
About SentinelOne
SentinelOne is a leading AI-powered cybersecurity platform. Built on the first unified Data Lake, SentinelOne empowers the world to run securely by creating intelligent, data-driven systems that think for themselves, stay ahead of complexity and risk, and evolve on their own. Leading organizations—including Fortune 10, Fortune 500, and Global 2000 companies, as well as prominent governments—trust SentinelOne to Secure Tomorrow™. Learn more at sentinelone.com.
