SentinelOne and Cloudflare Expand Partnership to Deliver Real-Time Threat Detection and Automated Response for Enterprises

SentinelOne (NYSE: S) and Cloudflare (NYSE: NET) expanded their partnership on March 16, 2026 to integrate Cloudflare Logpush telemetry with SentinelOne’s Singularity AI SIEM.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

SentinelOne’s Singularity AI SIEM integrates Cloudflare Logpush telemetry to strengthen enterprise security posture

MOUNTAIN VIEW, Calif.--(BUSINESS WIRE)-- SentinelOne® (NYSE: S), the AI-native cybersecurity leader, and Cloudflare Inc (NYSE: NET), the leading connectivity cloud company, are expanding their partnership to give joint customers AI-driven insights in an intuitive, unified experience. The combination of Cloudflare’s global infrastructure network and SentinelOne’s Singularity™ AI SIEM will strengthen real-time threat detection and response for enterprises of all sizes. Through a new integration, joint customers can automatically apply AI-driven correlation from Cloudflare Logpush telemetry and SentinelOne’s native signals across endpoint, cloud, identity, and AI. As a result, security teams can automate detection, investigation, and response to threats as they move from the internet edge into adjacent environments.

Security data is exploding and attack surfaces are expanding. To keep up, organizations are fundamentally rethinking autonomous threat detection. Security teams are moving beyond disjointed point products and siloed signals. Instead, they need integrated platforms that correlate data across edge, endpoint, cloud, identity, and more. This unified approach reduces complexity and improves outcomes. Most importantly, it frees security analysts to focus on the threats that actually matter.

The new integration brings Cloudflare's Zero Trust and edge network telemetry data – including Gateway, Access, and WAF logs – directly into SentinelOne's Singularity Platform. For joint customers, this creates a single, unified command center for better visibility, context, threat investigation and response for modern threats and sophisticated adversarial techniques. Customers can configure Singularity Platform in just a few clicks to become the native Logpush destination within the Cloudflare Dashboard – delivering immediate time-to-value.

"Our expanded partnership with Cloudflare shows what's possible when two innovators come together with a common purpose,” said Melissa K. Smith, SVP, Global Strategic Partnerships & Initiatives, SentinelOne. “By unifying Cloudflare’s global network telemetry and AI-driven insights with the intelligence of our AI SIEM, we are enabling security teams to automate correlation and response across edge and enterprise, reducing manual effort and helping analysts focus on the threats that matter most. Together, we are delivering protection that is stronger, easier to operate and designed to scale with the needs of modern security teams."

“Expanding our partnership with key technology alliance partners like SentinelOne is core to how we are further interconnecting our global infrastructure network to secure even more customers," said Tom Evans, Chief Partner Officer at Cloudflare. "Organizations worldwide are facing a growing number of threat signals, and now with Cloudflare and SentinelOne's intelligence, they can automate that action and analysis from a single platform. We want to make sure that organizations can clearly see the AI-driven correlations and enforce proper protections to improve their security posture."

SentinelOne’s Singularity AI SIEM provides security teams with the essential technology that drives the vision for an Autonomous SOC, that is built to operate on live data, not static logs. With a built-in data pipeline, AI SIEM applies intelligence directly to streaming telemetry, identifying and filtering risk earlier in the attack lifecycle to reduce noise and enable faster, more efficient detection.

By fusing real-time telemetry with Agentic AI and Hyperautomation, Singularity AI SIEM automates investigation and remediation end-to-end, removing manual steps between detection and action. The result is a SOC that moves from reactive alert handling, to proactive automated response, enabling analysts of any skill level to investigate and neutralize threats with speed and confidence.

About SentinelOne

SentinelOne is a leading AI-powered cybersecurity platform. Built on the first unified Data Lake, SentinelOne empowers the world to run securely by creating intelligent, data-driven systems that think for themselves, stay ahead of complexity and risk, and evolve on their own. Leading organizations—including Fortune 500 and Global 2000 companies, as well as prominent governments— trust SentinelOne to Secure Tomorrow™. Learn more at sentinelone.com.

Category: Investors

View source version on businesswire.com: https://www.businesswire.com/news/home/20260316104955/en/

Media Contact:
Regan DePinto
press@sentinelone.com

Source: SentinelOne

Key Terms

ai siem technical

AI SIEM is a security system that collects and watches computer logs and alerts across an organization, using artificial intelligence to spot unusual patterns and potential cyberattacks faster than a person could. For investors, it matters because it helps companies reduce breach risk, cut incident response time, and often represents a predictable, subscription-style revenue stream or competitive advantage that can affect operating costs and valuation.

zero trust technical

Zero trust is a security approach that assumes no one, whether inside or outside an organization, should be automatically trusted. Instead, every access request is carefully verified before being granted, much like checking ID at every door rather than trusting someone just because they are known. For investors, it emphasizes the importance of protecting digital assets and data from potential breaches, reducing overall risk.

waf technical

A Web Application Firewall (WAF) is a security layer that sits in front of a company’s websites and online services to block attacks like data theft, fraud, and automated hacking. Investors care because a strong WAF reduces the risk of costly outages, regulatory fines, and reputation damage—much like a lock on a store that lowers the chance of a break-in and protects ongoing sales and customer trust.

telemetry technical

Telemetry is the automatic collection and transmission of measurements from remote devices, systems, or patients to a central system for monitoring and analysis—like a car sending engine, speed and location data back to a dashboard. For investors it matters because telemetry provides real-time evidence of product performance, safety and user behavior, helping assess revenue potential, operational risk, regulatory compliance and whether a product is meeting market demand.

hyperautomation technical

Hyperautomation is the coordinated use of multiple digital tools—like software robots, data analysis, and process-tracking systems—to automate large, complex business workflows end to end. For investors, it matters because it can reduce costs, speed up operations, and improve accuracy across a company’s activities; like replacing a slow, hand‑assembled production line with a network of machines that communicate and self‑adjust, it can boost efficiency and profitability while changing capital and labor needs.