Your Netskope Monthly Highlights – August 2026
The latest updates, resources, and events – all in one place.
Hi there,
As part of our ongoing commitment to helping you get the most value out of your Netskope investment, we’re excited to bring you this month’s Netskope Highlights—your one-stop roundup of the latest product updates, expert content, and upcoming learning opportunities.
🚀 Product Release Updates
Release 140.0.0 is here! Explore this month’s key features and enhancements to ensure you’re getting maximum value from your setup.
✅ Pro Tip: Check for features relevant to your current configurations.
✅ Features not to miss out!
This section highlights key innovations from the recent Netskope release that can significantly enhance your Adoption and Value Realization journey.
Top Highlights:
Agentic Broker for Securing MCP Communications
Agentic Broker now lets you apply real-time protection policies directly to Model Context Protocol (MCP) traffic from a dedicated RTP page—scoped to specific MCP server(s), an MCP Server Category from the MCP Servers Catalog, or Any MCP Traffic. It also extends MCP activity visibility in SkopeIT, surfacing new MCP activities in Application Events with additional context in the Application Event Details.
Business Value:
- Close the AI access-control gap: IBM’s 2025 Cost of a Data Breach Report found 97% of organizations hit by an AI-related breach lacked proper AI access controls, and high levels of shadow AI added USD 670,000 to the average breach—governing agent-to-tool traffic puts enforcement exactly where that gap sits.
- Get ahead of the fastest-growing risk: In WEF’s 2026 Global Cybersecurity Outlook, 87% of respondents rated AI-related vulnerabilities the fastest-growing cyber risk, yet roughly one-third of organizations still have no process to validate AI security before deployment.
Technical Value:
- Granular MCP policy targeting: Build RTP rules that match specific MCP server(s), an MCP Server Category, or Any MCP Traffic.
- Deeper SkopeIT telemetry: Relevant MCP activities now appear in Application Events, with additional data in Application Event Details for investigation.
File Hash, Object ID & Password-Protection Controls in RTP File Profiles
You can now configure advanced file attributes directly inside Real-Time Protection file profiles—cryptographic hashes (MD5/SHA256) with bulk CSV import, and detection of password-protected ZIP, PDF, and Office files. These attributes are evaluated natively by the inline proxy, removing the dependency on attached DLP or Threat Protection profiles, and apply to web and cloud-app traffic including Box, Google Drive, and ChatGPT (up to 256 MB, or 400 MB with Large File Support). Business Value:
- Cut off malware in trusted paths: CrowdStrike’s 2026 Global Threat Report found 82% of detections were malware-free, with adversaries moving through authorized, trusted pathways—native hash blocklists and encrypted-file detection give inline enforcement against exactly those known-bad and evasive artifacts.
- Contain secret and credential leakage: Verizon’s 2025 DBIR reported a median 94 days to remediate secrets leaked in a public GitHub repository, with ransomware present in 44% of breaches—native file-hash controls let you block known malicious or sensitive files the moment they move.
Technical Value:
- Native inline evaluation: Hash and encryption-state attributes are processed by the inline proxy engine instead of being handed off to Threat Protection, so inspection is faster.
- Operational scale: Bulk CSV import for large hash lists; one known limitation—hash validation isn’t supported for partial downloads.
Advanced Threat Indicators for Malware Incidents
Malware incidents now expose advanced threat indicators—MITRE ATT&CK techniques (T#) plus the IPs, domains, and URLs collected during Threat Protection’s analysis of the file—all viewable and searchable directly from the malware incidents page.
Business Value:
- Beat a shrinking response window: CrowdStrike measured average eCrime breakout time at 29 minutes in 2025 (fastest: 27 seconds)—surfacing TTPs and IOCs at the incident level compresses the time analysts need to scope and contain.
- Add context where malware hides in plain sight: With 82% of 2025 detections malware-free and ransomware in 44% of breaches, technique- and indicator-level context helps teams connect a single file to a broader campaign.
Technical Value:
- MITRE-mapped enrichment: View and search malware incidents by MITRE technique (T#).
- Pivotable IOCs: IPs, domains, and URLs extracted during analysis are searchable from the malware incidents page for faster hunting.
Want to learn more? Dive into the release notes
📚 Technical How-To & Knowledge Base Picks New articles and quick guides to achieve most common use cases 🔍Explore the complete Knowledge Base here
Recently released articles:
- Configuring Real-Time Protection Policies for MCP Traffic with Agentic Broker
- Building Advanced File Profiles: Hash Lists and Password-Protected File Detection in RTP
- Investigating Malware Incidents with MITRE Technique and IOC Search
🛠Scheduled Maintenance
Don’t get caught off guard. Review upcoming maintenance events and prepare your teams in advance. 🔧 Visit the Trust Portal
🎓 Learn Live with Netskope Experts – Webinars & Office Hours Join our upcoming sessions featuring practical demos, platform tips, and best practice walkthroughs.
📅 View Upcoming Webinars & Workshops here
Don’t miss out our customer success webinar featuring a walkthrough of features from recent Netskope releases (R139, R140 and R141) in October : Link to Register
📰 From the Blog: Deep Dives & Trends
Stay informed with expert analysis, threat trends, and strategic platform insights.
📝 Read the Latest Articles here
Featured stories this month:
- Netskope Among 3 Highest Ranked Vendors in All Use Cases in Gartner® SASE Critical Capabilities
- Netskope Integrates Real-Time, Agentless DLP for Claude Enterprise
- Data Security from Discovery to Remediation
- From AI Adoption to AI Accountability in Federal Agencies
- Governing Agentic AI at the Decision Point: AWS + Netskope
⭐️ Customer Favourite This Month: AI Guardrails – Risky URL Detection
- What it is: Two new predefined AI Guardrails categories—Malicious URL Detection and Newly Registered & Observed Domains—that inspect the URLs appearing inside GenAI prompts and responses, not just the app being used.
- What it catches: Phishing links, command-and-control (C2) callbacks, malware call-home traffic, and malware distribution points, plus domains that are newly registered or newly observed and therefore carry elevated risk before reputation feeds catch up.
- Where it runs: Enforced via an AI Guardrails profile in either a Real-Time Protection policy or an AI Gateway policy—so you can apply it to direct user GenAI traffic and to API/gateway-mediated agent traffic alike.
- Block or alert: Choose per policy whether a risky URL in a prompt or response is blocked outright or logged as an alert, letting you start in monitor mode and tighten to enforcement as you build confidence.
- Why customers like it: It screens risky URLs in GenAI traffic with zero custom rule-building—no manual URL lists to maintain, no separate profile to attach.
- Coverage that keeps pace: Newly registered and newly observed domain detection specifically targets the short-lived infrastructure attackers spin up for phishing and C2, closing the window where brand-new domains would otherwise slip through.
- Threat context: With 87% of WEF 2026 respondents rating AI-related vulnerabilities the fastest-growing cyber risk—and IBM 2025 finding 63% of breached organizations still have no AI governance policies—inline URL screening on prompts and responses closes a fast-moving gap most programs haven’t yet addressed.
- Best paired with: Agentic Broker MCP policies and the new file-hash RTP profiles above, for layered coverage across agent traffic, file movement, and GenAI content.
All the key info and resources are also curated for you in one spot. Don’t forget to subscribe to receive an email as soon as a new update is posted.
If you have any suggestions to help improve the Monthly Updates, please share your thoughts in the comments below.
See you next month with our September 2026 Highlights!
Warm Regards,
Netskope Customer Experience Team
