Feature Marketplace · Connectors

SentinelOne Connector

SentinelOne Singularity autonomous endpoint protection platform. Syncs agents, threats, activities, and sites from the Management Console API v2.1.

Connectors connector security

What syncs

The SentinelOne records STRAX brings into your hub.

Each kind of record is mapped once to your company model in the STRAX hub, then kept current in every system that needs it.

Agents

Endpoints running the SentinelOne agent, including OS, network, activity, and infection status.

Threats

Detected threats with classification, verdict, mitigation status, and originating agent details.

Activities

Audit trail of console and agent activities including user actions, threat events, and policy changes.

Sites

Management sites with license allocation, state, and product suite information.

SentinelOne data in your own SQL Server, then wherever it is needed.

STRAX is a self-hosted integration platform. The SentinelOne records land in the STRAX hub, a SQL Server database on your own servers, where your reports, portals and workflows read them. From there the hub delivers them to the other systems you connect, whether those run on SQL Server, MySQL, PostgreSQL or another API. STRAX signs in to SentinelOne with an API key that you provide, stored encrypted.

About this listing

Version1.0.1
AuthorSTRAX
CategoryConnectors
Published2026-07-15

What's inside

Connector profile 1

Free listing

Install it from Feature Marketplace inside STRAX

Open Feature Marketplace

In your STRAX installation, open Feature Marketplace from the navigation.

Find "SentinelOne Connector"

Search or browse to this listing and review the contents disclosure; every package shows what it contains before anything runs.

Install

Choose Install, or "Customise with AI" to adapt the package to your environment first. No licence is needed for free listings.

Back to the catalogue →

See it on your own systems.

A demo takes an hour, on your data landscape rather than ours.