Key Product Capabilities

Data Discovery & Posture Analysis

• Discovering all cloud-native datastores (S3, RDS, Aurora, DynamoDB, …)
• Identifying misconfigurations in the security posture of the datastores, and highlights the highest impact issues affecting sensitive data

Data Classification

• Classifying the Data-at-rest and building a Cloud Data Catalog
• Customizations of classification categories and sensitivity levels

Data Access Audit Analysis

• Ingest AWS Cloudwatch and Cloudtrail logs for access to datastores (S3, RDS)
• Audit and visualize every access to the datastores in the Dataflow Map
• Create audit reports of access patterns with correlation to the sensitivity of the data accessed

Analysis of Dormant (Excessive) Data Access Privileges

• Create a data access privilege graph from Identities, Groups, Roles, Policies to the specific data they have access to, including correlation with the sensitivity of data
• For every data access privilege, identify when it was last used i.e. understand its dormancy period
• Prioritized reports to simplify User Access Reviews
• (roadmap) Guided remediation workflows to revoke the excess privileges

Data Risk Assessment

• A holistic risk assessment of every data resource in your environment and continuous tracking of drift in the risk
• Visualizing the Data Risk Heatmap for risk associated with each dataset
• Ability to export risk reports