SYDNEY, Australia – August 16, 2023 – Employees today want the freedom to work where and how they perform best. SentinelOne (NYSE: S), a global leader in autonomous cybersecurity, and Netskope, a leader in Secure Access Service Edge (SASE), are joining forces to help customers deliver it in a secure way. The technology partners today announced the launch of the SentinelOne Singularity™ App for Netskope, a powerful, joint solution that provides the comprehensive, context-rich visibility needed to detect, respond to, and mitigate threats across the ever-expanding attack surface opened by distributed work.
“Visibility is key to keeping today’s distributed workforce secure, but gaining it at the level required to protect the ever-growing number of employees working remote can be difficult,” said Akhil Kapoor, Vice President, Technology Partnerships, SentinelOne. “In teaming with Netskope, we’re making it easy for our customers by providing a consolidated, granular view into threat activity across the entire technology stack, along with deep insights they can use to supercharge their hunting and investigation capabilities and keep people and information safe.”
A dynamic duo
Through its Singularity platform, SentinelOne delivers leading protection for enterprise attack surfaces, including user endpoints, cloud workloads and identity infrastructure. As a critical set of capabilities for a successful SASE architecture, Netskope Intelligent Security Service Edge (SSE) secures access to web, SaaS, public cloud, private application, and data centre infrastructure through a converged SWG, CASB and ZTNA suite. The two together enable a dynamic, integrated solution that security teams can use to defend networks and systems against threats and stop adversaries in their tracks with greater speed and efficiency.
“Netskope provides invaluable insights into user and cloud activity and risk, and with Sentinel One, XDR customers are able to correlate this information with other systems and act upon it in an automated, intelligent, and scalable manner,” said Andy Horwitz, Vice President of Business Development, Netskope.
How it works
With the SentinelOne Singularity App for Netskope, organisations can consolidate visibility into Netskope’s Intelligent Secure Service Edge for threat investigation and hunting and accelerate triage by automatically enriching Singularity threats with contextually related Netskope alerts. Using the solution, security teams can:
- Enhance visibility – SentinelOne Singularity App for Netskope gives full visibility into the attack lifecycle by providing a consolidated view of endpoint, cloud, DLP and SASE alerts for threat hunting and investigation. Netskope’s User Behavior Analytics (UBA), Data Loss Protection (DLP), malware and additional alert logs are automatically ingested into the Singularity platform, where security analysts can search, pivot and hunt for threats across their environment.
- Enrich threats – SentinelOne threats are autonomously enriched with additional user context from Netskope’s behavioral analytics. When an incident occurs, the app automatically adds correlated Netskope alerts and user confidence index (UCI) scores for a given user, enabling analysts to accelerate triage and escalation.
- Speed response and mitigate risk – Through the integration with Netskope, SentinelOne can alert when an indicator from Netskope matches a file hash, URL, or domain within its hunting interface and take automated actions such as killing and quarantining a malicious file, or network quarantining the endpoint, reducing the speed of detecting and responding to known-malicious threats and risk to the enterprise.
SentinelOne is the leader in autonomous cybersecurity. SentinelOne’s Singularity™ Platform detects, prevents, and responds to cyber attacks at machine speed, empowering organisations to secure endpoints, cloud workloads, containers, identities, and mobile and network-connected devices with speed, accuracy and simplicity. Over 10,000 customers, including Fortune 10, Fortune 500, and Global 2000 companies, as well as prominent governments, trust SentinelOne to secure the future today. To learn more, visit www.sentinelone.com
Netskope, a global SASE leader, helps organisations apply zero trust principles and AI/ML innovations to protect data and defend against cyber threats. Fast and easy to use, the Netskope platform provides optimised access and real-time security for people, devices, and data anywhere they go. Netskope helps customers reduce risk, accelerate performance, and get unrivalled visibility into any cloud, web, and private application activity. Thousands of customers trust Netskope and its powerful NewEdge network to address evolving threats, new risks, technology shifts, organisational and network changes, and new regulatory requirements. Learn how Netskope helps customers be ready for anything on their SASE journey, visit netskope.com.
+61 477 707 083