LevelBlue named SentinelOne remediation partner for AI

LevelBlue has been named SentinelOne's premier remediation partner for Wayfinder Frontier AI Services, linking SentinelOne's AI-led exposure findings with LevelBlue's remediation consulting.

The partnership targets organisations that receive findings from Wayfinder Frontier AI Services assessments and need help deciding what to fix first, how to fix it and how to verify that the fixes worked. LevelBlue will provide milestone-based remediation programmes built around vulnerability triage, developer guidance and validation.

SentinelOne's Wayfinder Frontier AI Services use large AI models alongside human security specialists to identify and validate exploitable weaknesses in source code, software dependencies, exposed secrets and post-deployment tampering. Human experts review each finding and provide reproduction details and severity assessments.

That addresses one side of the security problem: discovery. The other, which both companies are targeting through this partnership, is remediation at scale as security teams face a growing volume of validated findings and limited engineering time.

LevelBlue's consultants will prioritise issues using SpiderLabs threat intelligence, along with the customer's environment, existing controls and current attacker activity. The company argues that real-world exploitability should carry more weight than severity scores alone when teams decide which vulnerabilities to address first.

For security and development teams, the offering is split into two service tracks. The first, a Remediation Sprint, provides tactical advisory work and remediation assistance delivered in milestones and sequenced by severity rather than fixed calendar periods. The second, an Application Resilience Program, focuses on longer-term consulting and posture trend reporting.

Remediation focus

The partnership reflects a broader shift in cyber security as AI tools increase the speed at which vulnerabilities can be uncovered. Faster identification can give companies better visibility into weaknesses in their software, but it can also create a backlog if internal teams cannot assess business risk, assign work and confirm that the exposure has been removed.

LevelBlue's response will rely on senior security engineers, DevSecOps specialists and security architects to move customers from discovery to remediation and then to ongoing resilience work. The company says it conducts more than 200,000 hours of penetration testing each year and has more than 1,000 cyber security experts worldwide.

The services will be available directly from LevelBlue, while customer introductions will come through SentinelOne. Neither company disclosed financial terms.

For SentinelOne, the partnership extends the commercial use of Wayfinder Frontier AI Services beyond vulnerability identification. It gives customers a way to operationalise assessment results at a time when many security teams are struggling to turn a rising number of findings into ranked work programmes for developers.

Both companies describe that hand-off as a key point in the process. Security tools can reveal where weaknesses sit in applications and software supply chains, but remediation usually requires coordination among security leaders, software engineers and operations teams, often involving trade-offs among urgency, release schedules and available staff.

LevelBlue's consultants will validate fixes before and after deployment. The aim is to reduce the risk that a patch only partly closes an attack path or that later changes reintroduce the same weakness.

Industry pressure

The announcement comes as software security teams face pressure to manage risks across increasingly complex environments. Modern applications often depend on large numbers of third-party components, secrets can be exposed in development pipelines and post-deployment changes can create openings that are difficult to track without continuous testing.

In that context, a prioritised remediation model is likely to appeal to organisations that already have detection data but need help turning it into action. The emphasis on milestone-based delivery rather than fixed time blocks also suggests the companies expect remediation workloads to vary sharply depending on the mix of findings.

Another distinction is the focus on resilience rather than one-off clean-up work. The longer-term programme is framed around improving the practices that produced the findings in the first place, including work tied to application security maturity and software supply chain resilience.

Spencer Lynch, Senior Vice President of Professional Services at LevelBlue, said: "Frontier AI has dramatically accelerated the identification of exploitable vulnerabilities in modern applications, but finding those issues is only the beginning. Organisations must still determine what matters most, help developers implement the right fixes, and verify that those fixes effectively close the attack path. LevelBlue helps customers turn validated findings into measurable risk reduction through remediation programs grounded in real-world threat intelligence and led by experienced security practitioners."

Steve Stone, Chief Customer Officer at SentinelOne, said: "Wayfinder Frontier AI Services help customers understand what attackers could realistically exploit across their environment, helping them sift out the signal from the noise. By pairing that visibility and expert assessment with LevelBlue's remediation expertise, customers gain a clear and actionable path to fortify their defenses and stay one step ahead of AI-empowered adversaries."