Varonis Data Security Platform

Data Discovery & Classification

Varonis automatically discovers sensitive data across your entire environment, including cloud, SaaS, and on-premises. This includes structured databases, unstructured data in files and folders, and semi-structured data in SaaS apps and email.

The platform combines AI classification and sophisticated pattern-matching techniques to achieve 99% accuracy in data classification. This helps in identifying PII, PCI, PHI, passwords, secrets, and tokens with minimal false positives and negatives.

Data Security Posture Management

The solution provides visibility and protection for data across file storage, SaaS apps, email, IaaS, and databases. It automatically removes excessive permissions, fixes risky misconfigurations, and applies labels to enforce DLP policies. Alerts on abnormal behavior and automatic threat response provide 24/7/365 Managed Data Detection and Response (MDDR) coverage.

Data-Centric UEBA

Varonis uses machine learning to develop behavior profiles and baselines for every user and device. This helps in detecting anomalies and suspicious activities. The platform continuously monitors data, activity, and events to detect threats such as APTs, malicious insiders, and public exposures. It also tracks abnormal access, lateral movement, and privilege escalation across different platforms.

Data Access Governance

Self-service access allows users to request access to applications, cloud resources, and security groups through an intuitive web UI4. With effective permissions analysis, the solution unravels nested groups, permissions, and inheritance to provide an accurate picture of what users can access. This includes permissions across files, sites, mailboxes, S3 buckets, and databases. Additionally, blast radius reduction reduces overexposed data by 90% in 180 days, minimizing the risk of data breaches.

Data Loss Prevention

Agentless, cloud-native DLP protects data with API-based analysis and monitoring, ensuring data security across cloud and on-premises environments. The platform monitors data activity and alerts abnormal behavior to prevent data exfiltration. It also automates responses to detected threats, reducing the risk of data breaches. Furthermore, the solution integrates with SaaS and IaaS platforms to create and enforce policies across the cloud environment.