SentinelOne

Founded in Tel Aviv in 2013 and later headquartered in California. Its product, now called Singularity, is an EDR agent that classifies behaviour with machine learning instead of matching files against signatures — the same basic idea as CrowdStrike Falcon, but with more of the analysis done on the endpoint itself. Its best-known trick rolls back files encrypted by ransomware using Windows shadow copies.

The June 2021 IPO was at the time the largest in cybersecurity. In 2025 the company's security clearances were suspended by a presidential memorandum aimed at Chris Krebs, who worked there — an unusual line item in an antivirus vendor's risk register.