SentinelOne opens services to partners and Wayfinder delivery to LevelBlue

SentinelOne used OneCon 2026, its customer conference in Las Vegas, to issue a run of partner announcements on 21 October. One named LevelBlue, which describes itself as the world’s largest pure-play managed security services provider (MSSP), as the “global exclusive delivery partner” for Wayfinder, SentinelOne’s suite of managed detection and response (MDR), threat hunting and incident response services.

On the same day, SentinelOne expanded its PartnerOne program to give value-added resellers (VARs), managed service providers (MSPs), MSSPs and MDR providers “a certified path” to build AI security and autonomous security operations center (ASOC) practices on its Singularity platform. It also widened its partnership with N-able, which sells endpoint management, security operations and backup products and says its platform covers more than 500,000 organizations.

Barry Padgett, SentinelOne’s president and COO, set out the intent in the PartnerOne release: “We want our partners to own the service layer as a decisive advantage for us and our customers, alike.” He called AI security “the biggest cybersecurity opportunity for the channel in decades”.

SentinelOne is asking the channel to build services businesses around its newest products, while the managed service it already sells under its own Wayfinder name will be delivered worldwide by a single MSSP. For the MSSPs and MSPs that run detection and response on SentinelOne today, the vendor’s own branded MDR now comes through LevelBlue.

One partner, four roles

LevelBlue’s position was built in steps through 2026. In March, at RSAC 2026, SentinelOne named it a preferred global provider for MDR and managed security information and event management (SIEM), and a preferred provider for incident response. In August, at Black Hat USA, it became premier remediation partner for Wayfinder Frontier AI Services. On 21 October it gained exclusive delivery of Wayfinder and was named the MSSP launch partner for SentinelOne’s new partner-led AI security services.

Under the new arrangement LevelBlue will deliver Wayfinder’s MDR, threat hunting, incident readiness and response, and SentinelOne’s professional services, on a 24x7x365 basis. The two companies will expand joint commercial and go-to-market work and take Wayfinder “to new regions and emerging markets”. The release says LevelBlue’s incident response work brings together expertise from Stroz Friedberg and Trustwave, and describes it as “cyber insurance–approved”. According to LevelBlue’s blog post on the deal, SentinelOne continues to lead Wayfinder’s technology and direction.

Melissa K Smith, SentinelOne’s senior vice-president for global strategic partnerships and initiatives, said the arrangement pairs SentinelOne’s AI and platform “with the world’s largest pure-play MSSP and a recognized DFIR powerhouse, so we can bring Wayfinder’s human-led defense to more organizations in more countries, faster.”

LevelBlue says Wayfinder will sit alongside, not replace, the MDR services it already delivers with other technology partners. The same provider will therefore sell customers its own MDR and SentinelOne’s.

What the rest of PartnerOne gets

For other partners the offer is certification and sales kit rather than delivery rights. The PartnerOne expansion adds implementation engineer certifications for Prompt Security, SentinelOne’s product for controlling how staff use AI tools, and for its endpoint and identity products. It adds early access to Singularity Agentic Detection and Response (ADR), which watches the activity of AI agents, two assessment services, and learning paths for AI SIEM, AI data pipelines, the Purple AI investigation tool and Singularity Hyperautomation.

Certified delivery partners get scoping and sizing guides, statement of work templates, deployment runbooks and project plans. SentinelOne says it will recognize them publicly “so customers can easily discern who is best suited to set them up for success.”

The Prompt Security certification is “available today”, and partners can join the ADR early access program now. The broader rollout to the PartnerOne network comes “in the coming months”. Until then the premier launch partners are LevelBlue, GuidePoint and World Wide Technology (WWT).

The MSP route runs through N-able

For MSPs that buy SentinelOne through N-able, the expanded deal widens what they can buy. N-able’s list of SentinelOne products now runs beyond endpoint detection and response (EDR) to Prompt Security, Purple AI, Singularity Hyperautomation, AI SIEM, data pipelines and the Singularity Data Lake, plus AI, cloud and identity coverage. The release says the partnership is backed by N-able teams “trained to the SentinelOne standard, within one commercial contract and support line across the resilience stack”.

Bryce Grow, SentinelOne’s senior vice-president for global channel and MSP, said the two companies were giving organizations “the tools, intelligence, automation and expertise needed to defend this new and expanding attack surface at the speed and scale AI requires.” Laura DuBois, general manager of N-able UEM, described the result as “a single, trusted partner” for security and business resilience.

Who carries the customer

SentinelOne’s shares rose 4.4% in afternoon trading on 21 October, according to StockStory, which linked the move to the new agentic detection and autonomous SOC products as well as the LevelBlue appointment.

MSSPs that sell their own MDR on the Singularity platform sit alongside a SentinelOne-branded MDR service that will now be delivered globally by LevelBlue and backed by joint go-to-market work between the two companies. Resellers and MSPs without their own security operations center get a certified route into AI security work and, through N-able, one contract for more of the platform. Delivery of SentinelOne’s own managed service is not part of what they are offered.

Padgett’s line about partners owning the service layer applies to the AI security products launched at OneCon. Delivery of Wayfinder, the managed service SentinelOne already sells under its own name, has gone to LevelBlue, worldwide and on an exclusive basis.