In short: SentinelOne is a cyber security company whose Singularity platform protects endpoints, servers, cloud workloads and identities from one agent and one console. Endpoint licences come in Singularity Control and Singularity Complete editions, counted per endpoint, with add-ons for identity, data retention, AI and managed services. Forever Systems supplies SentinelOne on monthly or annual terms.
What SentinelOne does
SentinelOne is a cyber security vendor best known for AI-driven endpoint protection. Its Singularity platform puts prevention, detection, response and investigation for workstations, servers, cloud workloads and identities into one console, fed by one lightweight agent.
The agent uses on-device AI to block known and unknown malware before it runs, watches behaviour to catch fileless attacks, scripts and exploits, and can respond on its own: killing processes, quarantining files, disconnecting a device from the network and rolling a device back to a trusted state from before the attack. Because detection happens on the device, protection carries on when a laptop is offline.
Around that core, SentinelOne adds identity protection for Active Directory and cloud identity providers, runtime protection for cloud and container workloads, an AI SIEM, the Purple AI agentic security analyst, no-code workflow automation, generative AI security and its Wayfinder managed services for organisations that want experts watching around the clock.
The SentinelOne products we supply
| Product | What it does | Licensed by |
|---|---|---|
| Singularity Endpoint | Control and Complete editions: AI prevention, behavioural detection, rollback, device and firewall control, EDR | Endpoint (workstation, server, serverless pod or task) |
| Cloud Workload Security | Runtime protection for servers, VMs, containers and Kubernetes | Endpoint or container host |
| Singularity Identity | Identity posture, identity threat detection and response, deception | User or identity |
| Purple AI | Agentic AI security analyst for investigation and triage | Endpoint |
| Singularity AI SIEM | Ingest and search first and third-party log data | Gigabyte ingested, by retention period |
| Hyperautomation | No-code security workflow automation | Per subscription |
| Vigilance MDR | 24/7 managed detection and response from SentinelOne analysts (Wayfinder MDR) | Endpoint |
| Wayfinder Threat Hunting | Intelligence-led managed threat hunting | Endpoint |
| Network Discovery | Finds unmanaged and rogue devices using your existing agents | Endpoint |
| Vulnerability Management | Agent-based OS and application vulnerability assessment | Endpoint |
| RemoteOps | Remote scripts and forensic evidence collection at scale | Endpoint |
| Prompt Security | Controls on staff and developer use of generative AI tools | Employee |
Our usual starting recommendation is Singularity Complete on every device, adding Vigilance MDR if nobody in your organisation watches alerts out of hours.
How SentinelOne is licensed
SentinelOne licensing is built in layers:
- An endpoint edition for every protected device: Singularity Control or Singularity Complete. Workstations, servers and serverless container tasks are each counted as an endpoint; Kubernetes and container hosts have their own per-host licence
- Add-ons on top of the edition, mostly counted per endpoint (Purple AI, Vigilance, threat hunting, Network Discovery, vulnerability management, RemoteOps, extra Deep Visibility retention, threat intelligence and Cloud Funnel)
- Identity add-ons, counted by user or identity
- Data ingest for AI SIEM, counted by the gigabyte with a choice of retention period
We can supply SentinelOne month to month or on an annual commitment billed monthly, and a minimum endpoint commitment can apply; we confirm the terms for your numbers when we quote. SentinelOne's own pricing page also lists Singularity Core (prevention only) below Control, and larger bundles called Singularity Commercial and Singularity Enterprise that fold in identity, longer retention and managed threat hunting. If you have been offered one of those, send it over and we will match the components. Ask us for a quote. For background on terms, see monthly vs annual licences.
Who SentinelOne suits
SentinelOne fits organisations that want strong, largely automatic endpoint protection without running a large security team:
- businesses replacing traditional antivirus with EDR, for example after a cyber insurer asks about endpoint detection and response
- mixed estates of Windows, macOS and Linux devices plus cloud servers, managed from one console
- organisations with an IT team but no 24/7 security operations centre, who pair Singularity Complete with Vigilance MDR
- schools, charities and multi-site organisations with devices that are often off the corporate network
Good endpoint security also supports the malware protection control in Cyber Essentials. Compare other approaches in EDR, XDR and MDR and endpoint protection.
Buying SentinelOne through Forever Systems
- Count: we list your workstations, servers and cloud workloads, plus users if you are considering identity or AI security add-ons, and note what protects them today.
- Choose: we recommend Singularity Control or Singularity Complete and only the add-ons that solve a problem you actually have, with monthly and annual-commitment options side by side.
- Switch over: we build your SentinelOne console and policies, roll out the agent in stages and remove the product it replaces.
- Run it: additions, removals, renewals and add-ons sit on one Forever Systems account and one invoice, with UK engineers on hand when you need them.
Ask about a trial if you want to see SentinelOne on a few devices before you commit. See every vendor we supply on our vendors A to Z.
Explore SentinelOne
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Can I buy SentinelOne directly?
SentinelOne's pricing page states that purchases are made through an authorised third party rather than directly. Forever Systems supplies SentinelOne licences with setup and ongoing support on one UK account.
What is the difference between Singularity Control and Singularity Complete?
Control gives AI-based prevention, behavioural detection, automated remediation, rollback, device control, firewall control and remote shell. Complete adds full EDR: Deep Visibility threat hunting, Storyline attack context, 14 days of searchable historical telemetry and Purple AI natural-language investigation.
Is SentinelOne licensed per user or per device?
Endpoint editions and most add-ons are per endpoint, meaning each workstation, server or serverless task. Container hosts have their own licence, identity add-ons are per user, and AI SIEM ingest is per gigabyte.
Can I pay for SentinelOne monthly?
Yes. We can supply SentinelOne month to month or on an annual commitment billed monthly. A minimum endpoint commitment can apply, and we set out both options when we quote.
Does SentinelOne work alongside Microsoft Defender?
SentinelOne is a complete endpoint protection product, so it normally takes over the antivirus role on each device rather than running as a second scanner. We agree how Microsoft Defender is configured as part of the rollout. If Microsoft licensing is part of the picture, see our Microsoft licensing team.