Listing Thumbnail

    Netskope One Incident Investigation Agent

     Info
    Sold by: Netskope 
    Deployed on AWS
    AWS Free Tier
    Empowers IT administrators to address vulnerabilities and ensure data protection.
    4.4

    Overview

    Note: This service requires an active subscription to the Netskope One Platform. Netskope One Incident Agent for AWS Agentcore provides advanced security solutions tailored to enhance your organization's cybersecurity posture. These agents integrate seamlessly with Security Copilot to deliver real-time threat intelligence, data protection, and risk mitigation capabilities. Ideal for IT administrators and security professionals, Netskope Agents empower users to proactively identify and address vulnerabilities, ensuring the safety of sensitive data and compliance with industry standards. The solution is designed to simplify complex security processes and provide actionable insights for better decision-making. By addressing the growing need for robust cybersecurity measures, Netskope Agents for Security Copilot help organizations stay ahead of evolving threats, reduce risks, and maintain operational continuity in an increasingly digital world.

    Highlights

    • Empowers IT administrators to address vulnerabilities and ensure data protection.

    Details

    Sold by

    Delivery method

    Integration protocol

    Type

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Trust Center

    Trust Center
    Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Netskope One Incident Investigation Agent

     Info
    This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    AI Insights

     Info

    Dimensions summary

    This listing uses a single pricing dimension. You get the product at no cost through the Free (default) usage dimension. There are no paid tiers, quantity commitments, or usage-based add-ons to choose from. All access is billed under this one Free dimension, so there is no scaling logic or category structure to compare. The Incident Investigation Agent is part of the vendor's cloud-native security and networking platform, which supports AI security and data protection use cases.

    Top-of-mind questions for buyers

    You access the Incident Investigation Agent at no cost through the single Free usage dimension. The pricing table does not list any quantity cap, metered unit, or overage charge. All usage falls under this one Free dimension. Contact the vendor to confirm any operational limits tied to your deployment.
    No. This listing has one Free dimension with no per-user, per-incident, or usage-based metering. There are no tiers to cross and no committed amounts to exceed. Your cost stays at zero regardless of how activity scales. No automatic upgrade or paid transition is triggered by increased use.
    The Incident Investigation Agent is part of the vendor's cloud-native converged security and networking platform, which supports AI security and data protection use cases. The Free dimension covers this agent itself. Any related platform components you may want are separate and not billed through this Free listing.
    www.netskope.com
    Helpful?

    Vendor refund policy

    This is a free offering as is

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    API-Based Agents & Tools

    API-Based Agents and Tools integrate through standard web protocols. Your applications can make API calls to access agent capabilities and receive responses.

    Additional details

    Usage instructions

    MCP

    Netskope MCP Server Setup

    Connect Claude to Netskope's MCP server to query security events, manage policies, and investigate incidents through natural language.

    Credentials

    You need three values. Your Netskope representative can help you obtain them.

    ValueDescription
    Tenant URLYour tenant identifier (e.g. mytenant from mytenant.goskope.com)
    Access Code6-character code from your Netskope representative
    API TokenBearer token from your Netskope admin console

    These form your MCP endpoint URL:

    <https://mcp-preview.goskope.com/><tenant_url>/<access_code>/mcp

    Store your token in an environment variable — never commit it to version control:

    export NETSKOPE_API_TOKEN="your-api-token-here"

    Option 1: Claude Code (Recommended)

    export NETSKOPE_API_TOKEN="your-api-token-here" claude mcp add \ --transport http \ --scope user \ netskope \ <https://mcp-preview.goskope.com/><tenant_url>/<access_code>/mcp \ --header "Authorization: Bearer ${NETSKOPE_API_TOKEN}"

    Verify with claude mcp list — you should see netskope in the output.

    Option 2: Claude Desktop

    Requires Node.js (for npx). Edit the config file:

    • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
    • Windows: %APPDATA%\Claude\claude_desktop_config.json
    { "mcpServers": { "netskope": { "command": "npx", "args": [ "mcp-remote", "<https://mcp-preview.goskope.com/><tenant_url>/<access_code>/mcp", "--header", "Authorization:Bearer <your-api-token>" ] } } }

    Replace the placeholders with your values, then restart Claude Desktop.

    Windows: If npx is not found, use C:/PROGRA~1/nodejs/npx.cmd instead.

    Verify the Connection

    Ask Claude: "What Netskope tools do you have access to?" — it should list the available tools.

    Example Queries

    • Show me the most recent 5 security alerts.
    • Search for DLP incidents from the last 24 hours.
    • What application events occurred for user <jane@example.com> today?
    • List all URL lists configured in my tenant.

    Troubleshooting

    IssueFix
    403 ForbiddenVerify your access code with your Netskope representative
    401 UnauthorizedRegenerate your bearer token in the admin console
    Server not appearingRestart Claude Desktop or re-run claude mcp add
    npx not foundUse the full path C:/PROGRA~1/nodejs/npx.cmd

    Support

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.4
    95 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    61%
    36%
    2%
    0%
    1%
    0 AWS reviews
    |
    95 external reviews
    External reviews are from G2 .
    Anonymous

    Reliable VPN with Excellent Remote Access Capabilities

    Reviewed on Aug 24, 2026
    Review provided by G2
    What do you like best about the product?
    I like how easy and reliable the Netskope One Platform is to use. It provides secure VPN access with good performance, making it simple for employees to connect to company resources remotely without much hassle. The reliable connection and speed were great, especially when working remotely. The initial setup was quite easy, and the team guided me through the process.
    What do you dislike about the product?
    I find the UI a bit complex and wish troubleshooting connectivity issues could be more straightforward. Overall, my experience has been good so far.
    What problems is the product solving and how is that benefiting you?
    Netskope One Platform secures our company network with reliable VPN access, safeguarding remote connections and enabling employees to safely access resources from anywhere. It simplifies remote work with easy, reliable, and high-performing VOB access.
    Nirmal K.

    Cloud XD Delivers Unmatched Granular Visibility and Policy Control

    Reviewed on Aug 18, 2026
    Review provided by G2
    What do you like best about the product?
    Netskope's key differentiator is its "Cloud XD" engine. While traditional security gateways might just see that a user visited Google Drive or Box, Netskope sees the exact action—such as differentiating between a user logging into a corporate Box account versus a personal one, or downloading a specific file type—and allows administrators to set highly granular policies based on those actions.
    What do you dislike about the product?
    Because the platform offers such deep, granular visibility and policy control, it is notoriously complex to set up. Security teams without prior SASE experience often face a steep learning curve and require significant time to properly configure initial deployment policies without breaking critical business workflows.
    What problems is the product solving and how is that benefiting you?
    Robust Data Protection (DLP): It features exceptionally strong, built-in Data Loss Prevention capabilities. It can scan data at rest via APIs (for example, finding sensitive files already stored in Microsoft 365) and inspect data in motion, preventing accidental leaks or malicious exfiltration.
    gautam p.

    Strong Cloud Security and Visibility with Netskope One

    Reviewed on Aug 17, 2026
    Review provided by G2
    What do you like best about the product?
    Strong cloud security with centralized policy management, real-time visibility, and effective protection for web and SaaS traffic.
    What do you dislike about the product?
    The platform is powerful overall, but some advanced configurations and troubleshooting can feel complex. The management console also isn’t as intuitive as it could be, which makes certain tasks harder than necessary.
    What problems is the product solving and how is that benefiting you?
    Netskope helps secure internet and SaaS traffic, enforces consistent security policies, and provides better visibility into user activity. As a result, it improves overall security, reduces risk, and makes centralized management much easier.
    Viral S.

    Robust Security With Netskope One Platform

    Reviewed on Aug 12, 2026
    Review provided by G2
    What do you like best about the product?
    I really like the unified cloud-native console for the next-gen secure web gateway, which provides deep visibility into web, cloud, and private application traffic. This feature allows efficient operations without the high latency overhead common to legacy VPN or hardware web proxies. The real-time policy enforcement is fantastic, allowing administrators to manage risk down to specific user actions rather than just blocking domains. It's pretty significant that the platform allows the creation of policies to control file downloads and restrict uploads, thus protecting sensitive information. The onboarding process, while structured and requiring careful planning, benefits from a simple deployment via MDM or GPU, making it quite straightforward.
    What do you dislike about the product?
    The primary area of improvement for me is the policy engine complexity and initial troubleshooting. Managing the complex rule chain exception and reject patterns for DLP across multiple steering configurations can become overwhelming. Diagnosing why a specific rule blocked or allowed traffic is challenging. The onboarding process requires careful planning, and while deploying the Netskope client is straightforward, the policy design phase demands significant preparation.
    What problems is the product solving and how is that benefiting you?
    I find Netskope One Platform provides granular activity control, deep visibility into web and cloud traffic, real-time policy enforcement, and secures remote employee access without high latency.
    Nishant K.

    Netskope One: Unified Security and Clear Visibility in One Dashboard

    Reviewed on Jul 31, 2026
    Review provided by G2
    What do you like best about the product?
    I like that Netskope One brings multiple security capabilities into a single platform. It gives good visibility into cloud applications and web traffic, helps protect sensitive data, supports Zero Trust access, and makes security management easier through one dashboard instead of multiple tools.
    What do you dislike about the product?
    The platform is feature-rich, but the initial configuration and policy tuning can be complex. It has a learning curve, especially for organizations implementing multiple modules such as CASB, SWG, ZTNA, and DLP together.
    What problems is the product solving and how is that benefiting you?
    Netskope One Platform helps us protect users accessing cloud applications and the internet. It gives us better visibility, prevents data leakage, enforces secure access, and reduces security risks. Having everything in one platform makes security operations easier and more efficient.
    View all reviews