The Singularity Platform packages are the five commercial bundles in which SentinelOne sells its endpoint, cloud workload and identity protection: Singularity Core, Control, Complete, Commercial and Enterprise. Each package is a subscription priced per endpoint per year. Four of them have public list prices, and Singularity Enterprise is quoted.[1] The contractual unit is the Endpoint. The Master Subscription Agreement defines it as physical or virtual computing devices and/or computing environments, such as containers, that can process data.[5] The Singularity Platform licence is limited to the quantity of Endpoints in a valid Purchase Order.[6] Packages build on one another. Each higher tier is described as “all the features of” the one below “plus” further capabilities.[1]
Editions
Price list
| Catalog SKU | Package | Price (USD) | Notes |
|---|---|---|---|
| Singularity Core - annual | Core | 69.99 per endpoint annually | Shown in the comparison-table selector[1] |
| Singularity Control - annual | Control | 79.99 per endpoint annually | Shown in the comparison-table selector[1] |
| Singularity Complete - annual | Complete | 179.99 per endpoint per year | “For growing, collaborative teams”[1] |
| Singularity Commercial - annual | Commercial | 229.99 per endpoint per year | “For teams who need more advanced security”[1] |
| Singularity Enterprise | Enterprise | Contact sales | “For organizations operating at global scale”[1] |
All prices are in U.S. dollars, may not include taxes and are displayed for 5-100 workstations.[1] Purchases are made through an authorized third-party partner. The published prices therefore do not reflect final pricing, and where the partner’s pricing conflicts with them, the partner’s pricing controls.[1] SentinelOne publishes no part numbers, no volume bands above 100 workstations, and no multi-year prices.
What each package adds
Singularity Core is positioned as a replacement for legacy antivirus: cloud-native NGAV and EPP. It includes static and behavioural AI on the agent, Storyline tracking, and one-click remediation and rollback.[3]
Singularity Control adds suite features to the same agent. These are native firewall (network) control for Windows, macOS and Linux, USB and Bluetooth device control, and rogue device discovery.[4] The Rogues capability comes with Singularity Control and Singularity Complete. Singularity Ranger is a separate module that adds network discovery and fingerprinting of IP-enabled devices.[4]
Singularity Complete adds AI-driven endpoint and cloud workload protection, real-time threat detection and response, 14 days of data retention and the AI Security Assistant.[1]
Singularity Commercial adds Identity Detection & Response, 90-day data retention and Managed Threat Hunting.[1]
Singularity Enterprise adds the Agentic AI SOC Analyst for automated triage, “Full Visibility & Forensics” for deep network data collection, and expert-led onboarding and training.[1]
The package datasheet presents the same matrix for Control, Complete, Commercial and Enterprise. Its rows include role-based access control, multi-tenant management, EPP, advanced EPP controls, cloud workload protection, XDR, the AI Security Assistant, the Agentic AI SOC Analyst, data retention (14 or 90 days), identity threat detection and response, managed threat hunting, MDR, network discovery, forensic data collection, onboarding and training. Several cells are marked “Add On”.[2] On the web comparison, the Agentic AI SOC Analyst and Managed Threat Hunting are add-ons below the tier that includes them, and Managed Detection and Response is an add-on for Commercial and Enterprise.[1] MDR itself is covered in SentinelOne managed services and warranties.
Add-on licences outside the matrix
The FAQ names two add-on licences that the comparison does not show. The Mobile Agent requires an add-on licence.[7] RemoteOps Forensics requires Singularity Complete together with the RemoteOps Forensics add-on licence.[7] Catalog proof: Mobile Agent and RemoteOps Forensics require add-on licences.
Metrics
The only package metric is the Endpoint. The public pages say “per endpoint”,[1] and the FAQ says prices vary with the number of deployed endpoint agents.[7] Data retention is a package attribute measured in days (14 or 90), not a separately metered quantity.[1] Retention beyond the package, and ingestion of third-party data, are licensed through Singularity Data Lake. See SentinelOne Data Lake, AI SIEM and Purple AI licensing.
Counting / floors
Quantity (effective 2026-05-14). The licence is limited to the Endpoint quantity in the Purchase Order.[6] An estate normally mixes packages. For example, servers may be on one package and workstations on another. Each package line should therefore be reconciled separately against the agents assigned to it in the console. Catalog proof: Licence limited to the Endpoint quantity in the Purchase Order.
Overage (effective 2026-06-24). Agents above the purchased quantity are a True-Up. SentinelOne may invoice them pro rata or as overages at the unit price in the Existing Purchase Order.[5] The unit price for an overage is therefore the customer’s negotiated price, not the list price. Catalog proof: Usage above the Purchase Order is invoiced as a True-Up.
Floors. No minimum quantity is published. The only published threshold is the 5-100 workstation band to which the displayed prices apply.[1] Catalog proof: Public prices are indicative; partner pricing controls.
Virtualization & partitioning
Because the Endpoint definition includes virtual devices and computing environments such as containers,[5] virtual machines and VDI desktops that run the agent count one for one. Singularity Core’s FAQ says the agents support physical systems, VDI and cloud service providers. It lists VMware vSphere, Horizon, Workstation and Fusion, Citrix XenApp and XenDesktop, Microsoft Hyper-V and Oracle VirtualBox among the supported virtualization and VDI platforms.[3] The retrieved documents contain no rule for non-persistent VDI (for example counting concurrent rather than provisioned desktops), no host-based alternative and no partitioning policy. A practitioner should obtain any such concession in writing in the Purchase Order. Catalog proof: Virtual devices and containers count as Endpoints.
Cloud workload and identity protection
Cloud workloads. Singularity Cloud Workload Security gives runtime protection to servers, VMs, containers, CaaS and serverless workloads.[9] Its datasheet lists Amazon EC2, Azure VM and Google Compute Engine, managed and self-managed Kubernetes services, and serverless container protection for Amazon ECS Fargate and EKS Fargate.[8] The Complete package and above include the “Cloud Workload Protection Platform” row.[1] No retrieved document states a separate unit for Kubernetes nodes, pods or serverless tasks. Under the MSA definition, each computing environment that can process data is an Endpoint.[5] The wider Singularity Cloud portfolio covers CSPM, CIEM, CWPP, DSPM and AI-SPM as one CNAPP.[12] Its posture modules are sold by quote with no published metric.
Identity. Singularity Identity unifies identity and endpoint protection in a single agent and platform.[10] Identity Threat Detection and Response is part of Singularity Commercial and Enterprise.[1] The retrieved documents do not define a separate identity metric (such as per user or per account). Identity covered through a package is therefore counted through the package’s Endpoint quantity.
Programs
- Ransomware Warranty (effective 2026-05-14). Available to customers and MSSPs that subscribe to the Control or Complete SKU, when the warranty is stated in the Quote or Purchase Order. It pays up to $1,000 per affected Endpoint and $1,000,000 per 12 months. Only Windows agents are covered.[11] Catalog proof: Ransomware Warranty pays up to $1,000 per Endpoint for Control or Complete SKUs.
- Managed AI Defense (announced 2025-09-03). For MSPs, SentinelOne packages EDR, Purple AI, managed threat hunting and vulnerability management as a single per-endpoint SKU on the Pax8 marketplace. MDR, Remote Forensics and ITDR are optional add-on SKUs.[13] Catalog proof: Managed AI Defense is priced per endpoint as a single SKU for MSPs.
Out of scope
This page does not cover partner or distributor price lists, discounts, multi-year pricing or MSSP agreements, none of which SentinelOne publishes. Singularity Ranger, Singularity Mobile and Cloud Native Security posture modules are named but not priced in the retrieved documents. Data Lake, AI SIEM, Purple AI and Credit-based consumption are covered in SentinelOne Data Lake, AI SIEM and Purple AI licensing.