Track recordPV-2025B · Dossier

An agentic analytics platform, built essentially solo in weeks.

SentinelOne’s delivery analytics ran in Google Sheets, with me as the human query engine for every ad-hoc request. So I built the thing that answers instead.

Org
SentinelOne
Role
Principal Infrastructure Engineer, essentially solo
Period
2025 to 2026, built in a matter of weeks
Built in
Windsurf, on SentinelOne’s internal AI gateway
Stack
TypeScript and Next.js, a LangGraph ReAct agent, PostgreSQL with pgvector, BigQuery, Redis

The dossier

Situation

The delivery analytics and scorecard system I ran lived in Google Sheets and Apps Script, with a homemade CSV and Drive persistence layer. It worked, but it made me the human query engine for every ad-hoc request, and it was not going to scale.

Objective

Cut the ad-hoc request load, let non-analysts answer their own data questions, and retire the Sheets system with a web app on BigQuery that could build charts, tables and summaries on demand.

Action

  1. Used the company’s own gateway. Integrated with SentinelOne’s self-developed AI gateway, the one its products used, rather than standing up separate model access.
  2. Grounded the model in the schema. Built pluggable data stores with per-store credentials, a Redis cache, and a vector store of table and column structure, adding descriptions where the source was thin.
  3. Enforced read-only queries. Wired the schema store into chat with enforced read-only query generation, on a LangGraph ReAct agent with custom tooling and a BigQuery provider I wrote.
  4. Built a SQL and KPI workbench. An AI-assisted SQL editor with a table explorer, autocomplete, dynamic variables like @current_user, and save as KPI, which writes the KPI into the knowledge base the chat checks first.
  5. Taught it the business. Built a harvester that folds the marketing site, support documentation and Confluence into the knowledge base, so the chat could answer questions like how many bugs were past SLA.
  6. Built the dashboard builder. A GUI to bind tables, charts and AI insights to KPIs, save personal or system reports, and open a chat scoped to the report.

Result

  • One platform replaced the Sheets delivery and scorecard pipeline and collapsed my ad-hoc request load.
  • Non-analysts could self-serve data questions in plain English, with the agent favoring vetted, reusable KPIs over ad-hoc SQL.
  • It served as SentinelOne’s Software Engineering Intelligence platform while a commercial SEI vendor was being selected.
  • Validated query generation, markedly faster query resolution than a naive approach, and high automated test coverage across a large unit and end-to-end suite.

Leadership

Approach
Prefer a vetted KPI over fresh generation. That is what makes agentic analytics trustworthy.
Delivery
Built essentially solo, in weeks, and used it to retire the scorecard system I had run in Sheets.

This is the kind of work behind the fractional CISO and CTO offer.

Book

Bring the problem.
Leave with the next three moves.

Length
30 minutes
With
Paul, directly
Reply
Within 24 hours
After
Scoped and priced in writing after a 30-minute call.
Book a 30-minute intro call

30 minutes, directly with Paul. Or write to paul@vilevac.com