INSERTING and REPLACING SentinelOne® Unveils Future of Autonomous Security
SentinelOne (NYSE: S) unveils new autonomous security capabilities in the Singularity Platform at RSA 2024, democratizing advanced cybersecurity operations. The company integrates Mandiant Threat Intelligence to enhance proactive security insights and automate threat hunting. Purple AI, a sophisticated AI security solution, empowers security teams with AI-powered anomaly detection, automated alert triage, response recommendations, and 24/7 auto-investigations. The Singularity Operations Center consolidates security management, alert triage, and workflows, providing unified security console. The Singularity Data Lake processes telemetry data fast, enabling quick threat identification and action. The combination of Purple AI, Singularity Platform, and Singularity Data Lake revolutionizes security operations and simplifies analysts' experience.
SentinelOne (NYSE: S) introduces new autonomous security capabilities in the Singularity Platform at RSA 2024, democratizing advanced cybersecurity operations.
The integration of Mandiant Threat Intelligence enhances proactive security insights and automates threat hunting.
Purple AI offers AI-powered anomaly detection, automated alert triage, response recommendations, and 24/7 auto-investigations, empowering security teams.
The Singularity Operations Center provides a unified security console, consolidating security management, alert triage, and workflows.
The Singularity Data Lake processes telemetry data rapidly, enabling quick threat identification and action.
The level of automation and AI integration may raise concerns about potential job displacement for security analysts.
Company unleashes power of Singularity™ Data Lake and Purple AI to transform security operations through new autonomous capabilities in the Singularity Platform.
- Mandiant Threat Intelligence: Building on our existing OEM partnership, the Singularity platform integrates leading threat intelligence from Mandiant (part of Google Cloud) to provide the latest and most comprehensive security insights. This includes detailed adversarial TTPs, enrichment of all security alerts and enhancing threat hunting capabilities. Intelligence will also be accessible through Purple AI, boosting the platform’s proactive and automated functions in private preview later this quarter, with general availability later this year.
The updated release reads:
SENTINELONE® UNVEILS FUTURE OF AUTONOMOUS SECURITY
Company unleashes power of Singularity™ Data Lake and Purple AI to transform security operations through new autonomous capabilities in the Singularity Platform.
SentinelOne (NYSE: S), a global leader in AI-powered security, today announced new capabilities within its Singularity Platform designed to democratize advanced cybersecurity operations. The company unveiled the capabilities, which make top-tier Security Operations Centers (SOC) a reality for companies of all sizes, at RSA 2024.
“Imagine a future where security solutions not only help enterprises respond to threats, but anticipate and mitigate them before they lead to a security incident. This is the future we are creating at SentinelOne,” said Tomer Weingarten, CEO of SentinelOne. “Our solutions are designed to transform how security teams manage the complexity of their environments and defend threats. With our latest innovations, customers can move from the reactive operating paradigm of today and enable a predictive and autonomous future.”
With today’s news, SentinelOne is democratizing cybersecurity through AI and automation, enabling every enterprise to operate at the same scale, speed and sophistication, regardless of budgets and resources. When combined with the visibility of the Singularity Platform and the breadth and scale of the Singularity Data Lake, Purple AI provides an always-on, expert analyst to augment the skills of any security team and supercharge their capabilities.
“It’s no secret that security teams are overwhelmed with data, alerts and labor-intensive triage,” said Ric Smith, Chief Product and Technology Officer, SentinelOne. “Purple AI doesn’t just do what you ask it to, it does what you need it to.”
Beyond a chatbot or virtual assistant, Purple AI is an advanced AI security solution that not only creates complex data queries from natural language, but anticipates what security analysts need to do and recommends next steps. Key features demonstrated and in use today include:
- AI-powered anomaly detection: Purple AI surfaces correlated risks from integrated log sources.
- Automated alert triage: The technology analyzes trillions of anonymized data signals at a global scale to evaluate how security analysts assess and respond to similar alerts and provides automated verdicts and recommended actions.
- AI-powered response recommendations and hyper automation rules: Using global similarity analyses, Purple AI provides intelligent response recommendations based on how others have responded to similar alerts and smart recommendations to turn those actions into hyper automation rules to put response actions in autonomous mode.
- 24/7 Auto-investigations: Through zero-touch auto-investigation capabilities, Purple AI eliminates the need for human-driven investigations and empowers security teams to focus on validating and mitigating threats at scale.
- Mandiant Threat Intelligence: Building on our existing OEM partnership, the Singularity platform integrates leading threat intelligence from Mandiant (part of Google Cloud) to provide the latest and most comprehensive security insights. This includes detailed adversarial TTPs, enrichment of all security alerts and enhancing threat hunting capabilities. Intelligence will also be accessible through Purple AI, boosting the platform’s proactive and automated functions in private preview later this quarter, with general availability later this year.
All current and future Purple AI capabilities are deeply embedded across the Singularity Platform and accessible via a new unified security console, the Singularity Operations Center.
“For years, security vendors have claimed unified dashboards and a single pane of glass. SentinelOne’s Singularity Operations Center delivers on that promise and represents a massive leap forward in simplifying the analyst experience by unifying alert triage and workflows across all event collections,” Smith said.
Now generally available, the Operations Center consolidates security management with unified alerts, inventory management, correlation engine, and a contextualized Singularity Graph to accelerate detection, triage, and investigation.
“For the first time, security analysts of any level can benefit from the tools, velocity, and performance once reserved for the largest organizations and budgets,” Smith added.
Both Purple AI and the Singularity Platform have the unified Singularity Data Lake at their core. Built on the Open Cybersecurity Schema Framework (OCSF), source telemetry is rapidly ingested from any source, normalized, processed, and stored with critical issues escalated for analyst attention.
“Having all of the data is one problem. Being able to process it fast enough to find the insights with enough time to action them is something else entirely,” Smith said. “The combination of the Singularity Data Lake and Purple AI removes much of this burden through automation, empowering the SOC to focus on the most critical task - keeping the organization safe.”
Democratizing the SOC
And analysts see it as game changing.
“The combination of AI, data and autonomous capabilities in a single platform is powerful,” said Steve McDowell, Chief Analyst, NAND Research. “Generative AI gives you a window into everything that’s happening across your environment and allows you to have a real, data-driven conversation with your infrastructure. Combining that with a unified data lake and platform-driven approach can accelerate and simplify how you protect the enterprise.”
Act Now to Secure Tomorrow
To learn more about SentinelOne’s advanced, AI-powered cybersecurity platform and how it can help your organization secure tomorrow, click here. To see the new Purple AI capabilities in action, visit Booth N-5863.
About SentinelOne
SentinelOne is a global leader in AI-powered security. SentinelOne’s Singularity™ Platform detects, prevents, and responds to cyber attacks at machine speed, empowering organizations to secure endpoints, cloud workloads, containers, identities, and mobile and network-connected devices with speed, accuracy, and simplicity. Leading enterprises from the Fortune 10 to Global 2000 trust SentinelOne to secure tomorrow. To learn more, visit www.sentinelone.com
View source version on businesswire.com: https://www.businesswire.com/news/home/20240507233876/en/
Karen Master
SentinelOne
karen.master@sentinelone.com
Source: SentinelOne
FAQ
What new capabilities has SentinelOne unveiled in the Singularity Platform?
What key features does Purple AI offer?
What does the Singularity Operations Center provide?
What is the role of the Singularity Data Lake in security operations?
