ConnectWise and SentinelOne unveil joint strategy to advance AI-driven security for MSPs

During the Black Hat 2026 conference, MSP platform giant ConnectWise and cybersecurity leader SentinelOne announced a unified long-term strategy designed to advance managed cybersecurity capabilities for MSPs. The alliance deepens the companies' existing collaboration around ConnectWise Managed EDR, creating a joint operational framework that connects SentinelOne’s AI-powered Singularity Platform with ConnectWise’s managed security services and agentic workflows

Governed Autonomous Defense with Human Oversight

The joint initiative addresses a growing operational bottleneck for MSPs: managing expanding customer attack surfaces while shielding clients from high-velocity, AI-driven threats.

Rather than fully handing security operations over to unmonitored AI, the strategy centers on governed autonomous defense. The integrated ecosystem leverages autonomous threat detection, automated investigation, and immediate remediation while keeping human security analysts from ConnectWise's Security Operations Center (SOC) directly in the loop to validate actions and handle edge cases.

Core Strategic Principles

ConnectWise and SentinelOne outlined a six-point framework guiding their technical integration roadmap:

• Foundation Acceleration: Building upon the established ConnectWise Managed EDR platform powered by SentinelOne.

• Operationalizing Intelligence: Making cross-environment security intelligence easier to deploy and manage across multi-tenant MSP client networks.

• AI & Automation: Deploying agentic AI and automated response capabilities to resolve threats faster and enforce consistent security policies.

• Human-in-the-Loop Control: Ensuring MSPs and ConnectWise SOC teams maintain explicit operational oversight over automated security workflows.

• Open Ecosystem Commitment: Preserving partner flexibility by maintaining open integrations with third-party IT management, PSA, and RMM tools.

• Partner-Ready Milestones: Delivering upgraded security capabilities through phased, structured platform rollouts over coming quarters.

Easing SOC Labor Shortages and Tool Sprawl

The expanded strategy comes as MSPs struggle to build and staff internal 24/7 Security Operations Centers due to talent shortages and high analyst burnout rates. By combining ConnectWise’s deep IT management context, such as ticketing data, patch states, and remote management telemetry, with SentinelOne’s Singularity platform, the joint solution automates lower-level SOC triage tasks to maintain tight response SLAs without requiring headcount surges.

"MSPs are being asked to protect more customers, manage greater complexity, and respond to threats that move faster than traditional operating models can support," said Manny Rivelo, CEO of ConnectWise. "By aligning our strategies, we bring forward meaningful capabilities in the right sequence, with clear and practical value for partners."

The phased rollout of newly integrated AI security features and automated response capabilities across the ConnectWise and SentinelOne platforms will continue through the remaining quarters of the year.