CyberArk & SentinelOne unite for enhanced threat defence

CyberArk has announced a new integration with SentinelOne aimed at improving endpoint threat detection and response capabilities to protect against privileged access misuse.

This collaboration brings together the strengths of CyberArk's Endpoint Privilege Manager and SentinelOne's Singularity Endpoint solution. Together, they aim to provide a comprehensive security framework with a focus on accelerating threat identification and response through unified AI-enhanced security analytics.

By integrating the platforms, CyberArk identity data will be incorporated into SentinelOne Singularity for AI Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) purposes. This integration seeks to enhance threat detection, response, and automation by providing greater context and correlation for mutual customers.

Melissa K. Smith, Vice President, Strategic Technology Partnerships and Initiatives at SentinelOne, stated, "SentinelOne recognises that cybersecurity is a team sport. Our integration with CyberArk brings together two market leaders in endpoint security and identity protection and empowers customers to reduce the risk of privileged identity attacks in an open, flexible way."

Nigel Miller, Vice President and Deputy Chief Information Security Officer at Maximus, a prominent global health and human services provider, commented on the integration. He said, "We use SentinelOne and CyberArk as part of our approach to building resilient cyber defences. How we interact with our ecosystem and serve our customers has become more digital and interlinked."

Miller said, "As a result, all organisations – including Maximus – face near-constant attacks on the increasing number of endpoints, identities and cloud workloads. Defence-in-depth is the only security strategy that makes sense. The integration between SentinelOne and CyberArk platforms will help us quickly understand, identify and respond to credential theft attempts and prevent privilege access misuse – all in a highly visible, actionable way."

The integration of these platforms offers organisations a means to detect and prevent various endpoint attacks such as ransomware and credential theft. This is achieved through privilege and resource access control, continuous monitoring, and comprehensive threat intelligence. Organisations can thus maintain user productivity while implementing strong security measures like automatic policy-based program elevation and the removal of standing admin rights.

Clarence Hinton, Chief Strategy Officer at CyberArk, explained, "In a multi-cloud world, organisations are looking for new ways to secure identities and must prioritise implementing identity-centric endpoint security controls and system hardening to prevent cyberattackers from gaining a foothold. Through our integration with SentinelOne, we help customers detect and prevent downstream attacks, like privileged credential theft and ransomware. This collaboration uses the power of AI to bring together the complementary strengths of EDR and endpoint identity security, enhancing visibility and boosting defences against attacks that compromise and exploit privileged access."

This new integration seeks to provide simplified deployment and operations, thereby accelerating time to value through SaaS-based solutions, aiming to benefit organisations operating in increasingly complex digital environments.