Summary

Portnox said its new Microsoft Defender integration joins existing CrowdStrike and SentinelOne integrations to enforce network controls based on risk signals. The company said organisations can automatically block or quarantine agent identities and revoke access when an agent behaves anomalously or violates policy.

Why it matters

Agent adoption is creating demand for controls that can stop autonomous systems at the identity and network layers rather than only alerting human operators.

Sources