SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Story image

SentinelOne unveils AI-driven innovations for Singularity Platform

Tue, 6th Aug 2024

SentinelOne has announced a series of new innovations for its Singularity Platform, which leverage advanced generative AI technology. These advancements are integrated within a unified agent and are designed to enhance threat prevention, detection, and response. The developments aim to offer customers a more straightforward and unified approach to securing their operations.

Ric Smith, Chief Product and Technology Officer at SentinelOne, commented on the new features. "With our latest innovations, we are enhancing the ability of security teams to see everything, already prioritised and contextualised, so that they can stay ahead of attacks and strengthen their security posture across every surface from a single platform. This is the future of enterprise security, and SentinelOne is leading the way in delivering it today."

The Singularity Platform integrates AI-powered technology, expert insights, and third-party data to provide robust security across endpoints, identities, and cloud workloads. Embedded within the platform is Purple AI, which SentinelOne describes as the first AI security analyst. Purple AI offers natural language alert summaries and alert query support, enabling security analysts to easily view and understand alert details across their environments. This functionality allows analysts to query alert information using natural language and receive immediate responses within their investigation notebooks.

Among the new features is Cloud Infrastructure Entitlement Management (CIEM), part of the Singularity Cloud Native Security module. CIEM assists organisations in managing and controlling access to cloud resources. The tool aims to detect risky and over-privileged human and machine identities, identify toxic permission combinations, and mitigate risks from privilege escalation. Security analysts can deploy pre-built, advanced detections created by SentinelOne's research team, potentially saving time and resources.

Another key innovation is the unified agent which simplifies installation, deployment, and management across endpoint security and identity use cases. The agent includes built-in deception features that provide fake credentials to attackers when passwords are extracted, thereby enhancing endpoint protection. SentinelOne's Live Security Updates enable rapid updates to endpoint protections, which could be crucial for staying ahead of attacker innovations. The platform also includes a new compromised credential protection feature, monitoring the dark web for security breaches related to third-party vendors and checking for weak or banned passwords uploaded by customers.

SentinelOne has also introduced Extended Security Posture Management (xSPM), a feature designed to provide real-time insights into vulnerabilities and misconfigurations across cloud, endpoint, identity, and third-party risks. The xSPM feature offers intelligent scoring and contextual assessment, helping security teams prioritise risks more effectively. Integrated guidance and native remediation functions are aimed at accelerating decision-making and improving overall security posture.

The Singularity Platform has previously shown its effectiveness in industry evaluations, leading the MITRE Engenuity ATT&CK Evaluations for Enterprise. For three consecutive years, SentinelOne has been named a Leader in the Gartner Magic Quadrant for Endpoint Protection Platforms. Additionally, the company has received high customer recommendations, with a 95% recommendation rate on Gartner Peer Insights.

Follow us on:
Follow us on LinkedIn Follow us on X
Share on:
Share on LinkedIn Share on X