Senior Developer 1 - Exposure Management Platform

Arctic Wolf launches Aurora Adaptive Threat Protection. 15 Oct 2026 Quick Read Summary is AI-generated, newsdesk-reviewed * Arctic Wolf launched Aurora Adaptive Threat Protection, an AI-powered endpoint security solution, at 2026 summit. * Intent-based detection analyzes endpoint activity to disrupt and roll back ransomware and credential theft earlier. * Exclusive beta availability; complements existing EPP and EDR tools with minimal performance impact. Arctic Wolf introduced Aurora Adaptive Threat Protection at its 2026 Security Operations Summit, describing it as an endpoint security solution designed to detect and disrupt ransomware, credential theft and other evasive attacks earlier in the attack chain. The company says the product uses AI-powered, intent-based analysis to identify malicious activity and can reverse attacks before they cause significant damage. The solution is designed to run alongside existing endpoint protection (EPP) and endpoint detection and response (EDR) tools, including third-party products and Aurora Endpoint Security. Arctic Wolf says organizations can add it without replacing their current endpoint security platforms. Detecting malicious intent earlier. Rather than relying on individual indicators of compromise, Aurora Adaptive Threat Protection analyzes how processes and events unfold across an endpoint. It looks for patterns in which actions that may initially seem legitimate begin to point toward a malicious outcome. The company says this approach can enable the solution to interrupt and roll back attacks before they fully develop. Aurora Adaptive Threat Protection analyzes how processes and events unfold across an endpoint The launch comes as attackers increasingly use compromised credentials, trusted tools and gradual techniques to blend into routine business activity. Arctic Wolf says ransomware accounted for 44% of its incident response engagements in the last year. It also cites an estimate that credential-harvesting malware collected 1.7 billion credentials from 7.4 million infected devices. As AI helps attackers automate reconnaissance, accelerate intrusions and scale campaigns, security teams face pressure to identify threats earlier. Gartner(R) recently noted, "To stay ahead of AI-augmented attacks, enterprises are increasingly moving beyond reactive monitoring toward preemptive controls, specifically capabilities that can deny, deceive, and disrupt adversaries." How the endpoint security solution works. Aurora Adaptive Threat Protection builds a causal graph of endpoint activity, including processes, files, registry activity and API calls. By retaining context over time, it can assess how events are connected and look for attacker intent even when individual actions appear benign. The product also uses agentic workflows and a custom-trained small language model to evaluate activity and distinguish normal business operations from emerging threats. When it confirms malicious intent, Arctic Wolf says the solution can automatically stop the activity and reverse the attack chain, with the aim of reducing recovery time and manual remediation. "Attackers often don't need malware to cause damage. They can use legitimate tools, trusted credentials, and AI-driven automation to hide in plain sight, all at machine speed," said Dan Schiappa, President of Technology and Services at Arctic Wolf. "That's why endpoint security needs to evolve. Endpoint detection and response does rich detection well, but that work needs to happen earlier. Aurora Adaptive Threat Protection shifts the mindset from a purely detection and response approach to a more preemptive approach, identifying malicious intent and disrupting threats earlier in the attack chain." Designed to complement existing tools. Arctic Wolf says the solution provides visibility into the history of endpoint activity Arctic Wolf says the solution provides visibility into the history of endpoint activity, helping security teams connect events that may otherwise appear unrelated. It is designed to roll back malicious activity to help restore normal business operations and to operate without materially affecting endpoint performance, memory or CPU use. The company also says earlier intervention and rollback can reduce the administrative work involved in response and remediation. Aurora Adaptive Threat Protection is backed by the Aurora Superintelligence Platform, which processes more than 10 trillion security events each week across more than 11,000 customers. Arctic Wolf says the service combines AI-driven analysis with its security operations platform and is intended to complement existing endpoint solutions, with human oversight and validation. Aurora Adaptive Threat Protection is now available in an exclusive beta for Arctic Wolf customers. Enrollment for organizations interested in participating opens today.

Arctic Wolf has launched Aurora Adaptive Threat Protection, an endpoint security product that uses AI to spot and stop attacks earlier. The company unveiled it on October 14, 2026, at its Security Operations Summit. The tool maps endpoint activity to detect malicious intent, even when individual actions look harmless. It can interrupt an attack and roll back its effects. It runs alongside existing endpoint protection and detection tools, so customers need not replace them. Arctic Wolf says ransomware made up 44% of its incident response engagements in the past year. It is backed by a platform that processes more than 10 trillion security events a week across more than 11,000 customers. The product is now in exclusive beta for Arctic Wolf customers.

Arctic Wolf expands the Aurora Superintelligence Platform to Deliver AI visibility, broader Security Coverage, and new generative Assistant skills. New Shadow AI Discovery(TM) capability, enhanced Aurora Security Assistant skills, and expanded integrations help organizations govern AI, accelerate investigations, and strengthen their security posture. EDEN PRAIRIE, Minn., Oct. 14, 2026 (GLOBE NEWSWIRE) - Arctic Wolf(R), the cybersecurity and AI company, today announced at the 2026 Security Operations Summit new capabilities in the Aurora(R) Superintelligence Platform that help organizations gain visibility into AI adoption, access security insights faster, and extend protection across customers' rapidly expanding attack surfaces. As AI adoption accelerates across the enterprise, organizations face a growing challenge that they cannot secure what they cannot see. Employees are rapidly embracing AI-powered tools, security teams are managing increasingly complex environments, and critical security information remains scattered across multiple platforms and applications. Without visibility, organizations can't effectively manage AI risk. As a result, security teams struggle to prioritize risk and take action. According to a report by the Cloud Security Alliance, 98% of organizations experienced unsanctioned AI use. To help customers address these challenges, Arctic Wolf is introducing Shadow AI Discovery, a new feature that is designed to uncover and inventory sanctioned or unknown AI tools in use across an organization. Additionally, the company is adding new Aurora Security Assistant capabilities, and expanded technology integrations that bring more data, intelligence, and visibility into the Aurora Superintelligence Platform. "Security teams are under pressure to move faster while managing more data, more threats, and more AI risk than ever before," said Nick Schneider, president and chief executive officer at Arctic Wolf. "Visibility is the foundation of security in the age of AI. The advancements we are introducing today of the Aurora Superintelligence Platform help customers understand how AI is being used across their environment so they can establish stronger management processes and act on insights in real time." Visibility into AI Activity Across the Environment AI adoption is happening faster than many organizations can inventory, manage, or assess risk. According to the SANS 2026 AI Survey, 63% of practitioners cite a lack of visibility into where AI models are being used and what information they may expose. Soon available to Aurora Managed Detection and Response(R)(MDR) customers, Shadow AI Discovery is designed to identify AI tools in use across network, identity, and endpoint telemetry to create an inventory of AI activity, enable classification as sanctioned or unknown, and highlight potential data exposure risks without requiring additional deployments. With a centralized inventory of AI usage, organizations can better identify unauthorized tools, measure AI adoption trends, and evaluate the effectiveness of governance policies over time. When gaps are identified, organizations can assign AI-focused training through Aurora Security Awareness and Training to teach employees AI best practices and reduce human risk. Advancing Aurora Security Assistant to Deliver Comprehensive Answers Across Risk, Exposure, and Operational Queries Arctic Wolf is also significantly enhancing Aurora Security Assistant, the natural language interface to the Aurora Superintelligence Platform, with new skills that provide greater access to insights across the Arctic Wolf portfolio. Customers can now get information from Aurora Exposure Management, Aurora Threat Intelligence, and their own Security Journey, helping them to investigate issues faster and prioritize with context, all through simple, natural language conversation. The new skills enable customers to ask questions about outstanding Security Posture In-Depth Review (SPiDR) findings and Security Journey actions, such as what requires attention, which reviews need a response, and what steps should be taken next. They can also quickly understand their current risk posture by identifying critical vulnerabilities, riskiest assets, and endpoints that failed recent vulnerability scans. Grounded in the Security Operations Graph of the Aurora Superintelligence Platform(R), Aurora Security Assistant helps customers move from searching for information to taking action, providing self-service access to security insights, recommendations, and operational context in seconds. Expanded Integrations Extend Security Coverage Arctic Wolf is further expanding the Aurora Superintelligence Platform with multiple new technology integrations enabled by the platform's Open Data Pipeline, which converts raw telemetry from across a customer's attack surface into high-quality security signal. These integrations broaden the telemetry monitored by the Aurora Agentic SOC and extend detection and active response capabilities across customers' existing environments, so organizations enhance the value of the technologies they already use without replacing them. New coverage includes: * Web Application Firewalls (WAFs): New Cloudflare and Imperva integrations enable detection and active response for threats targeting web applications and services, helping customers respond faster to malicious activity. * Backup and Recovery: A new integration with Veeam brings backup and recovery intelligence into the Aurora Superintelligence Platform, extending visibility into backup infrastructure that attackers increasingly target to disrupt recovery efforts. * Medical Provider Applications: New integrations with Epic Systems EHR, Claroty xDome Healthcare, and Imprivata ITDR. * Additional integrations: ExtraHop Reveal(x) 360, Datadog, Proofpoint Essentials, 1Password, Google Workspace, Trend Vision One Endpoint Security, Palo Alto Cortex, and Claroty xDome Industrial. Together, these integrations bring even more of the customers' security ecosystem into the Aurora Superintelligence Platform, helping them expand visibility, strengthen detection and response, and get more value from their existing technology investments. About Arctic Wolf Arctic Wolf is the cybersecurity and AI company that ends cyber risk by transforming it into business resilience. Powered by the Aurora(R) Superintelligence Platform, Arctic Wolf delivers modern security operations built on proprietary AI and decades of real-world expertise. By combining AI-driven automation with expert-validated precision, Arctic Wolf helps organizations confidently manage cyber risk, so they can operate with control and the freedom to innovate. To learn more about Arctic Wolf, visit www.arcticwolf.com. Media Contact Oliver Cowley Manager, Corporate Communications, Arctic Wolf [email protected] Disclaimer: Shadow AI Discovery is planned for availability to select customers beginning in November 2026 and is not yet generally available. Timing, features, and functionality may change. This blog may include forward-looking statements. These reflect its current views and are subject to change. They are not guarantees, and actual results may vary.