SentinelOne Expands Cloud Threat Hunting to AWS, Azure, Google Cloud…

Event summary

SentinelOne extended its Wayfinder Threat Hunting service to cover AWS, Azure, and Google Cloud, adding cloud control-plane monitoring to its existing endpoint and identity coverage.
The new capability detects cloud-specific threats like IAM privilege escalation, unauthorized access, and data exfiltration across major cloud providers.
Wayfinder Threat Hunting for Cloud is generally available today to existing Wayfinder customers, with no additional setup required for Azure environments using Microsoft Entra ID.
The service combines SentinelOne's AI-powered telemetry with human-led threat hunting, using threat intelligence from both SentinelOne and Google Threat Intelligence.

The big picture

As cloud adoption accelerates, security providers are expanding their offerings to cover the entire attack surface. SentinelOne's move to include cloud control-plane monitoring in its Wayfinder Threat Hunting service reflects the growing recognition that cloud environments present unique security challenges. The integration of threat intelligence from multiple sources highlights the increasing importance of collaborative security efforts in defending against sophisticated attacks. This expansion positions SentinelOne to compete more effectively in the rapidly evolving cloud security market.

What we're watching

Cloud Security Dynamics: How the expansion of Wayfinder Threat Hunting to cloud environments will affect SentinelOne's competitive positioning against specialized cloud security providers.
AI Integration: Whether SentinelOne can sustain its advantage by effectively combining AI-powered telemetry with human-led threat hunting across increasingly complex attack surfaces.
Market Adoption: The pace at which enterprises will adopt continuous threat hunting capabilities for cloud control planes as cloud-based attacks become more prevalent.