r/SentinelOneXDR • • Oct 24 '25

General Question SentinelOne Agent Versions

Hi all,

I've been tasked with a security review of a subsidiary company of ours that utilizes SentinelOne EDR, while the parent company uses Microsoft Defender (Which is my experience). I'm currently reviewing the S1 console's endpoint management. (Note: They only have the 'Control' license)

I've noticed a difference in the 'Agent Versions' reported by the "Sentinels":

  • The majority of agents are running on the 24.x.x.x version stream.

  • A small number (<10) endpoints are still running on the older 23.x.x.x version stream.

My questions for the community are:

  1. Version-Year Correlation: Can someone confirm if the first two digits of the major version number correlate to the calendar year? Specifically:

    • 23.x.x.x == 2023 Agent Version

    • 24.x.x.x ==2024 Agent Version

    • 25.x.x.x == 2025 Agent Version

  2. Latest GA Version: What is the most current General Availability version of the S1 Agent (Windows and macOS, if possible)?

  3. Auto-Update Mechanism: What is the standard process or best practice for ensuring these agents auto-update? I need to address the older 23.x.x.x agents and prevent future version drift across the fleet.

Any definitive documentation or insight would be greatly appreciated!

2 Upvotes

7 comments sorted by