Netskope One Threat Protection is a security service edge solution that detects and blocks advanced malware, ransomware, and phishing attacks. The platform provides threat protection across web, SaaS, IaaS, shadow IT, shadow AI, and private applications through inline and API-based security controls. The solution uses machine learning and AI-based defenses to identify zero-day and unknown threats in real time. It employs focused machine learning models with network signals and risk metrics at user and organizational levels. The platform includes patient zero protection that holds files during threat analysis and alerts users when new threats are detected in previously downloaded files. Features include a sandbox API with MITRE ATT&CK analysis, retrohunt capabilities for file analysis, and inline malware retention to customer cloud storage. The solution provides ransomware detection through machine learning that monitors file operations and uses data transformation algorithms to detect unauthorized file encryption across multiple dimensions. It can scan sanctioned cloud services for unauthorized encryption activities. The platform integrates with Cloud Exchange, offering connections to threat intelligence sharing, log export, risk score exchange, and workflow automation capabilities.
