The new Claude-based services, the extended partnership with LevelBlue and Wayfinder's MDR workflows are the latest features in SentinelOne's 'human+AI' managed defense offering
SentinelOne (NYSE: S), a global leader in AI-powered cybersecurity, unveiled the expansion of Wayfinder Frontier AI services to help customers block AI-based threats before they can materialize. Announced for the first time in April 2026, the new integrated suite of services brings together Anthropic's latest models, SentinelOne's elite cyber experts, and strategic partners like LevelBlue, to ensure continuous, intelligence-driven detection, prioritization, and remediation across the customer's attack surface.
The offer is the latest innovation from Wayfinder, the SentinelOne division dedicated to managed services. Organizations of all sizes continue to grapple with the challenge of what cutting-edge AI models represent when it comes to identifying and relating potential vulnerabilities, exploits and latent zero-days within their enterprise infrastructure. With Wayfinder Frontier AI Services, SentinelOne helps organizations quickly distinguish relevant data from the rest, identifying and validating realistically exploitable threats against a growing list of new vulnerabilities and misconfigurations. Customers are given clear, prioritized guidance on how to resolve issues, making compromise assessments immediately actionable. As a result, security teams can maintain an operational advantage by leveraging the power of advanced AI to strengthen defenses before these same models can be used against them.
“Frontier AI models are powerful enough to identify actual exposure pathways, but they still require expert professionals to verify what is real, what is a false alarm, and what next actions to take,” said Steve Stone, Chief Customer Officer at SentinelOne. "This is exactly what Wayfinder Frontier AI services offer. Our analysts work closely with Anthropic's latest models, integrated directly into the telemetry data customers already have, so that nothing is lost between detection and action."
The now expanded Wayfinder Frontier AI services leverage Anthropic's latest models. SentinelOne also plans to extend this functionality to OpenAI's GPT-5.5-cyber and GPT-5.6 models, as well as models from other cutting-edge AI labs, in order to offer a fully multi-model approach in the future.
LevelBlue becomes Premier Partner for Wayfinder Frontier AI services
Upon release of the commercially available version, SentinelOne named LevelBlue Wayfinder's Premier Incident Resolution Partner. The expanded partnership integrates the expertise of Wayfinder's cybersecurity experts, bringing distinctive, world-class remediation services. SentinelOne customers benefiting from threat assessments and prioritized findings from Wayfinder Frontier AI services are offered close coordination with LevelBlue experts to develop and execute prioritized, objective-based remediation programs. As a result, security teams can reduce risk and enhance long-term resilience in their software and application environments.
“Finding a proven vulnerability is only half the battle,” said Spencer Lynch, Senior Vice President of Professional Services at LevelBlue. "What matters is understanding which ones are actually relevant, providing developers with an effective solution, and verifying that it works even after deployment. Pairing Wayfinder's findings on exploitable vulnerabilities with LevelBlue's troubleshooting expertise gives customers a comprehensive tool from discovery to resolution, not just a longer list of issues."
More Wayfinder innovations showcased at Black Hat
- Workflow Wayfinder MDR – This new feature integrates customizable hyperautomation workflows into the MDR service. SentinelOne Wayfinder MDR analysts verify and report threats; customers define automated response. From activating Slack channels and Jira tickets to executing direct response actions in Singularity™ and third-party software, Wayfinder customers maintain control over how their SOC workflows activate and operate upon receiving a Wayfinder-qualified threat. The new features were previewed at Black Hat and will be available to the market as early as August.
- Threat hunting managed on an expanded attack surface – Wayfinder's AI-powered threat hunting service extends to identity management environments. Wayfinder Threat Hunting for Identity covers Okta and Microsoft Login ID. From low-and-slow endpoint attack techniques to MFA fatigue and session hijacking attacks, each result is validated by analysts before reaching the customer's SOC. The new features are available to everyone and are included at no additional cost to existing Wayfinder Threat Hunting customers.
