AWS Marketplace Newsroom | Mona Chadha, AWS & Ana Pinczuk, SentinelOne

Clips
More from AWS Marketplace Newsroom

play_circle_outline Introduction at AWS Reinvent 2025 by John Furrier and guests Ana Pinczuk and Mona Chadha.

play_circle_outline SentinelOne's partnership with AWS and integration with Security Hub for improved security visibility.

play_circle_outline Enhancing Security Operations: The Impact of AI and Data Collaboration Between AWS and SentinelOne

play_circle_outline SentinelOne transitioning to containerized infrastructure with Kubernetes on AWS.

play_circle_outline SentinelOne’s growth and momentum within the AI-driven security solutions market.

Info
Transcript

Mona Chadha, AWS & Ana Pinczuk, SentinelOne

In this segment from AWS re:Invent 2025, theCUBE’s John Furrier sits down with Mona Chadha, director of infrastructure ISVs at AWS, and Ana Pinczuk, chief product and technology officer at SentinelOne, to discuss the evolving landscape of autonomous security. The trio dives into the deepening partnership between AWS and SentinelOne, highlighting how the companies are co-designing solutions to merge observability with security. Pinczuk details new integrations with AWS Security Hub and Amazon CloudWatch, explaining how combining IT and security data provides a... Read more

explore Keep Exploring

What event is being covered, who is hosting it, and which two executives are being introduced? add

What is the relationship between SentinelOne and AWS, and how do their products integrate to enhance security? add

What insights can be shared about the data being leveraged in relation to AWS and SentinelOne? add

What capabilities and integrations are being developed related to observability and security incident response? add

What recent milestones and developments have occurred in the company's focus on AI and security solutions? add

bolt Powered by CUBE AI

Mona Chadha, AWS & Ana Pinczuk, SentinelOne

search

John Furrier

>> Welcome back around to theCUBE's livestream here at AWS Reinvent in Las Vegas 2025. I'm John Furrier, host of theCUBE. It's our 13th year at Reinvent, watching AWS create the cloud computing category, abstracting away servers and infrastructure. Now we're on the agentic wave, where abstracting away data and work, where agents will be the future. And again, a big sea change, almost a new kind of cloud, but the game is still the same. We have two great executives here. Mona Chadha is the director of infrastructure, ISVs at Adobe. Great to see you.

Mona Chadha

>> Nice to see you.

John Furrier

>> Thanks for coming on. And Ana Pinczuk, who is the chief product and technology officer at SentinelOne. Great to see you again. Both CUBE alumnis.

Mona Chadha

>> Yes.

Ana Pinczuk

>> Absolutely.

John Furrier

>> Welcome back.

Ana Pinczuk

>> Great to be here.

John Furrier

>> 13 years of Reinvent. Your 13th cube.

Mona Chadha

>> My 13th year at Reinvent, yes.

John Furrier

>> You need a little pin that says 10.

Mona Chadha

>> I know. I feel like, where's my pin?

John Furrier

>> Ana, great to see you. I know that you just recently joined SentinelOne.

Ana Pinczuk

>> Yes.

John Furrier

>> We've had previous conversations where you were chief product officer at other companies.

Ana Pinczuk

>> Yes.

John Furrier

>> Security is continuing to be the number one focus.

Ana Pinczuk

>> Yes.

John Furrier

>> Even in the agent announcements of Matt Garmon's Frontier agents, security's in there, of course DevOps, and then Kiro. Our content, security is the most popular. People are still dealing with a ton of data. What's the news with AWS? What's new for SentinelOne?

Ana Pinczuk

>> Yeah. So first of all, we've had such a long-term partnership and it's been really strong. SentinelOne is built, actually, on AWS. So think about our singularity platform, our data lake, our Purple AI, which we're very famous for, and it's really the premier security AI product in the market. And so, we've built a strong foundation with AWS. We've got five different things that we're doing together now with Mona. Number one is, AWS has the security hub, and we've got our SIM products. So we've integrated those. We have the ability to bring data from the security hub into our Singularity SentinelOne product, and be able to look at security issues across the state. So being able to look at what's in the cloud, as well as what's at the endpoint on workloads, et cetera, and give our customers a much more holistic view.

Mona Chadha

>> Exactly. And it covers more surface area. So whether you're working in AWS, the AWS services, it's all within Security Hub, or you're working in SentinelOne, you now have a larger surface area, where now any potential attacks, you're able to get that visibility and then quickly remediate, which is the beauty of what also has been built out with SentinelOne, especially with the AI capability that they have.

John Furrier

>> Mona, some of the best practices out there, we were chatting before we came on camera. Ana, if you can also highlight this, because one of the things that's come out of the keynote in the pre-briefings is Amazon has a lot of data on what's going on in AWS.

Mona Chadha

>> We have a ton of data.

John Furrier

>> You guys have a ton of data. Talk about that data, because the whole thesis is, bring Nova or other models to the data for the domain expertise and the domain intelligence. This is going to be a big push of product releases, domain intelligence.

Mona Chadha

>> Yeah.

John Furrier

>> What data are you leveraging? Can you share insights into that?

Ana Pinczuk

>> Well, just imagine that every product that AWS out there produces data, or you collect data on our cloud assets. And then think about SentinelOne, where we have a SIM product, and then we're in endpoints, we're in workloads, we're sort of across the customer's enterprise estate. When you bring that information together, you're able to do much better triage. You're much better remediation, and really be able to accelerate that process of leveraging that data to actually take action and deliver an outcome, which is a safer, more secure experience for the client. So that's the beauty of data. I think the other thing that's interesting is being able to have sort of an autonomous security operations experience. So leveraging the data to actually not just ingest and have visibility to what's going on, but actually analyze that data, investigate that data. So have sort of the ability to provide that intelligence to an analyst, right? And then being able to serve up decisions and say, "Hey, instead of having to do the boring work of looking at all that data yourself manually," being able to then say, "Here's some recommendations for you." What are you going to do?

John Furrier

>> And the coding stuff's helpful and all that.

Ana Pinczuk

>> Yes, exactly.

John Furrier

>> Agent work.

Ana Pinczuk

>> Yeah.

John Furrier

>> Talk about observability, because that's the theme here. Again, it's popping up. Observability was a topic I would say would be a segment scope, like it was a segment of companies, heavily funded. Now with AI, it's kind of an adjacent value there, where now with AI opens up the aperture for what observability means, it's clear, and security. I think Kronosphere was acquired by Palo Alto recent news, and some were questioning what that means. We were teasing it out by saying observability is a data telemetry opportunity with AI. So how do you guys see observability fitting in? Because that's coming fast.

Mona Chadha

>> Yeah. I'll say that from our perspective, what we've been seeing for the, I would say for the past maybe two years is observability blend. So we're seeing data, data management, observability and security all merging into one. And so now, it's not just about these individual... Typically, they would be these point products, and it's like, no, they're all in separate applications. We all have to bring them together, so we're able to then, if I'm a security professional, again, I have that surface area and I'm able to see across all those different applications and all those different products. So we see a blending and a merger of those, and observability is a key component, which is one of the reasons we built sort of these frontier agents that we have with Kiro, with DevOps and with security, because that brings it all together. And so now, observability has to be almost native to your security solution. And that's like what we've seen working very closely with SentinelOne, is that bringing that into the equation, again, it gives a security professional better data, better sort of knowledge of what they need to do, and again, better surface area to ward off even attacks, potential attacks.

John Furrier

>> So you've got Kiro, autonomous coding.

Mona Chadha

>> Autonomous coding.

John Furrier

>> You have the agent, DevOps Frontier agent security.

Mona Chadha

>> DevOps security. Yep.

John Furrier

>> And so that's Amazon's version of basically automating themselves. So imagine having a dedicated...

Mona Chadha

>> Automating all those workflows.

John Furrier

>> All those engineers, like, I'm on call all the time. That means they had kind of set those kind of building blocks, maybe primitives in some low level areas, but now you're going to have agents. But you're building on those agents. What are you thinking?

Ana Pinczuk

>> Yeah, we are building on those agents as well in a couple ways. So first of all, just going back to observability, we have our SIM product, which is like our security incident and response capabilities, right? And we have all the data that we collect in there. That's very adjacent to our endpoint, like really our premier endpoint business, right? So all that data's coming in, and from an observability perspective, we're basically able to look at what's going on in an infrastructure and be able to take action on that. Now, the interesting announcement that we have now with AWS is with sort of our integration with CloudWatch. So that's a good one, because now we start to get data, not just security data, but being able to look at data.

John Furrier

>> Explain the value of that. What does that mean?

Ana Pinczuk

>> Well, just think that CloudWatch looks at assets that are really beyond security. So it has access to more what an IT person would see.

Mona Chadha

>> Exactly.

Ana Pinczuk

>> And so, from an observability perspective, I think the power of this is to bring IT data, bring security data together.

Mona Chadha

>> Together, yeah.

Ana Pinczuk

>> And being able to basically take action and look at the context and the enrichment of a...

John Furrier

>> It's a smarter environment.

Ana Pinczuk

>> A smarter environment, more data that we're able to bring to the solution.

Mona Chadha

>> And it basically brings observability more native to security, right?

Ana Pinczuk

>> Yeah, that's right.

Mona Chadha

>> So now that's all, because it's all integrated.

John Furrier

>> So it's all assets.

Mona Chadha

>> It's all assets.

John Furrier

>> Not just the security.

Ana Pinczuk

>> Not just the security assets, but just get visible. And I think that's what's the power of both organizations being together, is that also, we cater a lot to the CSO or the security analysts, but AWS caters a lot to the IT professional, let's say. So we're starting to merge that data again.

John Furrier

>> Some of you might not know that SentinelOne's built on AWS. So just clarify that. You guys are all on aws.

Ana Pinczuk

>> So basically for, I don't know, three, four...

Mona Chadha

>> Yeah, it's been five years.

Ana Pinczuk

>> Five years. So we've basically gone all in on our infrastructure on AWS. So basically think of EC2 instances, or now we're turning everything to Kubernetes, so elastic Kubernetes services.

John Furrier

>> Container native was a hot announcement.

Ana Pinczuk

>> That's right. So being able to containerize all that. We've put together another new announcement, which is really our MCP server capability, right? That's built on AWS, together with Bedrock and with Agent Core as well. So we have the ability to bring in LLMs and to build those agentic flows, leveraging AWS. So basically, wherever you look...

Mona Chadha

>> Wherever we look.

Ana Pinczuk

>> We've been a great partner.

Mona Chadha

>> Yeah. And it's a very tight relationship, especially on the product side. I mean, we even have former AWS teams that are part of NO1. So it really brings the depth of sort of how AWS customers... So if you're an AWS customer and you're integrating with SentinelOne and we have these solutions, the depth of your security posture is complete, to be very honest.

Ana Pinczuk

>> I'll give you another example is that's fun. I've enjoyed sort of seeing the number of integrations that our teams have together. So it's not just about sort of just bringing the data together, but it's really thinking about the experience that an analyst or an IT professional would have with the platform. We've got over, I don't know, 20 or so integrations with basically almost every service, like incident response. So all the RW security, all that.

John Furrier

>> So you're tightly coupled with it.

Ana Pinczuk

>> Very tightly coupled. Yeah. And I think one of the things that we've tried to do now is how to make it much more seamless, even. So we've recently announced an integration through identity and access management, so making it really a much smoother experience for the user.

John Furrier

>> Well, being the chief technology and product officer, you got to put the roadmap together. So I guess I have to ask you, what's the roadmap look like for you, and how does this reinvent change or accelerate that?

Ana Pinczuk

>> Yes.

John Furrier

>> Because coming out of this show, I mean, to me, this is one of those moments in the history of covering Amazon. I'd say the ground is shifting for sure, and the agent is the new cloud, but it's the game still. So infrastructure, platform, apps, this is just AI native now.

Ana Pinczuk

>> Yeah, it is. And I'll tell you one thing that struck me. One is, remember how we used to think about like, okay, you're going to be cloud first now, or you're going to be mobile first now. It used to be that. And now, we're not really saying we're agentic or AI first. We're just going there directly. We're building everything natively with AI, right? Which is, I think forcing us as technologists to really rethink what the experience and the speed needs to be, in terms of development. What it means for SentinelOne is looking at how do we deliver on the promise of the autonomous SOC, but doing so by bringing the intelligence of agents into that experience. And by the way, you can't do security alone.

Mona Chadha

>> I know.

Ana Pinczuk

>> That's the other thing.

Mona Chadha

>> Exactly. And kind of the way that we work very closely with Ana too is to say that I think we both come from that shared sort of mode of, like you just said, it's like AI is inherent in us, and we don't even really need to say AI first, because it's just native to how we think. And part of what we're also seeing is a shift in, and we were talking about this just a little while ago, where like CISOs have a seat at the table. They always have, but they have a louder voice. But what's also happening is that security is getting embedded into everything that you do, everything within AI. We have that sort of mental model in all the AI services and solutions that we're bringing, and across our stack, and SentinelOne obviously has that built in. And so now security, everyone can think about security and everyone is now a security professional. And so the way that, as Ana was talking about the experience, is that we've made it, we're trying to make it so simple, so that...

John Furrier

>> And reliable. You got to have security, because you can't be wrong.

Mona Chadha

>> Yeah. And so, it has to be reliable. It's all there. And so, we're making it simple so that really, it's democratizing it so that everyone can really use it, and have used it.

John Furrier

>> One of the things, Ana and Mona, that I'm seeing, just go back in the past two years of all theCUBE interviews I've done. We've entered in this large scale systems game, call it supercomputing, call it the Amazon factor, the NVIDIA factor. If you look at all the major breakthroughs, the interconnects, putting Blackwells together, what you guys have done with ultrasystems and just Nitro, we've covered that. So all these little infrastructure innovations have expanded that. And one of the consistent patterns in the ecosystem is radical co-design, and the best winners are co-designing in their partnerships. Because in a large scale system that you guys have... And that's what NVIDIA is doing, that's what you guys are doing. So it's almost a new biz dev ecosystem strategy.

Ana Pinczuk

>> It is. Yeah.

John Furrier

>> It's not so much do a deal. I mean, marketplace, it's an easy thing to go to marketplace, but like to integrate, it's almost a co-design system game.

Ana Pinczuk

>> Yeah. We've sort of gone from sort of integration to co-build, to co-design events.

John Furrier

>> You see, that's true.

Ana Pinczuk

>> Yeah. We're seeing it, and especially in a world where like infrastructure is code and everything. So I think there's an opportunity for us to bring not just our go-to-market organizations together, or even our product organizations, but we've been having conversations about about engineering organizations. What does it mean to actually build this in the real world?

John Furrier

>> Amazon pioneered the shared security model, but that was, what, eight years ago, I think, that Steve Schmidt put that out there. So you believe co-design is critical in these large scale integrations. So what's next on the co-design for you guys together? What's coming down the pike?

Ana Pinczuk

>> So there's lots of things that we're talking about. I mean, a lot of it starts with the letter A and I.

Mona Chadha

>> AI.

Ana Pinczuk

>> I think a lot of co-design will be looking at the experienced customer in, and really trying to figure out, how do we maximize the leverage of the data estate that we have and create an agentic experience which is a lot more novel, because you don't have hard coded dashboards or things like that. You really leave it up to each customer.

Mona Chadha

>> We've got deterministic workflows, but also non-deterministic things are happening.

Ana Pinczuk

>> Things are happening, right? So you have to merge, figure out how to merge that.

John Furrier

>> That's a system play. That's not like a gimmick.

Ana Pinczuk

>> It is a system play. And that's why I think it's important for the partnership aspect to really deepen, because you don't want to be integrating a huge... It's hard to integrate a huge number of partners into that ecosystem.

John Furrier

>> Mona, talk about how this translates to other ISVs, because I'll say SentinelOne is in a class of their own.

Mona Chadha

>> You mean there are others?

John Furrier

>> Well, think startup. A startup doesn't have... Their version of co-design is, I'm going to use S3 vectors and tables, and I'll play around there and then see where it goes. They don't have the scale of the integration co-design. But for other partners that are watching, how should they be thinking about their version of integration?

Mona Chadha

>> Yeah. Well, I think, to your point, they're not going to have the engineering organizations, massive ones. It might be an organization of one. And so what we're doing is, we're building in agents, and pre-building these agents so that they can leverage them into their applications and build them quickly. And if they decide, hey, I want to build my own agent, great, we have that too for you. So Bedrock, that's why we have Bedrock Agent Core, and we have the series of the Frontier agents that we developed, and we are amping up. We have our compute that we announced. So that's why we have this sort of AI stack strategy that we have, so that we can really help startups run quicker and faster. But we'll be building them for them, so that they can get up and running. So I would say stay tuned for that. And then also, there's a ton of best practices that they'll also see from other partners that are out there. So there's, I would say, between SI partners that are also helping startups get up and running quicker and faster. And of course, there's AWS Marketplace, where we... AWS Marketplace is evolved, and don't think of it as a transaction anymore. Think of it literally as a model, right? As an AI model that's really helping startups gain access to their end customers quicker and faster, and then getting those integrations. We're pre-building agents so that we can integrate into any of the systems that they have, so that they can get more intelligence about buying patterns and things like that.

John Furrier

>> We were dealing with Meta last year in the marketplace. It's like, Marketplace is now the console. Click, click, click, and you just deploy, versus the classic...

Ana Pinczuk

>> And it's not just for startups.

Mona Chadha

>> It's not just for startups, it's for everyone. Yeah.

Ana Pinczuk

>> Companies like SentinelOne are wanting to get access in effect to a broad set of company sizes.

Mona Chadha

>> Companies that can do it.

John Furrier

>> It's a rare real producer, for sure. And talk about, put a plug in for SentinelOne for the folks who haven't had an update in a while. What are you guys doing? What's the momentum?

Ana Pinczuk

>> Tremendous momentum. We just crossed a billion dollars, by the way, so that's been great. We've been focused on AI since the inception of the company, right? A lot of momentum really on integrating with AWS, on building our agentic capabilities, looking at what security professionals need, all the way from sort of identification detection, through that whole experience to remediation, so the whole life cycle, and truly simplifying the experience for security professionals. I would say the second thing is really our security data lake and our AI SIM capabilities. Customers in particular who have endpoint solutions with us, they want to try to reduce the cost, in some cases, of their observability from a security perspective. And so we're seeing a huge amount of momentum in that, as well.

John Furrier

>> So there's a lot of, I won't say replatforming, but they're really looking at the system architecture.

Ana Pinczuk

>> I think they're looking at, yeah, how do they expand... They like the experience with SentinelOne, and they're looking at how to expand the experience. And in particular, I think what's important is we've been AI native from the start. So how do you leverage the automation and effect, the autonomous element, to more parts of your estate?

John Furrier

>> Well, the good news is, I mean, all those frameworks coming out, and you get the protocols, the CP and A to A, and then you got all those frameworks. There's a lot of choice for developers to code.

Ana Pinczuk

>> That's right. That's right.

John Furrier

>> That'd be a big deal.

Ana Pinczuk

>> That's right. Yeah. So I think that even OCSF frameworks and other things that allow us to basically look at our data, query our data in new ways, et cetera, as well.

John Furrier

>> Well, Ana, you have the keys to the kingdom.

Ana Pinczuk

>> I love it.

John Furrier

>> Chief product officer.

Ana Pinczuk

>> Yes. I know.

John Furrier

>> Mona, great to see you.

Mona Chadha

>> Good to see you.

John Furrier

>> You've got the best ISVs. Thanks for coming on.

Mona Chadha

>> Thank you.

Ana Pinczuk

>> Great to see you, John.

John Furrier

>> Yeah. I mean, the new... Co-designing is really the key to success in this next level. It's a systems game, a systems thinking. And again, abstracting away data and work is where agents will do their thing, and this is, the agentic era has begun. We're doing our part here, theCUBE, bringing the data. Thanks for watching.