SentinelOne releases integrations with AWS Security Hub and features on Amazon CloudWatch. It then adds Purple AI MCP Server and Observo AI data pipeline on AWS Marketplace
SentinelOne (NYSE: S), a global leader in AI-powered cybersecurity, introduced innovations and integrations with Amazon Web Services (AWS) to accelerate AI initiatives and enhance AI-driven security through the smart use of data. Presented at AWS re:Invent 2025, new features include integrations between SentinelOne's AI-powered Singularity platform and AWS Security Hub and Amazon CloudWatch. They also introduce SentinelOne's Purple AI MCP Server and Observo AI data pipeline to the AWS Marketplace, dramatically simplifying how customers purchase, integrate, and leverage SentinelOne's latest AI and data innovations.
Integrations and new solutions ensure AWS customers secure their cloud workloads, endpoints, identities, and GenAI applications with unified visibility, agentic AI, and data pipelines that reduce costs, simplify operations, and accelerate time to value.
"Security data is the fuel that powers autonomous security powered by AI technologies. SentinelOne, in partnership with AWS, has long believed that open platforms, open data standards like OCSF, and intelligent, unified data lakes are critical to protecting customers' ever-expanding attack surface, from endpoints to cloud to AI," said Ely Kahn, Chief Product Officer at SentinelOne. “At re:Invent, we have once again collaborated to accelerate the adoption and effectiveness of AI-powered defenses, enabling customers to intuitively and cost-effectively leverage security data across their entire digital footprint.”
Integrations to unify data and protect endpoints, clouds and AI attack surfaces
Building on a shared vision of security in the age of AI, SentinelOne, together with AWS, is expanding its offerings to include integrations with AWS security products.
- AWS Security Hub integration with Singularity AI SIEM – AWS Security Hub prioritizes severe security vulnerabilities so customers can take action and protect the cloud, providing a clear, near-real-time picture of cloud security posture. By integrating with SentinelOne, enterprises instantly and seamlessly stream AWS Security Hub findings to SentinelOne's Singularity AI SIEM, where they are correlated with endpoints, identities, and AI telemetry. This unified context automates response, accelerates investigations, and manages threats at scale.
- Integration with Amazon CloudWatch features: CloudWatch reduces operational complexity and accelerates insights by bringing operational, security and compliance data together in one place, leveraging the OCSF standard for security data. Immediately after launch, customers benefit from bidirectional data flows between the Singularity platform and Amazon CloudWatch to gain visibility into attack surfaces, leverage correlations to identify and respond to potential threats, and gain greater flexibility in collecting and storing security data.
- Accelerate AI-powered security with faster onboarding of the data– SentinelOne also introduces support for AWS IAM temporary delegation to simplify the setup of the AWS Security Hub integration. This one-click capability accelerates the time to value of AI-powered security outcomes by automatically configuring the IAM resources needed to securely integrate AWS Security Hub and correlate and enrich AWS data with AI endpoints, identities, and telemetry more quickly and with full customer control.
Expand the Purple AI Agent and AI-ready data pipeline from Observo AI in the AWS Marketplace
Following the introduction of the Purple AI MCP server at SentinelOne's OneCon 2025 event and the recent acquisition of AI-ready data pipeline company Observo AI, SentinelOne is expanding its range of offerings on the AWS Marketplace, simplifying the way customers purchase and integrate a growing number of SentinelOne solutions.
- Purple AI MCP Server is now on AWS Marketplace – Designed to power Purple AI, SentinelOne's industry-leading agent, Purple AI MCP Server offers secure, seamless integration between Singularity and any large AI framework or language model. Available on the AWS Marketplace, it serves as a universal translator and intelligence hub, enabling developers and partners to build agentic AI solutions on AWS and beyond with the context and analytics of the SentinelOne platform.
- Observo AI, SentinelOne's data pipeline, is available on the AWS GenAI Marketplace – Observo AI uses AI/ML models to help customers reduce security and visibility costs by 50% or more, while resolving incidents 40% faster. By intelligently reducing 80% of data noise before ingestion, Observo AI ensures customers use only valuable data in their SIEM and APM tools. Observo AI provides immediate benefits to AWS customers with native support for Amazon CloudWatch, Amazon S3, Amazon Kinesis Data Firehose, Amazon Kinesis Data Streams, Amazon Simple Queue Service (SQS), Amazon Simple Notification Service (SNS), AWS Lambda, Elastic Load Balancing (ELB), Amazon CloudFront, and Amazon Security Lake.
SentineOne and AWS: Serving customers to develop and secure AI-powered businesses
The collaboration between SentinelOne and AWS is based on co-innovation, strong technical alignment, and a shared goal: customer benefits. Today, SentinelOne's AI-powered Singularity integrates with more than 20 AWS services and helps develop solutions that turn shared telemetry into action through unified visibility, autonomous detection and response, and secure adoption of GenAI. This helps achieve faster time to value through native integrations and provisioning on the AWS Marketplace, ensuring interoperability across endpoints, cloud workloads, identities, and data. The result is a clear path from visibility to speed on AWS, which reduces complexity, shortens response times, and helps enterprises securely build AI initiatives and scale by automating and streamlining security operations.
