Our No.1 for virus protection is Sentinel One

Table of contents

When it comes to virus protection, our customers have been relying on our experience and our intuition to jointly select, maintain and improve the right product for years. We use a number of procedures that are based on practical experience and differentiate each customer from the next. The same industry does not mean the same requirements (production companies, service providers, office workplaces, healthcare and home office) always present us with new challenges, which we overcome together with our partner SentinelOne.

Some of you may be thinking, what or who is SentinelOne (abbreviated S1), those of you who have known our company NOBUGS for a while know that we don't use off-the-shelf products and are constantly looking at what is developing and changing in the market and the world to help our customers get ahead and gain the competitive edge they need.

We came across SentinelOne in 2018 and were convinced by the manufacturer through local tests over several POCs (proof of concept = test before launch) for us and our customers. With our own viruses, Trojans, ransomware, exe exploits and much more, we put the manufacturer and its antivirus programme through their paces and found them to be the best. The rollback function was certainly one of the best features, but more on that later.

Here is some information and data on the virus protection from S1:

SentinelOne was founded to develop a completely new approach to endpoint protection. It is an antivirus solution that uses AI (Artificial Intelligence) and machine learning to prevent known and unknown threats. SentinelOne understands how important endpoints are. When attackers go after privacy, intellectual property, infrastructure and shared work practices, they are attacking more than just data. You are under attack, and so are your assets. That's why SentinelOne is committed to keeping its revolutionary platform one step ahead of threats. You could call it the antivirus of the future.

In the new Deloitte Technology Fast 500 ranking, SentinelOne is listed as the fastest growing company in Silicon Valley and is also the only cyber security provider in the top 10. Overall, Deloitte lists the endpoint security specialist in seventh place in its prestigious ranking, recognising SentinelOne as a growth leader in North America.

‘As one of the newest providers of next-generation endpoint security solutions, we are thrilled to receive this recognition, thanks in large part to our differentiated solution and world-class team,’ said Tomer Weingarten, co-founder and CEO of SentinelOne. ‘The cyberattacks of today and tomorrow are targeting all types of surfaces - from traditional endpoints to cloud workloads and IoT devices. Our patented defence capabilities and the unique transparency of our technology effectively protect even automated and sophisticated adversaries and ensure effective protection of all corporate assets. We will continue our mission to protect the world's leading companies and strengthen them in the fight against cyberattacks in 2020.’

According to the company Gartner (forensic analysis company for IT) 2019 in August again ranked among the visionaries

How we offer S1 - EPP:

On-Prem (classic on-site as your own VM, perfectly optimised to your infrastructure for your company, recommended by us from 500 clients)

  • The best decision when it comes to medium-sized companies.

On-site performance and the option of integrating additional local services and applications.

NOBUGS Cloud (hosted on the NOBUGS IT infrastructure distributed across 4 data centres in Tyrol and Vorarlberg - as of. August 2020) from 1 to 500 clients

  • Local IT doesn't have to worry about anything - we take care of managing, securing and updating the S1 infrastructure for you.
  • We now use S1 on a wide variety of platforms and systems, customised and perfected for our customers and their applications.
  • From Docker infrastructures and RedHat systems
  • Windows or Linux based terminal servers
  • We also use NextCloud and Fortinet at the application level.

S1 Cloud (hosted by the manufacturer personally)

  • No size restriction
  • Perfect for both small and large companies

SentinelOne briefly summarised from the perspective of NOBUGS:

As for the virus protection itself, S1 is not a classic AntiVirus or EP (EndPoint Protection) but an EPP (EndPoint Protection Platform). It is an AI-based antivirus protection that interacts with several solutions and works together to react quickly before damage occurs.

We appreciate the modern set-up of the S1 software, which allows us to synchronize different software versions without having to understand their complex structure at the beginning and to check each time how this function or setting affects the entire system structure in the company. This saves a lot of time and can be very helpful for systems where it is not always possible to update the software immediately.

The rollback function is one of the best, as you can imagine here is an example:

A system is hit by a threat; instead of frantically searching for solutions or existing backups, a rollback can be started for this system at the beginning and all changes made to the system by this virus or threat are undone. You can think of this as a data backup, but much more precise, as only files that have been compromised by this threat are restored.

This means that the affected department can continue to work at the beginning and the IT department's search can take place in the background without users and systems being prevented from working.

We have summarised and explained the other functions:

EDR (Endpoint Detection Response) This is where the criminal act, whether by the virus or by an attacker, is displayed. Better information is collected for forensic analyses to identify where the attacker has maliciously penetrated the system and what has been changed.

SOC (Security Operation Center) Can be displayed or understood as the entire management console of S1

MDR (Managed Detection Response) 24/7 monitoring and support from the S1 and NOBUGS team - 24 hours a day, 7 days a week, our NOBUGS and S1 team monitors your EndPoint infrastructure.

SIEM (Security Information Event Management) Can be seen as a central administration centre where information converges. For example, applications such as a firewall collect data and information about possible virus infections in order to detect and close the smallest vulnerabilities and thus prevent further compromise.

For all those who want to know how a virus is currently removed with an AI:

YouTube

By loading the video, you accept YouTube's privacy policy.
Learn more

Load video

YouTube

By loading the video, you accept YouTube's privacy policy.
Learn more

Load video

Customers who use S1 as virus protection and are delighted.

Austria

  • Rauch
  • ÖBB
  • Ledermair Transport service

International

  • Aston Martin
  • AutoDesk
  • AVX

If you are curious and would like to protect or combine your application with S1, let's talk.

We are here for you.

NOBUGS IT GmbH

Bergwerkstrasse 45 | 6130 Schwaz
Knappenweg 21 | 6020 Innsbruck

Phone: +43 (0) 5 07 22 – 0

office@nobugs.gmbh

We protect Windows, Linux and Apple devices with SentinelOne

You can find more information about SentinelOne here:

Youtube channel:

https://www.youtube.com/c/Sentinelone-inc/videos

German Twitter link:

https://twitter.com/sentinelonede?lang=de

SentinelOne Homepage:

https://www.sentinelone.com