Learn

 This document outlines the integration of Netskope Web Transaction Logs with Microsoft Sentinel on Azure US Government cloud using the Codeless Connector Framework (CCF). Separate templates are provided for comma-delimited and space-delimited blob data. This native integration provides near real-time visibility for effective threat hunting and incident management. To configure Netskope Log Streaming to send logs to your Blob storage please go through the article: https://docs.netskope.com/en/stream-logs-to-azure-blob ✅ Update: Azure Government now supports restricting public network access on Blob Storage through Azure Network Security Perimeter (NSP). See the 🛡️ Securing Blob Storage Access with Azure Network Security Perimeter (NSP) — Azure Government section below for the full walkthrough, including the Government-specific ordering of steps. 🏗️ Integration Architecture OverviewThe integration leverages several Azure services to ensure reliable and scalable log delivery: Netskope

Anthropic’s Claude has gone from "the AI tool a few teams were experimenting with" to mission-critical infrastructure: Developers ship code with Claude Code. Analysts build entire workflows on Claude Projects. Platform teams run inference at scale through the Claude Platform. But here's the uncomfortable question: Do you have the same security governance over Claude that you have over Slack, Google Workspace, or Salesforce? If the answer is "not yet" — this post is for you.Netskope has built an integration with the Claude Compliance API, giving security and compliance teams visibility into Claude usage directly within the Netskope One Platform. This brings Claude Enterprise and Claude Platform activity under the same security umbrella as every other application in your stack.No new tools. No separate dashboards. The same console your team already uses. Let me walk you through what this looks like — and more importantly, why it matters.The Problem: AI Apps Are the New Shadow IT When

Author: Stevan PierceDate: May 8, 2026Modern security teams are stuck in an old debate.The business wants ChatGPT, Copilot, Cursor, Gemini, and the next AI assistant your CEO sees demoed at a conference. The security team sees prompts full of source code and customer PII heading to a third-party model, an MCP server nobody vetted suddenly connecting to your data lake, and an "AI Overviews" toggle that quietly turned a sanctioned search engine into a generative assistant overnight.The instinct is to block. Block the domain. Block the category. Send a stern email.It doesn't work. Blocking a sanctioned AI assistant doesn't make the data exfiltration risk go away.  It just pushes the user to a personal account on their phone, where you have zero visibility. And the embedded AI in apps you've already approved? You can't block that without breaking the app.At Netskope, we faced this exact problem in our own environment. As Customer Zero, our security team not only secures Netskope but also p

In this 2 minute Ask SME Anything video you’ll discover how data lineage provides a visual roadmap of your data’s journey—revealing exactly how it moves, mutates, and who touches it along the way.Hear from Product Marketing Director, Ankur Chadda, as he explains how pairing lineage with your DLP strategy creates a powerhouse toolkit that ensures no data movement goes unnoticed.  

In this special edition of our Inside Netskope series, our internal leadership team will share our Fusion Team Framework. Hear how we integrated security architects into IT delivery cadences to resolve decision-right friction at Netskope, and the Metrics/Artifacts that validated our shift.Our CIO and CISO will cover: The Fusion Team Framework: An analysis of the shared charter and decision-rights model used to align CIO and CISO priorities Architectural Integration: A look at embedding security architects directly into IT delivery cadences to eliminate deployment friction Operational Metrics: A review of real-world data, including UAR cycle-time compression and SLA compliance for JML (Joiner/Mover/Leaver) processes Governance Artifacts: A deep dive into orphaned account remediation rates and the technical documentation powering the shift from theory to practice For more information, check out this article.    View past events in this series!

Objective: Develop a comprehensive guide for configuring SAML-based Single Sign-On (SSO) between PingFederate and the Netskope Admin Console.Overview: This documentation will outline the methodology for enabling secure administrative access to Netskope using PingFederate as the Identity Provider (IdP).Prerequisites: Netskope Tenant: Local administrator privileges are required to modify SAML settings within the Netskope console. PingFederate: Administrative access to the PingFederate environment to configure the Service Provider (SP) connection. Workflow:Step 1 - Click on Application button in the top barStep 2 - Once the application page loads, click on SP Connections.Step 3 - In the SP Connections, Click on Create Connection. A SP (Service Provider) Connection is a configuration set that allows PingFederate (acting as the Identity Provider or IdP) to securely communicate and share identity data with an external application or service.Step 4 - Select Do not use a template for this co

Objective: Develop a comprehensive configuration guide for SCIM provisioning between PingFederate and Netskope.Scope: This guide will detail the end-to-end process for automating user provisioning via the SCIM protocol.Prerequisites: Netskope: Administrative access to the local tenant is required to configure SCIM settings. PingFederate: Administrative privileges within the PingFederate environment to manage application integration. Workflow:Step 1 - Login to your PingFederate Application using your login credentials.Step 2 - If it's your first time login then you will be asked to reset your password. Else, continue to the next step.Step 3 - Once you login successfully, you will see the home screen. In the home screen, you will find all the required actions items. Step 4 - Now, before enabling the SCIM integration, we need a service account for the PingFederate application to communicate with the netskope tenant. Login to your tenant which needs to be integrated for SSO / SCIM. URL w

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 133, 134, and 135.  Key product updates: Comprehensive AI Security and Governance: Protect private AI applications with the Netskope AI Gateway and AI Guardrails, providing real-time content moderation, threat protection, and vulnerability assessments via AI Red Teaming to ensure compliance and quality Advanced Visibility for Agentic Workflows: Gain full oversight of Model Context Protocol (MCP) communications through the Agentic Broker, featuring detailed audit logs and policy enforcement for remote MCP servers and clients within Skope IT Steganography detection: Identify and protect sensitive information from the growing threat of sophisticated data-hiding techniques Manager Escalation: DLP Analysts can now initiate a review workflow to request feedback from the manager of the user who committed the DLP violation DLP on Demand: Power your DSPM scans using Netskop

We have two major releases to announce for our ServiceNow ecosystem — the brand-new Netskope CMDB Integration app, now available on the ServiceNow Store, and version 3.0 of the Netskope SecOps (SIR) app, which brings significant new capabilities to security operations workflows.Whether you're an IT operations team looking to bridge your CMDB with Netskope's Zero Trust visibility, or a SOC team wanting richer incident response automation — there's something here for everyone. PART 1 — NEW APP Introducing the Netskope CMDB Integration AppThe Netskope CMDB Integration app is a first-of-its-kind release that connects Netskope's Security Service Edge (SSE) platform directly to ServiceNow's Configuration Management Database. This app is purpose-built for IT and security operations teams who want Netskope's asset, policy, and access data living natively within their ServiceNow CMDB — no custom scripts, no middleware, no manual exports.  1.  Private App Bidirectional SyncThe CMDB app supports

Hear from our security engineers as they demonstrate how CE's three integration pillars of Cloud Threat Exchange (CTE), Cloud Ticket Orchestrator (CTO), and Cloud Risk Exchange (CRE) connect Netskope to the tools we already rely on, turning isolated signals into coordinated, automated action.Learn how to: Automatically ingest curated threat feeds and STIX-formatted IOCs from Feedly's AI-powered intelligence engine and any TAXII-compliant source Bidirectionally share email-borne threat indicators from Mimecast and endpoint-detected IOCs from CrowdStrike Falcon Propagate AWS infrastructure threat findings from GuardDuty and supply chain risk signals from GitHub directly into Netskope's threat intelligence pipeline Feed Mimecast email threat signals into Netskope's User Confidence Index (UCI), dynamically adjusting cloud access policies For more information, check out our blog post.    View past events in this series! Check out some customer questions below, or feel free to comment

This is a demo covering how Netskope provides full visibility, control, and protection for genAI app usage. Learn more.

 This is a demo of the Netskope One Agentic Broker, which provides unified visibility and real-time protection for the autonomous AI ecosystem by decoding and securing Model Context Protocol (MCP) traffic between AI agents and data sources. Learn more about Netskope One Agentic Broker.

 Netskope One AI Guardrails provides real-time content moderation for every interaction, securing the enterprise against emerging AI-specific threats including prompt injection and jailbreak attempts, and unsafe use. Learn more.Netskope One AI Gateway secures the API traffic fueling your AI-powered applications. By centralizing authentication, traffic management, and content inspection between private apps and LLMs, we ensure autonomous agentic data flows remain governed and secure. Learn more.

Author:  Stevan Pierce & Madhura SridharDate: March 16, 2026Modern security teams are drowning in “partial truths.”Your email gateway flags suspicious links. Your EDR finds a questionable process. Your SASE platform sees risky SaaS behavior. Your IAM solution logs a strange login pattern. Each tool is doing its job yet each is also speaking its own language, in its own console, with its own definition of “risk.”The result is a familiar and frustrating reality:Analysts jump between dashboards Teams argue over whose alert is “right” Critical context is trapped in silos And incident response lags behind the adversaryAt Netskope, we faced this exact problem in our own environment. As “Customer Zero,” our security team not only secures Netskope but also pushes our own platform to its limits, trying to solve the same challenges our customers wrestle with every day. This is where Netskope Cloud Exchange (CE) comes in.Cloud Exchange is how we connect the Netskope One platform with the tool

 Proactively identify and address vulnerabilities in private AI deployments. Automate adversarial simulations to find and fix vulnerabilities, to ensure your AI is resilient and production-ready before it reaches your users. Learn more about Netskope One AI Red Teaming.

Hear from our internal IT and security team as we share how we deployed Netskope Enterprise Browser within our managed endpoints here at Netskope. We will cover: Overview of high impact use cases  Deployment to Windows Endpoints: Leveraging Intune with the focus on Auto Enrollment deployment internally Deployment to MacOS Endpoints: Leveraging Kandji with the focus on Auto Enrollment deployment internally Troubleshooting deployment issues and remediation examples Alternative Deployment Method: Manual user invite—Non managed device user install and enrollment  For more information, check out our resources below: Deploying to Mac Fleet | Deploying to Windows Fleet | Enterprise Browser Usage Dashboard | Enterprise Browser Risk Dashboard | How to Import a Dashboard into Advanced Analytics  View past events in this series! Check out some customer questions below, or feel free to comment and continue the discussion!  Q: Do users need admin permission to install?A: Users do not need l

Looking for nice well presentation for netskope with video shots

Hear from our Product Management and Product Adoption leads as they cover the latest platform updates from Release 130, 131, and 132. Key product updates: DNS as a Service (DNSaaS) provides a high-performance cloud-hosted recursive DNS resolver, DNS security, and DNS content filtering for business and security risk categories DLP for FTP prevents data exfiltration over non-web FTP file transfers DLP on Demand enables new data protection integrations for Netskope technology alliance partners and on-premises support for customers NextGen Data Protection for Microsoft Co-pilot can now support policy creation, DLP, threat protection using ongoing scan, alerts, and more NG SWG allows seven new granular subcategories for Generative AI, available within URL categorization, enabling their use in Real-Time Policies    Explore past webinars in this series!

 Goal: Create a guide on how to pass Tenant Admin role from Okta to Netskope.Example: When logging in to Netskope Admin Console through Okta, different roles should be passed as per the requirement of the flow.Information coming from Partner: Administrator should be able to configure different roles for different members as per the requirement definition.Limitations: For a single Okta application, only 1 SSO can be configured in Netskope. To achieve this either we need to have multiple groups or single application with defined role.Key Concepts:Netskope Tenant - Admin should have local tenant admin account access to the Netskope tenant so that he can create custom roles / see the predefined roles during first time configuration. Workflow:This can be solved using 2 methods. Method 1 - Using Group AttributesIn this method you can create multiple groups. Just remember that the group name should be the same as the Predefined role / Custom role configured in the Netskope Tenant. Steps:1 - S

The Netskope Model Context Protocol (MCP) server was initially introduced as a self-hosted prototype, marking a significant first step in integrating Netskope’s rich security context directly into Large Language Model (LLM) workflows. This initial version demonstrated the power of the concept, enabling pioneering users to run a Docker image and establish a vital link between their LLM agents and the Netskope platform.Today, we are announcing the Netskope MCP Server Hosted Version in Technology Preview, building upon the capabilities of the initial prototype while dramatically simplifying deployment and adoption.📈 Enhanced Accessibility: Zero Infrastructure, Immediate ValueWe have moved from a "bring your own infrastructure" model to a fully managed service, eliminating the overhead of self-management. The benefits are clear:No Containers Required: We have eliminated the need for local Docker execution or complex infrastructure setup. Instant Connection: Access is provided via a direct

Hear from our internal security team as they share how we use Enterprise Browser to provide the granular visibility and control needed to secure all web activity at Netskope.  We will cover: Preventing Data Loss (DLP): How to enforce real-time policies to stop data exfiltration by controlling copy/paste, screen captures, file downloads, and printing, all within the Enterprise Browser. Securing Unmanaged Devices: Strategies for safely enabling BYOD and third-party contractor access to corporate apps without requiring an installed agent or VDI.   Advanced Threat Protection: Blocking phishing, malware, and malicious websites at the browser level before they can impact the endpoint or network as well as control 3rd party browser extensions. Enforcing Zero Trust Access: Integrating with your identity provider to apply adaptive access controls and ensure only authorized users access specific applications. For more information, check out our blog post.  View past events in this series!