SentinelOne

No entries match these filters. Clear filters

1. announced Oct 30, 2026 · issue 127

   SentinelOne adds Singularity Agentic Detection and Response to discover, monitor, and contain AI agents across enterprise environments⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Singularity Agentic Detection and Response (ADR) now builds an inventory of AI agents, tools, connectors, and Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) servers along with their permissions and associated users.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • ADR now supports AI agents built on Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents.
   • ADR now monitors agent activity through event traces and links AI-driven actions to subsequent system processes to detect when an agent deviates from its assigned task.
   • Security teams can now set controls governing which agents are allowed to operate and which resources they can access, and can contain an individual AI agent without stopping the wider workflow.
   • ADR now detects and blocks threats including prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and credential exfiltration before agent actions are executed.

   +1 more show less

   • ADR now integrates agent activity into the Singularity Platform's existing investigation and response workflows, allowing teams to examine agent actions and automate responses within customer-defined boundaries.

   6 details in Everything

2. announced Oct 30, 2026 · issue 127

   SentinelOne adds Anthropic Claude Mythos 5.1 to Wayfinder Frontier AI Services for exploitability-validated vulnerability assessment⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Wayfinder Frontier AI Services now includes Anthropic Claude Mythos 5.1, a restricted-access model, to improve vulnerability discovery and exploitability confirmation alongside existing OpenAI and Anthropic models.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Wayfinder Frontier AI Services now filters findings through exploitability testing so customers receive validated results and prioritised remediation guidance rather than raw vulnerability lists.
   • Wayfinder Frontier AI Services now includes Anthropic Claude Mythos 5.1, a restricted-access model, to improve vulnerability discovery and exploitability confirmation alongside existing OpenAI and Anthropic models.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

3. announced Oct 28, 2026 · issue 125

   SentinelOne adds Singularity ASOCASOCApplication Security Orchestration and Correlation — a category of platforms that aggregate findings from multiple testing tools, deduplicate and prioritize them, and automate remediation workflows so cyber tools can be managed at scale., a new autonomous SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. suite with agentic investigation, hyperautomation, AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. management, and a credits-based consumption model.

   • New integrationSingularity ASOC bundles Agentic Investigation, Hyperautomation, AI Data Pipelines, AI SIEM, and threat intelligence and IOC management into one suite on the Singularity Platform.
   • Singularity Credits now govern AI-powered capability consumption across the platform, with administrators setting guardrails to keep automated actions within organisation-defined limits.

   2 details in Everything

4. announced Oct 28, 2026 · issue 125
   • New integration Tenable OPEN for AI partner integrations via MCP connectors and direct APIs
5. announced Oct 21, 2026 · issue 116

   SentinelOne launches Singularity ASOCASOCApplication Security Orchestration and Correlation — a category of platforms that aggregate findings from multiple testing tools, deduplicate and prioritize them, and automate remediation workflows so cyber tools can be managed at scale., bundling AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., Agentic Investigation, Hyperautomation, and AI Data Pipelines with 50+ third-party connectors into one SOC suite.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Introduces Singularity ASOC, a new integrated suite combining AI SIEM, Agentic Investigation, Hyperautomation, AI Data Pipelines, threat intelligence and IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. management, and case management in a single offering on the Singularity Platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds AI Data Pipelines with more than 50 out-of-the-box connectors to third-party sources spanning cloud, identity, email, network, SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., data platforms, and vulnerability management — including AWS, Google Cloud, Microsoft, Okta, Cisco, Proofpoint, Netskope, Snowflake, Atlassian, Oracle, Tenable, Microsoft Defender XDR, Palo Alto Networks Prisma, Wiz, Darktrace, Sophos Central, and Check Point; supports ingestion via syslog and Kafka today, with OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. and generic API collection on the way for on-premises and custom source connectivity; and can filter and route data to third-party SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point. and storage destinations in addition to Singularity Data Lake, giving teams control over where their data lives.
   • Introduces Singularity Credits, a unified consumption currency for AI-powered actions across the Singularity Platform, with administrator-configurable guardrails on AI investigation and automated response usage.
   • Adds AI SIEM with built-in incident and case management, surfacing threats from ingested security data so analysts start from prioritized findings rather than raw logs.
   • Adds Hyperautomation to close the loop from verdict to remediation, running routine response actions and workflows at machine speed.

   +2 more show less

   • Adds Agentic Investigation, which investigates alerts end-to-end using native and third-party security data, gathering evidence and working toward a verdict autonomously.
   • Extends Singularity ASOC with Wayfinder expert-led MDRMDRManaged detection and response, an outsourced service that monitors security signals, investigates threats and helps respond to incidents. It combines specialist analysts with detection tools., threat hunting, and incident response services for teams that want human analysts operating alongside the automated system.

   7 details in Everything

6. announced Oct 21, 2026 · issue 116

   SentinelOne Prompt Security joins Lenovo ThinkShield, adding AI governance and shadow AI visibility to endpoint security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds SentinelOne Prompt Security to the Lenovo ThinkShield security portfolio, extending existing EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. coverage into AI governance for ThinkShield endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables security teams to identify sanctioned and shadow AI services in use across the workforce via SentinelOne Prompt Security.
   • Supports detection and response against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and AI misuse on Lenovo endpoints through SentinelOne Prompt Security.

   3 details in Everything

7. announced Oct 21, 2026 · issue 116

   SentinelOne launches Singularity ADR to discover, govern, and stop rogue or malicious AI agents at runtime across endpoints, cloud, and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Review the Unified Storyline for an AI agent-initiated incident to see the full chain from user prompt through MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server to process execution in one graph.
   📍In the Singularity Platform console, go to Incidents › select an ADR-flagged event › open the Storyline view to trace the user request, AI assistant, MCP server, and resulting file or process in a single execution graph.
   Contain a single rogue agent mid-action — for example one exfiltrating credentials — without stopping the broader agentic workflow.
   📍In the Singularity Platform console, go to ADR › Agent Inventory › locate the offending agent › select Contain Agent to stop its actions while leaving sibling agents in the workflow running.
   • Adds agent and MCP inventory: discovers every AI agent, tool, skill, connector, and MCP server across endpoints, SaaS, and cloud providers — sanctioned or not — along with the permissions each holds and the employees behind it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds multi-platform agent coverage across Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents, going beyond MCP gateway coverage.
   • Adds Agent Traces: every agentic event is monitored and sent to Singularity Data Lake for visualization, retention, search, and use in dashboards or detection rules.
   • Adds Unified Storyline that integrates ADR event behavior with traditional EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. behavior in a single execution graph, showing the user request, AI assistant, MCP server, and resulting file or process in one chain.
   • Adds real-time agent protection: in-line prevention that blocks prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., jailbreaks, credential exfiltration, and tool poisoning before the action executes; intent drift detection that flags the gap between what an agent was asked to do and what it actually did; and agent containment that stops a single agent mid-action without halting the rest of the workflow.

   +1 more show less

   • Adds policy and execution governance with allow/block controls for which agents run, who uses them, and what they can reach, including approval workflows for high-risk tools, plus agentic investigation and governed response that automatically completes an investigation and executes a response within customer-defined boundaries.

   6 details in Everything

8. announced Oct 21, 2026 · issue 116

   SentinelOne: Adds AI Data Pipelines with 50+ out-of-the-box connectors to third-party sources for cross-stack investigation and response.

   • Introduces Singularity Credits with administrator-set guardrails to bound the scope of every automated action to customer-defined limits.
   • Adds Singularity ADR early access program, open to certified PartnerOne partners today.
   • Introduces AI Recon Assessment Service for partners to lead AI security conversations with prospects.
   • Expands PartnerOne with new Implementation Engineer certifications covering SentinelOne Prompt Security, endpoint and identity protection, AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., AI Data Pipelines, and Hyperautomation.
   • Introduces Singularity Credits with administrator-set guardrails to bound the scope of every automated action to customer-defined limits.
   • Adds Singularity ADR early access program, open to certified PartnerOne partners today.
   • Introduces AI Recon Assessment Service for partners to lead AI security conversations with prospects.

   1 more in Everything

9. announced Oct 21, 2026 · issue 017

   SentinelOne launches Singularity ADR to discover, govern, and stop rogue or malicious AI agents at runtime across endpoints, cloud, and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Review the Unified Storyline for an AI agent-initiated incident to see the full chain from user prompt through MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server to process execution in one graph.
   📍In the Singularity Platform console, go to Incidents › select an ADR-flagged event › open the Storyline view to trace the user request, AI assistant, MCP server, and resulting file or process in a single execution graph.
   Contain a single rogue agent mid-action — for example one exfiltrating credentials — without stopping the broader agentic workflow.
   📍In the Singularity Platform console, go to ADR › Agent Inventory › locate the offending agent › select Contain Agent to stop its actions while leaving sibling agents in the workflow running.
   • Adds agent and MCP inventory: discovers every AI agent, tool, skill, connector, and MCP server across endpoints, SaaS, and cloud providers — sanctioned or not — along with the permissions each holds and the employees behind it.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds multi-platform agent coverage across Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents, going beyond MCP gateway coverage.
   • Adds Agent Traces: every agentic event is monitored and sent to Singularity Data Lake for visualization, retention, search, and use in dashboards or detection rules.
   • Adds Unified Storyline that integrates ADR event behavior with traditional EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. behavior in a single execution graph, showing the user request, AI assistant, MCP server, and resulting file or process in one chain.
   • Adds real-time agent protection: in-line prevention that blocks prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., jailbreaks, credential exfiltration, and tool poisoning before the action executes; intent drift detection that flags the gap between what an agent was asked to do and what it actually did; and agent containment that stops a single agent mid-action without halting the rest of the workflow.

   +1 more show less

   • Adds policy and execution governance with allow/block controls for which agents run, who uses them, and what they can reach, including approval workflows for high-risk tools, plus agentic investigation and governed response that automatically completes an investigation and executes a response within customer-defined boundaries.

   6 details in Everything

10. announced Oct 21, 2026 · issue 017

    SentinelOne launches Singularity ASOCASOCApplication Security Orchestration and Correlation — a category of platforms that aggregate findings from multiple testing tools, deduplicate and prioritize them, and automate remediation workflows so cyber tools can be managed at scale., bundling AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., Agentic Investigation, Hyperautomation, and AI Data Pipelines with 50+ third-party connectors into one SOC suite.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Introduces Singularity ASOC, a new integrated suite combining AI SIEM, Agentic Investigation, Hyperautomation, AI Data Pipelines, threat intelligence and IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. management, and case management in a single offering on the Singularity Platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds AI Data Pipelines with more than 50 out-of-the-box connectors to third-party sources spanning cloud, identity, email, network, SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally., data platforms, and vulnerability management — including AWS, Google Cloud, Microsoft, Okta, Cisco, Proofpoint, Netskope, Snowflake, Atlassian, Oracle, Tenable, Microsoft Defender XDR, Palo Alto Networks Prisma, Wiz, Darktrace, Sophos Central, and Check Point; supports ingestion via syslog and Kafka today, with OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. and generic API collection on the way for on-premises and custom source connectivity; and can filter and route data to third-party SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point. and storage destinations in addition to Singularity Data Lake, giving teams control over where their data lives.
    • Introduces Singularity Credits, a unified consumption currency for AI-powered actions across the Singularity Platform, with administrator-configurable guardrails on AI investigation and automated response usage.
    • Adds AI SIEM with built-in incident and case management, surfacing threats from ingested security data so analysts start from prioritized findings rather than raw logs.
    • Adds Hyperautomation to close the loop from verdict to remediation, running routine response actions and workflows at machine speed.

    +2 more show less

    • Adds Agentic Investigation, which investigates alerts end-to-end using native and third-party security data, gathering evidence and working toward a verdict autonomously.
    • Extends Singularity ASOC with Wayfinder expert-led MDRMDRManaged detection and response, an outsourced service that monitors security signals, investigates threats and helps respond to incidents. It combines specialist analysts with detection tools., threat hunting, and incident response services for teams that want human analysts operating alongside the automated system.

    7 details in Everything

11. announced Oct 21, 2026 · issue 017

    SentinelOne: Adds AI Data Pipelines with 50+ out-of-the-box connectors to third-party sources for cross-stack investigation and response.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Introduces Singularity Credits with administrator-set guardrails to bound the scope of every automated action to customer-defined limits.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Singularity ADR early access program, open to certified PartnerOne partners today.
    • Introduces AI Recon Assessment Service for partners to lead AI security conversations with prospects.
    • Expands PartnerOne with new Implementation Engineer certifications covering SentinelOne Prompt Security, endpoint and identity protection, AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., AI Data Pipelines, and Hyperautomation.
    • Introduces Singularity Credits with administrator-set guardrails to bound the scope of every automated action to customer-defined limits.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Singularity ADR early access program, open to certified PartnerOne partners today.
    • Introduces AI Recon Assessment Service for partners to lead AI security conversations with prospects.

    1 more in Everything

12. announced Oct 21, 2026 · issue 017

    SentinelOne Prompt Security joins Lenovo ThinkShield, adding AI governance and shadow AI visibility to endpoint security.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds SentinelOne Prompt Security to the Lenovo ThinkShield security portfolio, extending existing EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. coverage into AI governance for ThinkShield endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Enables security teams to identify sanctioned and shadow AI services in use across the workforce via SentinelOne Prompt Security.
    • Supports detection and response against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and AI misuse on Lenovo endpoints through SentinelOne Prompt Security.

    3 details in Everything

13. announced seen Sep 24, 2026 · issue 084

    Wayfinder Threat Hunting expands to AWS, Azure, and GCP cloud control planes with IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., S3, and cross-tenant hunt coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds Wayfinder Threat Hunting for Cloud with continuous, expert-led hunting across AWS, Azure, and GCP control-plane activity, enabled via existing Singularity Marketplace plugins for each cloud provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Covers cloud control-plane abuse, IAM privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., unauthorized access, and data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. — including hunts for IAM user enumeration, S3 bucket reconnaissance, root account logins, AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. cluster-admin credential access, suspicious IAM policy changes, AMI deregistration, telemetry destruction, and cross-tenant delegation changes.
    • Maps curated indicators and behavioral rules to MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. techniques and surfaces findings with enriched Purple AI summaries for triage.
    • Integrates threat intelligence from both SentinelOne and Google Threat Intelligence in a single hunting workflow across endpoints, identities, and cloud.
    • Adds Wayfinder Threat Hunting for Cloud with continuous, expert-led hunting across AWS, Azure, and GCP control-plane activity, enabled via existing Singularity Marketplace plugins for each cloud provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Covers cloud control-plane abuse, IAM privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., unauthorized access, and data exfiltrationdata exfiltrationMoving data out of a system or organization without authorization. It can happen through network transfers, removable media or other channels. — including hunts for IAM user enumeration, S3 bucket reconnaissance, root account logins, AKSAKSAzure Kubernetes Service, Microsoft's managed Kubernetes offering, which lets cyber tools offload cluster provisioning and scaling to Azure so engineers focus on workload logic instead of control-plane operations. cluster-admin credential access, suspicious IAM policy changes, AMI deregistration, telemetry destruction, and cross-tenant delegation changes.
    • Maps curated indicators and behavioral rules to MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. techniques and surfaces findings with enriched Purple AI summaries for triage.

    1 more in Everything

14. SentinelOne Extends Wayfinder Threat Hunting’s Continuous Coverage to AWS, Azure, and Google Cloud (2026-09-24) Sep 24, 2026 · issue 085

    SentinelOne: Customers already using Wayfinder Threat Hunting for Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. require no additional setup to gain Azure cloud control-plane coverage.

15. SentinelOne Expands Collaboration with AWS to Deliver Unified AI Governance (2026-08-04) Aug 4, 2026 · release notes

    SentinelOne expands AI governance integration with AWS Bedrock AgentCore for policy enforcement and threat detection.

    • Adds a new integration between SentinelOne Prompt Security / Singularity Cloud Security / Singularity AI SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. and Amazon Bedrock AgentCore to provide unified visibility, real-time policy enforcement, automated remediation, and root cause analysis for AI risks across AWS and multi-cloud environments.

    1 detail in Everything

16. SentinelOne Expands Wayfinder Frontier AI Services (2026-08-03) Aug 3, 2026 · release notes

    Wayfinder MDRMDRManaged detection and response, an outsourced service that monitors security signals, investigates threats and helps respond to incidents. It combines specialist analysts with detection tools. adds customizable Hyperautomation workflows for Slack, Jira, and Singularity integration.

    • Adds customizable Hyperautomation workflows to the Wayfinder MDR customer experience, enabling automatic creation of Slack channels and Jira tickets upon threat qualification
    • Extends Wayfinder Threat Hunting capability into identity environments with native support for Okta and Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. sources

    2 details in Everything