SentinelOne launches integrations with AWS Security Hub and new Amazon CloudWatch capabilities; adds Purple AI MCP Server, Observo AI data pipeline to AWS Marketplace

AWS re:Invent 2025—SentinelOne® (NYSE: S), today announced a series of new innovations and integrations with Amazon Web Services (AWS) to accelerate AI initiatives and fuel AI-powered security outcomes through the intelligent use of data. Unveiled at AWS re:Invent 2025, these announcements include a series of new advance integrations between SentinelOne’s AI-native Singularity cybersecurity platform and AWS Security Hub and with Amazon CloudWatch. They also introduce the addition of SentinelOne’s new Purple AI MCP Server and Observo AI data pipeline into the AWS Marketplace, dramatically simplifying how customers can purchase, integrate and harness SentinelOne’s latest AI and data innovation.

The integrations and new offerings help organizations running on AWS secure their cloud workloads, endpoints, identities and GenAI applications with unified visibility, agentic AI, and intelligent data pipelines that reduce cost, simplify operations, and speed time to value.

“Security data is the fuel that powers AI-driven, autonomous security. SentinelOne in collaboration with AWS has long believed that open platforms, open data standards like OCSF, and intelligent, unified data lakes are key to protecting customers’ ever growing attack surface – from endpoints to the cloud to AI,” said Ely Kahn, chief product officer at SentinelOne. “At re:Invent, we’re once again working together to accelerate the adoption and efficacy of AI defenses by making it easy for customers to intelligently and cost effectively harness security data across their entire digital footprint.”

New integrations to unify data and protect endpoint, cloud and AI attack surfaces

Building on shared vision for security in the AI era, SentinelOne in collaboration with AWS is expanding to include new integrations with AWS’ security offerings.

• AWS Security Hub Integration with Singularity AI SIEM – AWS Security Hub prioritizes critical security issues and helps customers respond at scale to protect their cloud environment by providing a clearer, near real-time picture of their cloud security status. Through the integration with SentinelOne, organizations can instantly and seamlessly stream prioritized AWS Security Hub findings into SentinelOne’s Singularity AI SIEM, where they are automatically correlated with endpoint, identity and AI telemetry. This unified context can then be used to automate response, accelerate investigations, and remediate modern threats at scale.
• Integration with new Amazon CloudWatch capabilities – CloudWatch reduces operational complexity and accelerates insights by unifying operational, security, and compliance data in one place, leveraging the OCSF open data standard for security data. Immediately upon launch, customers can benefit from bidirectional data flows between the Singularity Platform and Amazon CloudWatch to gain visibility across attack surfaces, leverage correlations to identify and respond to potential threats, and unlock greater flexibility for enriching and storing security data.
• Accelerating AI-Powered Security Through Faster Data Onboarding – SentinelOne is also introducing support for AWS IAM temporary delegation to streamline setup of the new AWS Security Hub integration. This one-click experience accelerates time-to-value for AI-driven security outcomes by automatically configuring the required IAM resources to securely ingesting AWS Security Hub to correlate and enrich AWS data with endpoint, identity, and AI telemetry faster and with full customer control.

Extending the agentic power of Purple AI and AI ready data pipelines from Observo AI in AWS Marketplace

Following on the introduction of the Purple AI MCP server at SentinelOne’s OneCon 2025 event in November, as well as the recent acquisition of AI-ready data pipeline company, Observo AI, SentinelOne is expanding its line up of offerings in AWS Marketplace – simplifying how customers purchase and integrate an increasing number of SentinelOne offerings.

• Purple AI MCP Server now on AWS Marketplace – Designed to extend the power of SentinelOne’s category defining agentic analyst, Purple AI, the new Purple AI MCP Server provides secure, seamless integration between the Singularity Platform and any AI framework or large language model. Now offered in AWS Marketplace, it acts as a universal translator and intelligence hub, empowering developers and partners to build custom agentic AI experiences on AWS and beyond, powered by the full context and analytics of SentinelOne’s platform.
• SentinelOne’s Observo AI data pipeline now on the AWS GenAI Marketplace – Observo AI uses AI/ML models to help customers reduce security and observability costs by 50 percent or more while resolving incidents 40 percent faster. By intelligently reducing 80 percent of data noise before ingestion, Obeservo AI ensures customers only pay for high-value data in their SIEM and APM tools. Observo AI offers immediate benefit to AWS customers with native support for Amazon CloudWatch, Amazon S3, Amazon Kinesis Data Firehose, Amazon Kinesis Data Streams, Amazon Simple Queue Service (SQS), Amazon Simple Notification Service (SNS), AWS Lambda, Elastic Load Balancing (ELB), Amazon CloudFront, and Amazon Security Lake.

SentineOne and AWS – Helping customers build and secure their AI-powered business

SentinelOne’s collaboration with AWS is built on co-innovation, deep technical alignment, and a shared focus on customer outcomes. Today, SentinelOne’s AI-powered Singularity platform integrates with more than 20 AWS services, and co-build solutions that turn shared telemetry into action through unified visibility, autonomous detection and response, and safe GenAI adoption. This helps customers gain faster time to value through native integrations and AWS Marketplace procurement, while ensuring interoperability across endpoints, cloud workloads, identities, and data. The result is a clear path from visibility to velocity on AWS that reduces complexity, shortens response times, and helps organizations securely build AI and scale initiatives, while automating and modernizing security operations.

For more information on SentinelOne’s integrations with AWS, visit SentinelOne in AWS Marketplace.

Availability

All of the new innovations, integrations and AWS Marketplace listings are available either today or planned to be generally available this week at AWS re:Invent 2025.

Additional Resources

• SentinelOne and AWS Strengthen Collaboration to Power the Future of AI Security
• SentinelOne Accelerates Secure Cloud Migrations for AWS Customers
• SentinelOne Brings Singularity AI SIEM to the AWS Marketplace, Opening a Massive New Channel for the Company’s Fastest Growing Offering
• SentinelOne in AWS GenAI Marketplace

About SentinelOne

SentinelOne is a leading AI-powered cybersecurity platform. Built on the first unified Data Lake, SentinelOne empowers the world to run securely by creating intelligent, data-driven systems that think for themselves, stay ahead of complexity and risk, and evolve on their own. Leading organizations—including Fortune 10, Fortune 500, and Global 2000 companies, as well as prominent governments—trust SentinelOne to Secure Tomorrow™. Learn more at sentinelone.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20251202016132/en/