SentinelOne — Licensing

Prevention, EDR and response on workstations and servers.

Per-endpoint subscription within the selected package.

Cloud posture, risks and workload protection.

Separately quoted CNAPP scope; cloud resource types and quantities are verified.

Detection of identity and access abuse.

ITDR is included in Commercial and Enterprise; standalone scope requires confirmation.

Inventory and discovery of unprotected network devices.

Additional licence; the metric and package relationship are confirmed in the quote.

Protection of mobile devices against mobile threats.

Separate mobile add-on; device types and counts scope the proposal.

Collection, search and correlation of security data.

Data volume, retention and services are quoted; GB/day is a planning input.

Natural-language queries and summaries for analysts.

Core AI assistance is included in Complete and higher packages.

Advanced AI investigation of security events.

Included in Enterprise; an add-on for Complete and Commercial as quoted.

Extended visibility and forensic investigation.

Public Enterprise package scope; specific entitlements require confirmation.

Govern AI use and protect sensitive employee inputs.

Separate Prompt employee scope; deployment and contractual metric are quoted.

Protect secrets and source code when using AI coding assistants.

Separate Prompt developer scope; SaaS or self-hosted deployment as quoted.

Protect homegrown AI applications, agents and tool interactions.

Separate application scope; apps, traffic, agents and deployment are specified in the quote.

Proactive threat hunting by vendor analysts.

Included in Commercial and Enterprise. Hunting is distinct from a full MDR service.

Managed detection and response delivered by SentinelOne.

Service subscription based on protected areas and the agreed response tier.