SentinelOne Deploys AI Security Platform In AWS Sydney To Address Data Residency Concerns

SentinelOne has made its Prompt Security offering available through the Amazon Web Services Sydney region, giving Australian organisations a local data-residency option for securing employee AI use, AI applications and autonomous agents.

The deployment is among the first of its kind in the region and is designed to address growing demands from government agencies and regulated industries for AI security tools that keep sensitive data within Australian borders.

The move comes as Australian business AI use has risen from 1 per cent to 12 per cent, and as regulators including APRA warn of emerging risks around prompt injection, data leakage and autonomous agent misuse.

SentinelOne’s Area Vice President for Australia and New Zealand, Jason Duerden, pointed to the speed at which AI has entered daily operations across Australian organisations.

“AI has moved into the daily operations of Australian organisations faster than most security and governance programs were built to accommodate. As of July, Australia ranked number one on Anthropic’s Claude usage index and security must be prioritised to support this rapid adoption,” Duerden observed.

“For government, financial services, insurance and critical infrastructure, data location can determine whether an AI security service is viable, particularly when it may inspect employee prompts, customer data, proprietary information and autonomous-agent activity. Local hosting removes a major barrier.”

The data residency challenge for AI security

The deployment highlights a tension that has emerged as organisations adopt AI security tools. The tools designed to monitor what employees share with AI systems and what autonomous agents can access may themselves handle sensitive prompts, customer information, source code and credentials, making the data location of those security tools part of the risk equation.

Government hosting requirements and sector risk frameworks are placing greater scrutiny on technology services that process employee prompts, model responses and autonomous agent activity. For organisations subject to those requirements, an AI security service hosted outside Australia may not be viable regardless of its technical capabilities.

Duerden argued that the local deployment addresses this barrier directly.

“SentinelOne Prompt Security gives organisations the visibility and controls to stop sensitive information leaving through AI and set clear boundaries around what agents can access and do,” he remarked.

What Prompt Security covers

SentinelOne’s Prompt Security operates across three areas.

For employee and developer AI security, the platform discovers sanctioned and unsanctioned AI tools in use across the organisation, applies usage policies and prevents sensitive data, credentials, source code and intellectual property from leaking through prompts.

For AI application security, the platform tests applications for prompt injection, jailbreaks and data poisoning, then applies runtime controls to block malicious prompts and unsafe outputs.

For agentic AI security, the platform discovers AI agents, tools and Model Context Protocol servers, enforces least-privilege access and creates a searchable audit record of agent actions and interactions with enterprise systems.

The platform is model-agnostic and works across all major AI providers, including OpenAI, Anthropic, Microsoft and Google, as well as self-hosted models. It operates across browsers, desktop applications, AI agents and APIs.

SentinelOne’s General Manager of Prompt Security, Itamar Golan, outlined the rationale behind the product’s approach.

“AI security has to operate where the risk occurs, in the live exchange between a person, model, agent and the tools it can call,” Golan explained.

“Prompts can contain customer records, financial data, source code and credentials, while agents can hold persistent access to enterprise systems. Prompt Security gives security teams real-time visibility and enforcement across those interactions, allowing organisations to use AI productively without giving employees or autonomous agents unchecked access to sensitive information.”

Regulatory pressure building

The deployment aligns with increasing regulatory attention on AI security risks in Australia.

APRA has warned that information security practices are failing to keep pace with AI adoption, identifying prompt injection, data leakage, insecure integrations and autonomous agent misuse among the emerging risks that regulated entities must address.

The Australian Signals Directorate and its Five Eyes partners have also advised organisations to apply continuous monitoring, strict privilege controls and strong identity management to agentic AI, particularly where agents interact with connected tools outside traditional security boundaries.

These warnings reflect a growing recognition among regulators that AI introduces new categories of security risk that existing frameworks were not designed to address, particularly around autonomous agents that can take actions across enterprise systems without direct human oversight of each interaction.

Partner investment follows local deployment

The local availability of Prompt Security through AWS Sydney is already translating into partner investment, with Australian cybersecurity firm, AU Cyber, and New Zealand-based, Advantage, among the first regional partners building services on the Sydney-hosted platform.

The partner interest suggests that AI security is emerging as a new services category for the channel, particularly as regulated organisations seek assistance navigating the intersection of AI adoption, data sovereignty requirements and evolving regulatory guidance.

Broader context

Prompt Security was acquired by SentinelOne in 2025 and forms a component of the company’s AI security portfolio, which covers AI use across employees, applications, infrastructure and autonomous agents.

The Sydney deployment positions SentinelOne to compete for government and regulated industry business that requires Australian data residency, a requirement that has historically shaped procurement decisions across the public sector and financial services in particular.

The timing coincides with a broader wave of AI security product launches and deployments, as the enterprise technology industry responds to the rapid adoption of AI tools across Australian organisations and the governance challenges that have accompanied that adoption.

Last Updated on September 1, 2026 by Nick Ross