Incident

SentinelOne suffers seven-hour global outage caused by infrastructure software flaw


Learn More

American cybersecurity company SentinelOne experienced a major global service disruption on May 29, 2025, that left thousands of customers unable to access security management services for approximately seven hours. 

During the outage customer endpoints remained protected, but security teams were unable to access the management console and related services, which impacted their ability to manage their security operations and access important data. 

The outage was caused by a software flaw in an infrastructure control system during the company's transition to a new cloud architecture. The root cause of the disruption was a software flaw in an infrastructure control system that removed some network routes and DNS resolver rules, causing widespread loss of network connectivity within the SentinelOne platform

According to StatusGator's third-party monitoring service, the outages affected 10 services across the SentinelOne Singularity platform, leaving dashboards inaccessible for its Endpoint, XDR, Cloud Security, Identity, Data Lake, Marketplace, RemoteOps, Threat Intelligence, Vulnerability Management, and Network Discovery services. 

Per information from SentinelOne, no data was exposed or stolen during this incident, as it was purely a service availability issue rather than a security breach. 

At 6:10 PM UTC, SentinelOne announced that "services are actively being restored and consoles are coming online," with full restoration achieved by 7:41 PM UTC.

SentinelOne suffers seven-hour global outage caused by infrastructure software flaw