Story
SentinelOne
XPOXPO Adopts SentinelOne for Security Operations
XPO, an industrials organization in the United States, uses Ranger from SentinelOne to support security operations for SOC analysts.
XPO folded Ranger into security operations so SOC analysts share one view of endpoint detection.
“SOC analysts needed a system that would still make sense after the original project team moved on.”
“SentinelOne is an autonomous cybersecurity platform for endpoint, identity, and cloud detection and response.”
Independent write-up. Figures come from public sources or are illustrative.
Value results
| Category | Value result |
|---|---|
| Risk and compliance | Security operations stays visible to adjacent teams through Ranger |
| Capability | Named workflow replaces ad hoc routing for endpoint detection |
| Capability | SOC analysts work from the same Ranger record for endpoint detection |
Story
Inside XPO, security operations used to depend on whoever still had the latest file. That pattern is common in industrials groups working out of the United States. SOC analysts needed a system that would still make sense after the original project team moved on.
XPO uses Ranger from SentinelOne as the working layer for endpoint detection. SentinelOne is an autonomous cybersecurity platform for endpoint, identity, and cloud detection and response. The practical change is simple: security operations has a home, and reviews happen there instead of in a forwarded thread.
Nothing in this writeup invents a savings number. What XPO gets from SentinelOne is a durable place to run security operations and a way for SOC analysts to see the same endpoint detection at the same time.
