Project
Microsoft's cloud-native SIEM and SOAR platform, used to collect, correlate, and analyze security data for threat detection and incident response.
Ontinue launched ION for Dark Web Monitoring, an ION MXDR add-on that routes leaked credentials and lookalike domains to its analysts. Findings land in Microsoft Sentinel beside each customer's other alerts and are worked by the same analysts.
Reality
NetApp has added a behavior-based policy engine to its AI Data Engine that flags unusual data use by AI agents, with six months free. For storage admins running agents, its value depends on what happens once a flag fires.
Reality
Microsoft says China-linked operators have used NeedyMantis since at least October 2025 to keep access to telecom, university and government-linked networks. It goes in after the break-in, so defenders have to hunt for it inside networks already breached.
Perspective Coverage
3 publishersReality
The Integrated Security Operations Center preview puts case management and workbooks in the Defender portal with no setup, while behavior analytics and third-party feeds wait on a new Azure-linked workspace. Microsoft has not disclosed pricing.
Reality
Akeyless has made Agentic Runtime Authority generally available. It judges each agent action against the task the agent was given, and blocks a database delete or a bulk export even where the agent's credentials permit it.
Reality
Microsoft's managed detection service now works third-party telemetry ingested into Sentinel, on the MDR P2 tier and with no published price. Anyone paying a separate provider to read those same tables has a renewal conversation.
Reality