In addition to Linux VMs on AWS, we also use Windows Server VMs in our on-prem data center. Can SentinelOne handle this use case?
Yes. We automate deployment of our Sentinel agents to your VMs, no matter their location and in any combination.
Singularity Cloud Workload Security.
Simplifying security of cloud VMs and containers,
no matter their location, for maximum agility,
security, and compliance.
Simplifying security of cloud VMs and containers,
no matter their location, for maximum agility,
security, and compliance.
Automated. Agile. Secure.
Your hybrid cloud footprint is complex. Cloud workload protection shouldn’t be.
Cloud VM
Security
Real-time, runtime, everytime. Bring purpose-built autonomous, enterprise-grade EPP and EDR to VMs spanning AWS, Azure, and Google Cloud.
Runtime Container Security
Automated, frictionless, scalable deployment. Unmatched protection, detection, and response for EKS, AKS, GKE, and self-managed Kubernetes.
ONE Multi-Cloud
Console
A single console managing security for all cloud infrastructure, user endpoints, and IoT devices.
AI-Powered Cloud Workload Protection
- Static AI blocks and quarantines malware in real-time
- Behavioral AI stops previously unknown fileless attacks in real-time
- Protects Linux, Windows servers, VMs
- Runtime container protection without container interference
- Automated Application Control preserves immutability of containerized workloads
Enterprise-Grade ActiveEDR®
- Full EDR visibility and prevention in one Sentinel agent. Container coverage too.
- Storyline™ auto-correlated events to MITRE ATT&CK® tactics and techniques.
- Patented 1-Click Remediation and Rollback.
- Robust, secure remote shell for deep forensic analysis.
- Complete container visibility with one agent per node and no pod instrumentation.
Enterprise Management & Deployment
- Linux Sentinels operate exclusively in user space – no tainted kernels, no kernel panics. The stability devops needs.
- Auto-deploy Kubernetes Sentinel, with auto-scaling, to EKS, AKS, and GKE clusters.
- Auto-deploy Linux and Windows Server Sentinels to AWS EC2, Azure VM, and Google Compute Engine.
- MITRE ATT&CK Phase 2 Windows Sentinel performance: Fewest misses + Most correlations.
- CSP metadata integration, for dynamic asset grouping by tags, account IDs, etc.
SentinelOne Singularity Cloud FAQ
In addition to Linux VMs on AWS, we also use Windows Server VMs in our on-prem data center. Can SentinelOne handle this use case?
Why is “no kernel modules” for your Linux Sentinel agent so important?
Organizations that seek Linux stability avoid kernel module implementations that “taint” the kernel of the OS. The benefits include: (1) avoiding kernel panic risks; and (2) freedom for you to update your Linux VM image at will, without fear of conflict with the agent. (3) No invalidation of support from distro vendors
We use AWS’s managed Kubernetes service, EKS, for our containerized microservices. Does SentinelOne secure k8s clusters on EKS?
Yes, we also support managed k8s services from Azure (AKS) and Google Cloud (GKE), as well as self-managed k8s.
Are you telling me I have to deploy an agent to each of my containers?
Not at all. Our deployment is automated and resource-efficient: just 1 agent per worker node and without any sidecar or pod instrumentation. Deployed as a daemonset, our agent auto-scales with your k8s clusters. Clean and simple.
What benefits does EPP and EDR buy me for my containers? I can scan container images even before they run.
Runtime container protection provides security for zero-day malware, for detection of malicious fileless behaviors, and in cases where a vulnerability was found after the image was scanned pre-production. Runtime EPP and EDR give you the same IR and threat hunting capability you have come to expect from your endpoint security, all without any container interference. Storyline™ and EDR data retention options catalyze root cause analysis, so you can get back in business and prevent recurrence.
Can you help me bill my various customers / business units according to their actual security spend? Each business unit runs of a separate cloud account ID.
Yes. Using the cloud service provider metadata, you can automatically assign the assets to groups based on their account ID. Any new instance that spins up with that account ID will be dynamically associated with the relevant group.
Ready to Take a Look?
Experience cybersecurity that prevents threats at faster speed, greater scale, and higher accuracy.
Explore SentinelOne
Related Resources
The World’s Leading and Largest Enterprises Trust SentinelOne
Including 4 of the Fortune 10 and hundreds of the global 2000
Backed by the Industry
Tried and Trusted by the Industry’s Leading Authorities, Analysts, and Associations.
Endpoint Protection Platforms
- A Leader in the 2021 Magic Quadrant for Endpoint Protection Platforms
- Highest Ranked in all Critical Capabilities Report Use Cases
Record Breaking ATT&CK Evaluation
- No missed detections. 100% visibility.
- Most Analytic Detections 2 yrs running
- Zero Delays. Zero Config Changes.
98% of Gartner Peer Insight™
- 4.9/5 Rating for Endpoint Protection Platforms and Endpoint Detection and Response Solutions
- 96% Recommend SentinelOne
Explore the Full Power of Singularity
Cloud delivered, software-defined network discovery designed to add global network visibility and control with minimal friction.
Endpoint security bedrock for organizations replacing legacy AV or NGAV with an effective EPP that is easy to deploy and manage.
Made for organizations seeking the best-of-breed cybersecurity with additional security suite features.
Made for organizations seeking enterprise-grade prevention, detection, response and hunting across endpoint, cloud, and IoT.
