Sensitive Data Discovery & Protection
Discovery DLP actively scans laptops, servers, file shares, and databases in your network, and analyzes sensitive information residing on all of these devices to enforce certain data discovery solutions. An agent has to be installed on the scanned device.
Network Monitor & Block (Email/Web)
Network DLP, also called proxyless DLP, enables you with visibility and further controls to your network traffic. It inspects all traffic including email, network, instant messaging, and etc for mandatory data security policy enforcement. Network DLP can be deployed either on-premise as a physical device or on cloud as a virtual machine, to which your network traffic has to be routed for content inspection purposes.
Endpoint Data Discovery & Block
Endpoint DLP requires to install software clients on desktop, laptop, server, and other devices running Windows, Linux, or Mac Operating System (OS). The client provides visibility and controls to endpoint data on an as needed basis.
Application System Sensitive Data Protection
Application DLP protects data security for the business application system in your data center. It detects sensitive contents on data accessing and transferring in the application system, and block when necessary.
Cloud Management Platform & Cloud Data Management & Cloud Network Management
Cloud DLP essentially migrates the on-premise DLP solution as a whole on cloud. By addressing the challenges of protecting sensitive data in remote offices and mobile endpoints, Cloud DLP relieves enterprises from the need of purchasing multiple DLP hardware equipment.
Mobile Sensitive Data discovery and Block
Mobile DLP protects your enterprise mobile security by monitoring registered mobile devices, managing enterprise applications, ensuring secure data residence and network transmission. Mobile DLP solutions provide a unified environment for enterprise applications to guarantee secure business operations, data residences and data communications by hosting enterprise applications in endpoint security domain, managing security policies and incidents centrally on UCSS (the Management Platform to which mobile DLP is registered) and monitoring data transmission via ASWG.
We adopt similarity fingerprinting, bloom fingerprinting, and structured fingerprinting to achieve industry-leading accuracy and speed. Your fingerprint data is transformed to digits, making it impossible to be restored, thus the data application to gateway, endpoint or cloud is completely safe.
We are capable of detecting the behavior of splitting sensitive contents in pieces and ex-filtrating through multiple requests (e.g. ex-filtrating 5 credit card numbers by sending 5 split emails in an hour).
We assign appropriate email approval and email audit processes/actions per detected content sensitivity levels to strike a balance between preventing sensitive data breach and ensuring business continuity. We minimize the impact of security processes on business operations.
We adopt AI technologies to learn the characteristics from your enterprise sensitive information, which enables enterprises to quickly process a multitude of samples and apply them in massive contents.
We can identify sensitive information in images using our powerful Optical Character Recognition (OCR) capabilities. For example, detecting sensitive characters in screenshots or pictures.
We perfectly address the problems of high-cost and management platform chaos enterprises encountered when different branches are purchasing their own DLP devices as they need to.
We classify data assets based on business scenarios, and define data classification levels according to data importance. Then, we enforce appropriate data security policies based on the classification levels.
We support hundreds of file types/deep content recognition, including text, office documents, encryption, archives, source codes, databases, etc., and undercover concealing data breaches through making archives, changing file extension names, changing file contents and nesting files in multiple layers.
We provide predefined tailor-made data templates including security policy templates by regions and industries, which are out-of-the-box and compliant with local data security laws, regulations and industrial code of practices.