LENOVO SentinelOne Kubernetes Workload protection – Control 501-1000 units Corp 1 yr