Purple AI vs Charlotte AI
Purple AI and Charlotte AI side by side: what each one is, what it costs to start, and whether you can try it free. Everything below comes from the vendors' own sites and other public sources, not from hands-on testing.
At a glance
| Purple AI | Charlotte AI | |
|---|---|---|
| Category | Cybersecurity AI | Cybersecurity AI |
| Starting price | Custom pricing (checked October 2026) | Custom pricing (checked October 2026) |
| Free tier | Not listed | Not listed |
| Profile | Read profile | Read profile |
Prices are in US dollars unless shown otherwise. Confirm the current price on the vendor's site before you buy.
Key differences
Neither lists a free tier, so expect to pay to use either one.
Pricing is not directly comparable from the numbers we hold (Purple AI: Custom pricing; Charlotte AI: Custom pricing), so check each vendor's pricing page.
Both are in our Cybersecurity AI category.
About each tool
Purple AI
SentinelOne's agentic AI security analyst for SOC triage and investigation, part of the Singularity Platform; standalone Purple AI pricing is not published.
Who it is for
SentinelOne describes it as aimed at SOC analysts, incident responders and security leaders, and says its guided investigations help junior analysts ramp up. It is deployed within the Singularity Platform, so it suits teams that use or plan to use that platform rather than those wanting a standalone tool.
Strengths
- SentinelOne lists natural-language questions, AI-generated summaries, Auto-Triage that prioritizes high-risk activity, agentic investigation, and Investigation Notebooks that document work automatically.
- SentinelOne says Purple AI reasons over OCSF-normalized data from native SentinelOne telemetry and integrated third-party sources, across alerts, endpoints, cloud and identity.
- SentinelOne lists a Purple AI MCP Server that extends security data and workflows into a customer's own AI agents, and says Singularity Hyperautomation carries out responses.
- SentinelOne states that customer data is never used to train models, and that each AI verdict comes with a justification.
- SentinelOne's June 17, 2026 announcement says new and existing Singularity customers can opt in to a trial of zero-click agentic investigations and that no payment method is required during the trial.
Limitations
- No standalone Purple AI price is published, and the Purple AI product page gives no pricing or licensing terms; it links to the Pricing and Packages page.
- SentinelOne's packages page lists Singularity Complete at $179.99 a year and Commercial at $229.99 a year per endpoint (shown for 5-100 workstations), but those are platform prices and the page does not name Purple AI in its tiers.
- SentinelOne's own pages differ on tier coverage: the Singularity Complete page lists Purple AI natural-language queries, while the packages page lists an AI Security Assistant and an Agentic AI SOC Analyst, the latter with Enterprise and with some cells marked Add On. Exactly which tier includes what could not be confirmed.
- The agentic investigation trial runs on Singularity Credits; SentinelOne does not state the trial length or the size of the allotment. After the trial, Credits are bought through partners, direct billing or eCommerce, and no Credit price is published.
- The packages page says purchases go through an authorized partner and that the partner's pricing controls if prices conflict. No refund or cancellation terms are stated on the page.
Charlotte AI
AI security assistant in CrowdStrike Falcon for triage, investigations and agents; pricing is not published, eligible customers get 50 AI credits a month.
Who it is for
Security operations teams that already run CrowdStrike Falcon and want help with triage, investigations and workflow automation. The vendor also says non-expert users can operate the platform without learning documentation or script languages.
Strengths
- CrowdStrike lists prebuilt agents (for example Detection Triage, Response and Workflow Generation) plus conversational questions, promptbooks and conversion of questions into Real Time Response scripts.
- CrowdStrike says AgentWorks lets users build custom agents without code, choose the model, set which actions run automatically versus need approval, and use role-based permissions, execution traces, audit logs, credit caps and version rollback.
- CrowdStrike says Agentic SOAR combines agent reasoning with deterministic workflows, connects to other tools and agents through bidirectional MCP, and supports custom apps built with Falcon Foundry.
- CrowdStrike states Charlotte AI is certified under ISO/IEC 42001:2023 (AI governance).
- The vendor says the AI is trained on CrowdStrike analysts' decisions, and the datasheet says its LLMs are not trained on personally identifiable information (PII).
Limitations
- No Charlotte AI price is published. The FAQ and the Falcon pricing page do not say which Falcon plan includes it or list a per-credit rate; for additional credits the offer page says to contact CrowdStrike.
- Some features depend on other subscriptions: the datasheet says Charlotte AI for IT needs a Falcon for IT subscription and Incident Workbench needs Falcon Insight XDR.
- The pages read do not state data retention, data residency or whether customer data is used to train models, and they do not name the underlying models or hosting.
- The vendor's pages differ on cost: the datasheet promises pricing that 'won't surge with bursts in usage', while the FAQ and product page describe credit caps that control agent consumption. Confirm which applies to your contract.
