Start-up offers up endpoint detection and response for behavior-based malware detection

Start-up offers up endpoint detection and response for behavior-based malware detection

SentinelOne wants to compete with full endpoint defense suites.

Start-up SentinelOne is offering security software for behavior-based malware detection intended to augment, not replace, the type of full anti-virus endpoint protection suites that typically also have signature-based defense, a firewall and other features.

However, the Mountain View, Calif.-based start-up, which has research and development roots in Israel and has received $14.5 million in venture-capital funding, does harbor ambitions to break into the multi-billion dollar anti-virus market to compete with the kind of full-featured endpoint protection suites offered today by the major vendors such as Symantec and McAfee.

+ ALSO ON NETWORK WORLD Start-up fights attacks on SDN, virtual-machine networks +

Tomer Weingarten, co-founder and CEO of SentinelOne, says the goal is to have ready by year end the kind of full-featured anti-virus protection suites that McAfee, Symantec and other major anti-malware vendors typically offer. But currently, SentinelOne's first product, called SentinelOne EDR (for endpoint detection and response) relies on behavior-based analysis of malware with its so-called "predictive threat execution inspection engine" to block attacks.

"This endpoint protection stops attacks as they're happening with full forensics reports," says Weingarten, who co-founded the start-up last year with its chief technology officer, Almog Cohen (the earlier name for the start-up was Sentinel Labs). The first product, SentinelOne EDR, is available now for Windows-based and Mac OS X machines, including servers, with versions for iOS and Android devices now in beta.

The software's defensive approach is to analyze every application process in real time to detect attack patterns and block them. Weingarten says the closest competitors are FireEye, which acquired Mandiant, and Cyvera, which was acquired by Palo Alto Networks. The focus is on detecting stealthy attacks, often called "advanced persistent threats."

SentinelOne EDR is getting plaudits from Yahoo chief information security officer, Alex Stamos. "I believe Sentinel represents the future of APT detection," said Stamos who has evaluated it.

The $14.5 million in venture-capital funding for SentinelOne was provided by firms that include Tiger Global, Accel partners, Data Collective, Granite Hill Capital Partners and the Westly Group.

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags malwaresymantecmcafeeSentinel Labs



Join key decision-makers within Environmental, Social, and Governance (ESG) that have the power to affect real change and drive sustainable practices. SustainTech will bridge the gap between ambition and tangible action, promoting strategies that attendees can use in their day-to-day operations within their business.

EDGE 2023

EDGE is the leading technology conference for business leaders in Australia and New Zealand, built on the foundations of collaboration, education and advancement.


ARN has celebrated gender diversity and recognised female excellence across the Australian tech channel since first launching WIICTA in 2012, acknowledging the achievements of a talented group of female front runners who have become influential figures across the local industry.

ARN Innovation Awards 2023

Innovation Awards is the market-leading awards program for celebrating ecosystem innovation and excellence across the technology sector in Australia.

Show Comments