Articles by Andrew
Activity
5K followers
-
Andrew Howell posted thisSentinelOne just filed comments with the FCC on the FY2027 E-Rate Eligible Services List (WC Docket Nos. 26-133 and 13-184), and the stakes for K-12 cybersecurity have never been higher. K-12 schools are now the most frequently targeted sector for ransomware in the country, and nearly 40% of participants in the FCC's own K-12 Cybersecurity Pilot Program reported an incident in the past year. At the same time, a growing number of states have enacted AI governance laws requiring schools to monitor, log, and control how students and staff use generative AI on school networks — often with little funding or infrastructure to do it. E-Rate hasn't caught up to either reality, and our filing asks the Commission to fix that. We're urging the FCC to take three concrete steps in the FY2027 ESL: First, preserve Managed Internal Broadband Services and clarify that managed cybersecurity monitoring — endpoint detection and response, network threat monitoring, AI security monitoring — is eligible under MIBS, since a compromised network isn't a reliably operating one. Second, confirm that modern, cloud-delivered endpoint security platforms qualify as eligible firewall services under Category Two, recognizing that the security perimeter has moved from the network edge to the device itself. Third, and most novel, establish a new Category Two designation for AI Security Monitoring and Governance services — covering shadow AI discovery, real-time student PII redaction, AI interaction audit logging, and acceptable-use policy enforcement — so schools have a funding mechanism to meet the CIPA, FERPA, and state-law obligations now attached to AI use on their networks. These aren't hypothetical asks. They track how the Commission's own Cybersecurity Pilot Program already treats endpoint protection and monitoring/detection/response as eligible categories, and they extend CIPA's monitoring mandate to the AI tools that now dominate student internet use. E-Rate exists to make sure schools and libraries have the technology they need for modern educational services — and today, that technology is inseparable from the cybersecurity and AI governance controls the law already requires of them. We look forward to working with the Wireline Competition Bureau and fellow commenters to get the FY2027 ESL right.
-
Andrew Howell reposted thisAndrew Howell reposted thisWashington spent five years buying filing cabinets; M-26-14 finally asks whether anyone opened them. For five years, federal agencies have hoarded log data by the petabyte. Most of it was never going to stop an attacker. On May 22, OMB Director Russell Vought rescinded M-21-31 and replaced it with M-26-14. The old memo asked HOW MUCH data agencies were storing. The new one asks HOW USEFUL that data is in detecting and responding to an intruder, a different theory of the problem. M-21-31 deserves credit. Written after SolarWinds exposed how blind government was to its own networks, it raised the floor. But it measured security by volume, hit these tiers, retain these categories, without asking whether data earns its keep in an investigation or just satisfies a checkbox. Storing a log isn't using it. A SOC buried in unqueried data isn't more secure, just more expensive. Every dollar warehousing dead data was a dollar not spent on detection or response. Logging without detection isn't defense, it's a filing system. M-26-14 keeps the maturity-model scaffolding but fixes the foundation. Every logging decision now serves one of two goals: Continuous Event Monitoring (live data a SOC watches in real time) or Threat Hunting, Investigation, Response, and Forensics (the record that lets responders reconstruct an attack after the fact). If a log serves neither, agencies can ask why they're keeping it. Agencies can pursue CEM and THIRF through centralized, federated, or hybrid models once CISA publishes its Logging Reference Architecture, expected before August. Then the clock starts: 90 days for a logging plan, 120 for Basic maturity, 180 for Intermediate, 320 for Advanced. Logs stay searchable for six months, retrievable for twelve. Scope covers IT, IoT, and OT, including contractor-run systems long treated as someone else's problem. Most consequential: the Optimal tier makes AI and machine-learning detection the standard. Nation-state adversaries already use automation to compress access-to-objective into hours, analysts reading dashboards can't match that speed. M-26-14 is the first federal logging mandate to say plainly that machine-speed attacks require machine-speed defense. Leaders who treat this as another compliance project will be re-architecting within a year. Leaders who consolidate sprawl, retire dead logs, and redirect that budget into real-time detection will satisfy M-26-14, EO 14028, and CDM at once. Our SentinelOne Singularity Platform is built around real-time detection, forensic investigation, and AI-driven defense on a FedRAMP High foundation deployed across the federal government. M-26-14 stops rewarding agencies for confusing storage with safety. Overdue, and welcome. Learn how SentinelOne helps deliver M-26-14 mission-ready compliance. Whitepaper Link: https://lnkd.in/dJtcvtYT #FederalCybersecurity #PublicSector #ZeroTrust #CISO #CyberResilience
-
Andrew Howell reposted thisPlease join me and David Gold for our upcoming webinar on Modern AI Security for On-Premises Environments. We'll discuss how Honeywell is enabling organizations to confidently embrace SentinelOne in an air-gapped OT environment, enabling next generation endpoint protection while managing the security, governance, and risk challenges that come with it. 📅 Register here: https://lnkd.in/ejcxQVBy Looking forward to a great discussion, and I hope to see you there on July 28![Live Webinar] Modern AI Security, Total Control: Autonomous Protection for On-Premises Environments[Live Webinar] Modern AI Security, Total Control: Autonomous Protection for On-Premises Environments
-
Andrew Howell shared thisReally enjoyed an engaging conversation on AI security during the GAMEIS conference in Savannah today! It was also terrific to see in person my SentinelOne colleagues Armin Smailhodzic, CCISO, CEH and Steve Stocks, as well as catch up with Zachery Wren and David Wren, CISM of our partner NTP Cyber Security!
-
Andrew Howell shared thisChina- and India-nexus threat actors have converged on a single Pakistani police force, seen as a rich source of intelligence for both nation-states. SentinelLABS latest research tracked multiple campaigns from February 2024 to April 2026. Balochistan Police sits at a vertex, the result of multiple threat actors setting their sights on the data the agency holds. China-nexus interest is most likely motivated by a rising concern for the safety of its nationals living in Pakistan. With a growing population of Chinese citizens situated in the China-Pakistan Economic Corridor (CPEC), ongoing terrorist attacks have left the PRC dissatisfied with Pakistani protection. Data from Balochistan Police would give the PRC direct insights on the safety of their nationals, cutting out involvement from a partner they no longer trust. India-nexus threat actors make up the opposite side of the pincer movement with their activities motivated primarily by the country’s long-standing conflict with Pakistan. For them, control over Balochistan Police networks means having invaluable visibility on how Pakistan manages their security posture as well as persistent access to civilian data. When multiple cyberespionage actors target the same law enforcement institution, the convergence signals the institution's value as a source of intelligence. While their motives are completely different, both China and India continue to keep an adversarial eye on law enforcement organizations like Balochistan Police, watching for more opportunities to take what they need from Pakistan’s digital intelligence terrain. Full report: https://bit.ly/4aJJLkY
-
Andrew Howell reposted thisBig day here at SentinelOne -- an all of company effort to bring the agentic SOC to life, coupled with a new business model that's ready for the future of AI. I'm almost 90 days in and the sprint was one of the finest displays of an all of company effort to serve our customers need. Proud to be a Sentinel.Andrew Howell reposted thisPurple AI is bringing frontier AI into the modern agentic SOC. In today’s SOC, detections increase. Alerts queue. Verdicts wait on analyst availability. Coverage drops on nights, weekends, and during surges. Investigation capacity is the binding constraint of the modern SOC. Purple AI Agentic Investigation closes the gap. When a critical alert crosses the threshold, Purple AI acts. Autonomously. Zero-click agentic investigations that run natively in the Singularity Platform, where your data and workflows already live. It detects, investigates, verifies, and responds autonomously. Investigations that once took hours or days now take minutes and seconds. The degree of autonomous response stays on the SOC's terms. Every verdict carries a complete, auditable evidence chain. Automated workflows can be customized to include human gates. The agentic SOC is operational. Activate it in your Singularity console. s1.ai/agentic
-
Andrew Howell reposted thisAndrew Howell reposted thisAnother big win for SentinelOne customers looking to embrace and derisk Claude usage in the workplace. SentinelOne integrates directly with the Claude Compliance API, bringing AI activity into the security platform your teams already trust: → Prompt Security — Real-time policy enforcement on prompts and responses. Agentless. Works on both managed and unmanaged devices. → Singularity AI SIEM — Claude activity ingested as native telemetry, correlated against your full security picture. AI interactions no longer live in a silo. Security should move at the speed of AI. Now it can. 🔗 https://s1.ai/Claude-API
-
Andrew Howell reposted thisAndrew Howell reposted this🚨 Job alert! 🚨 We are looking for a Head of Federal Sales to join Manifest. Someone who can own the GTM, lead a team, navigate federal procurement, and turn early traction into repeatable revenue. Player-coach. Meaningful deal ownership. The opportunity to expand on the success of an in-demand software + AI supply chain security that's already deployed in sensitive USG environments (to soon include classified spaces). If that's you, reach out or apply below: https://lnkd.in/eeYQanCZ #hiring #federalsales #federal #usg #natsec
Andrew Howell commented on a post
2mo
Congratulations, Sachin Bansal !! You are going to kill it!
Andrew Howell commented on a post
2mo
Interesting paper, Devin Lynch! Love the way it highlights that AI governance must evolve from static rules to dynamic, runtime oversight, which is a direct argument for real-time behavioral controls — the core value proposition of AI runtime security.
-
Andrew Howell liked thisAndrew Howell liked thisWe are one week away from our inaugural Government & Defense Technology CEO Summit! As part of our outstanding line-up of speakers, Carey Smith of Parsons Corporation will discuss what it takes to build a next generation national security platform, including how strategic M&A and differentiated capabilities can help technology providers scale and better serve their customers across increasingly complex national security missions. My friend, Grace Cassy of Ten Eleven Ventures, will also lead a can’t-miss discussion with Dave Julazadeh, Lt Gen (Ret), USAF of Business Executives for National Security (BENS) and Sean Plankey of UFORCE, on how Europe is building a genuinely different kind of defense. Thank you again to our tremendous sponsors – Beacon Global Strategies, Squadra Ventures, Cerberus Ventures, Razor's Edge, Crosslink Capital, Ten Eleven Ventures – for helping us create a unique forum for leaders across the government and defense technology ecosystem. See everyone in DC! Lauren Webster Greg Nossaman Greg Woodford, Matthew Brom, Libba Keith, Christopher Kerrigan,
-
Andrew Howell liked thisAndrew Howell liked thisAmerica is lucky to have NASA Administrator Jared Isaacman leading NASA - National Aeronautics and Space Administration with a passion for pushing the boundaries of what America can achieve. Thank you for an unforgettable experience — and for advancing the future of American aviation and space exploration. 🇺🇸
-
Andrew Howell liked thisAndrew Howell liked thisThreats are accelerating. Frontier AI is re-writing the rules. One conference keeps you ahead. The Reality: While other conferences traffic in ideas, OneCon delivers real-world outcomes. The Takeaway: Unlock the skills, insights, and clarity to innovate safely and gain the advantage in a new age of cybersecurity. The AI era isn’t coming. It’s here, at OneCon. ➡️ Register: onecon.io
-
Andrew Howell liked thisAndrew Howell liked thisJoin thousands of security practitioners in this two-day bootcamp combining expert keynotes with hands-on technical workshops. Your team will leave with skills you can apply immediately to secure AI. https://bit.ly/4qO6Tp5Securing AI Bootcamp | On-Demand Training by SentinelOneSecuring AI Bootcamp | On-Demand Training by SentinelOne
-
Andrew Howell liked thisAndrew Howell liked thisTomer Weingarten joined Brian Sullivan on CNBC's The Exchange following SentinelOne's Q2 earnings to unpack the wave of frontier AI models that breached their own test environments and what it means for enterprises racing to secure AI agents. Catch the full interview here 👉 https://lnkd.in/eR2j7m7J
-
Andrew Howell liked thisAndrew Howell liked thisProud to be the recipient of the Impact Award at SentinelOne for FY27 Q2. Appreciate all the support from the entire SentinelOne team. Enjoy working with the amazing people in the Federal and SLED Public Sector. Looking forward to a strong finish the second half of FY27.
-
Andrew Howell liked thisAndrew Howell liked thisSentinelOne will be at the 17th Annual Billington CyberSecurity Summit, September 8-10 at the Walter E. Washington Convention Center in Washington, DC! 🗓️ Join us on Wednesday, September 9 at 11:40 AM for "Practical Automation for the SOC: Playbooks, Scripts & AI-Assisted Response" as our Field CISO, Ronald Ringgold, CISSP, joins additional panelists to talk through how Federal and SLED SOCs are using automation and AI-assisted response to move faster without losing control. 📍 Outside the session, find us at Booth #516 throughout the summit. Stop by to see demos and meet the Federal team. #Billington2026 #Cybersecurity #FederalCyber #SentinelOne
-
Andrew Howell liked thisAndrew Howell liked thisOur goal was always an autonomous platform that gives human defenders a decisive advantage against machine speed attacks. It matters even more in the AI moment. Customers are demanding platforms that create visibility into AI activity and deliver runtime security outcomes across endpoints, cloud, data and identities. That’s what we make possible in any environment, open or regulated, sovereign, or public cloud. This is technology leadership in securing the AI era. Q2 FY2027 highlights: $1.218B Total ARR (+22% YoY) $292M Revenue (+21% YoY) 22% Net New ARR in H1; record second-quarter growth 10% Operating Margin (non-GAAP); ~820 bps improvement YoY $0.08 EPS, non-GAAP (+100% YoY) Triple-digit AI Security ARR growth To our customers, partners, and Sentinels, thank you. You are defining the security platform of the future. Read the press release: https://s1.ai/paga2
-
Andrew Howell liked thisI am super excited about our #SentinelOne results and want to recognize all our Sentinels for the focus on customers, partners, prospects, and shareholders. We have accelerated speed to market while delivering truly differentiated value. One of my favorite capabilities is Purple AI auto-investigations, which lets customers investigate security issues manually or autonomously, significantly reducing toil and costs. Another favorite is Prompt security - it brings customers peace of mind when deploying enterprise AI. I also 🩷 our SentinelOne platform, AI SOC, and experience, and our Wayfinder Services are the bomb too! Above all, it's great fun to be at the intersection of security and AI with an extraordinary team. Let's Go!Andrew Howell liked thisThe AI security inflection point is here. In Q2 FY27, SentinelOne achieved triple-digit AI Security ARR Growth. Global organizations are embracing SentinelOne to create visibility into AI activity and deliver AI runtime security across endpoints, cloud, data and identities. Purple AI is making the vision of the autonomous SOC a reality, automating complex detections, investigations, and responses to stop AI-powered threats at AI speed and scale. Prompt Security is setting the standard for AI visibility, governance and control of every AI touchpoint: employees, developers, apps, and agents. AI adoption is just getting started. AI security is cyber’s next big market. And SentinelOne’s autonomous AI-native platform was built for this moment. 𝐐𝟐 𝐅𝐘𝟐𝟎𝟐𝟕 𝐡𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬: $1.218B Total ARR (+22% YoY) $292M Revenue (+21% YoY) $56M Net New ARR; record second-quarter growth 10% Operating Margin (non-GAAP); ~820 bps improvement YoY $0.08 EPS, non-GAAP (+100% YoY) 50%+ ARR from Emerging Solutions A huge thank you to our customers, partners, and Sentinels worldwide. Learn more about our results here: https://s1.ai/kixjv
Experience & Education
Volunteer Experience
Languages
-
Spanish
-
Recommendations received
1 person has recommended Andrew
Join now to viewOther similar profiles
Explore more posts
-
Misha Lehrer
As one of the last bipartisan bastions on Capitol Hill, the FY26 NDAA has something for everyone, and my colleagues and I published an analysis, included below. The bill strengthens U.S. resilience in emerging technologies by securing critical materials, modernizing supply chains and expanding advanced manufacturing capacity. These provisions focus on rapidly deploying innovative, new technologies that service members need to prevail on future battlefields. It advances U.S. defenses against emerging unmanned threats by expanding training and testing infrastructure and establishing task forces and partnerships to strengthen c-UAS resilience. At the same time, the bill enhances protections for critical facilities and integrates drones and counter‑drone measures into public safety and homeland security frameworks. The bill fortifies the DIB by deepening allied integration, expanding funding and hiring authorities for critical supply chains, and streamlining cybersecurity and technology‑transfer. The NDAA acquisition reforms focus on accelerating requirements, centralizing program management and embedding sustainment planning early to avoid costly readiness gaps and overruns. And, of course, improving service member quality of life remained a constant focus and is reflected in the final bill, including healthcare, housing, and transition assistance. Huge kudos to my friends on HASC, SASC, and each office with whom we worked during the entirety of this cycle’s process. More to come next year!
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content