SentinelOne

About SentinelOne

SentinelOne is an autonomous endpoint protection platform that protects organizations against diverse modes of attacks at any stage in the threat lifecycle, delivering the defenses needed to prevent, detect, and undo both known and unknown threats. Key features include machine learning, real-time forensics, behavioral attack detection, and automated policy-base responses, along with complete visibility into all activity.

SentinelOne’s tools for endpoint security protection help protect against all threat vectors using pre-execution, on execution, and post-execution capabilities. Pre-execution features work by denying endpoint access to known and unknown malware, and blocking threats by combining dynamic whitelisting and blacklisting with advanced static prevention. On execution features detect and contain threats using a lightweight agent-based detection system, and stops their progress by disconnecting any infected devices from the network. The system monitors all activity and applies machine learning for the dynamic detection of attacks including more advanced attacks such as exploits, fileless, and sophisticated malware.

Post-execution features help immunize endpoints by quickly rolling-back modifications after stopping attacks, and provide users with a 360-degree view of endpoints and threats along with powers forensics and policy enforcement. SentinelOne is a scalable, cloud and on-premise tool that comes with a robust API, and currently integrates with 15 third party systems such as Splunk, Fortinet, Okta, BigFix, and Tanium.