What happened
At OneCon 2026 (Oct 21), SentinelOne unveiled Singularity ADR, an agentic-runtime D&R offering now in early access on the Singularity Platform. It inventories agents/tools/MCP servers, traces every agentic event into the data lake, unifies agent and EDR activity into one execution graph, applies allow/block policy and approval workflows, blocks prompt injection/jailbreaks/credential exfiltration/tool poisoning inline, detects intent drift, and contains a single agent mid-action without stopping the workflow.
Why it matters
This is a major vendor extending agent security from discovery/governance into full runtime behavioral prevention, detection and response — directly addressing the 'sanctioned agent goes off course' risk that dominates headlines. It competes head-on with the wave of agent-security entries and is tied to SentinelOne's existing endpoint/cloud/identity defense for 15,000+ customers.
Applicability
SentinelOne customers and AI-security evaluators should assess ADR via early access, especially enterprises running Claude Code/Codex, Copilot Studio, Agentforce, and ChatGPT workspace agents with real credentials.