Data security and DLP
Data Loss Prevention (DLP), data classification, encryption, and Data Security Posture Management (DSPM) protecting sensitive intellectual property, PII, and financial records.
Key Technical Considerations Before Procuring
Look for automated machine-learning classification that reduces false positive alerts on routine internal data sharing. Ensure endpoint, SaaS, and cloud storage coverage.
Documented Solutions in this Category
Showing 48 published solutions with verified evidence
Acronis Cyber Protect
Acronis Cyber Protect from Acronis focuses on backup protection and endpoint security. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. Use and operational context Acronis Cyber Protect brings data protection and endpoint security into a combined product scope. A meaningful evaluation should examine how backup administration, protection policies and recovery decisions fit the responsibilities of the organization's own IT team. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Acronis Cyber Protect focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Acronis Cyber Protect Cloud
Acronis Cyber Protect Cloud from Acronis focuses on service-provider backup and cyber protection. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. Use and operational context Cyber Protect Cloud is oriented toward service-provider delivery of cyber protection. Assess customer separation, administration across accounts and the protection services being offered to each customer, alongside the recovery workflow for the workloads being covered. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Acronis Cyber Protect Cloud focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Amazon Macie
Amazon Macie from Amazon Web Services focuses on cloud data discovery and sensitive data detection. It is sensitive-data discovery service used for assessing sensitive information stored in supported Amazon S3 data. Capabilities - Amazon S3 sensitive-data assessment: Focuses the documented sensitive-data discovery workflow on supported Amazon S3 data. - S3 data protection findings: Connects sensitive-data discovery with findings relevant to how the assessed S3 data is protected. - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data access visibility: Shows who or what can access the covered data assets. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Amazon Macie is relevant to AWS teams overseeing the protection of S3 data when the requirement centers on assessing sensitive information stored in supported Amazon S3 data. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review bucket scope, discovery-job configuration, data identifiers and who investigates a sensitive-data finding. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Amazon Macie focuses on assessing sensitive information stored in supported Amazon S3 data. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
AppViewX CERT+
AppViewX CERT+ from AppViewX focuses on certificate lifecycle automation and inventory. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. Use and operational context AppViewX CERT+ is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? AppViewX CERT+ focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
AppViewX PKI+
AppViewX PKI+ from AppViewX focuses on public key infrastructure orchestration. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. Use and operational context PKI+ addresses administration and orchestration of public key infrastructure. Review how the planned certificate-authority architecture connects to issuance workflows, organizational policy and the teams responsible for operating the trust service throughout its lifecycle. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? AppViewX PKI+ focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Barracuda Cloud-to-Cloud Backup
Barracuda Cloud-to-Cloud Backup from Barracuda Networks focuses on cloud productivity data backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. Use and operational context Barracuda Cloud-to-Cloud Backup is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Barracuda Cloud-to-Cloud Backup focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
BigID
BigID from BigID focuses on data discovery and sensitive information classification. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context BigID's data discovery and classification scope helps an organization establish where sensitive information resides. Evaluate representative repositories and data types, then review how discovery findings are assigned to the teams responsible for access, governance or protection changes. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? BigID focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
BlackBerry SecuSUITE
BlackBerry SecuSUITE from BlackBerry focuses on secure voice communications and message protection. It is secure communications technology used for protecting voice calls, messages and supported file exchange. Capabilities - Encrypted voice communications: Protects the voice communications included in the SecuSUITE deployment through the deployment's secure communications workflow. - Secure messaging: Adds the secure messaging workflow described for approved SecuSUITE clients. - Secure file sharing: Includes the controlled file-sharing capability documented in the secure communications offering. - End-to-end communication encryption: Uses the documented end-to-end protection model for the communications covered by the selected deployment. Use and operational context BlackBerry SecuSUITE is relevant to organizations requiring protected business communications when the requirement centers on protecting voice calls, messages and supported file exchange. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: On-premises, sovereign cloud or hybrid deployment options documented by BlackBerry. Before adoption, review client availability, communication workflows, deployment control and how encryption keys are administered. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? BlackBerry SecuSUITE focuses on protecting voice calls, messages and supported file exchange. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cohesity DataHawk
Cohesity DataHawk from Cohesity focuses on data threat monitoring and sensitive data discovery. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. Use and operational context Cohesity DataHawk is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cohesity DataHawk focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cohesity DataProtect
Cohesity DataProtect from Cohesity focuses on data backup and recovery management. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. - Sensitive data discovery: Adds visibility into protected information within the data security scope of the offering. Use and operational context DataProtect is Cohesity's backup and recovery product entry. A representative trial should include policy administration for a selected workload and an actual restore, with clear ownership of backup operations, retention requirements and recovery decisions. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cohesity DataProtect focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cohesity FortKnox
Cohesity FortKnox from Cohesity focuses on isolated backup data protection and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. - Sensitive data discovery: Adds visibility into protected information within the data security scope of the offering. Use and operational context Cohesity FortKnox is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cohesity FortKnox focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Commvault Cloud
Commvault Cloud from Commvault focuses on data protection and cyber recovery management. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. Use and operational context Commvault Cloud is a platform-level data protection and recovery entry. Map the proposed package to the workload estate, including the recovery location and operational responsibilities, then verify the restore process for applications that matter to the business. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Commvault Cloud focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cyera
Cyera from Cyera focuses on data security posture assessment and sensitive data discovery. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. Use and operational context Cyera is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cyera focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
DigiCert KeyLocker
DigiCert KeyLocker from DigiCert focuses on code signing key protection and signing workflows. It is code signing key protection technology used for governing access to protected software signing keys. Capabilities - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. Use and operational context DigiCert KeyLocker is relevant to teams operating controlled code signing workflows when the requirement centers on governing access to protected software signing keys. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review key custody, signing integrations, authorization policy and the audit trail for signed releases. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? DigiCert KeyLocker focuses on governing access to protected software signing keys. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
DigiCert Trust Lifecycle Manager
DigiCert Trust Lifecycle Manager from DigiCert focuses on certificate inventory and lifecycle automation. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. Use and operational context DigiCert Trust Lifecycle Manager is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? DigiCert Trust Lifecycle Manager focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Druva Data Security Cloud
Druva Data Security Cloud from Druva focuses on cloud-managed data protection and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. Use and operational context Druva Data Security Cloud is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Druva Data Security Cloud focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Egnyte
Egnyte from Egnyte focuses on secure content collaboration and data governance. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. Use and operational context Egnyte is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Egnyte focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Entrust nShield HSM
Entrust nShield HSM is a hardware security product from Entrust, focused on hardware-backed cryptographic key protection. Capabilities - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Hardware-backed key storage: Uses the documented hardware protection boundary for sensitive cryptographic material. Use and operational context Entrust nShield HSM is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical hardware device; integration requirements depend on the selected model. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Entrust nShield HSM focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Forcepoint DLP
Forcepoint DLP from Forcepoint focuses on sensitive data movement controls and loss prevention. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data access visibility: Shows who or what can access the covered data assets. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Forcepoint DLP addresses the movement and handling of sensitive information. Evaluate a defined data-use policy across the supported channels, including how an allowed business action is distinguished from an action that requires blocking, review or an approved exception. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Forcepoint DLP focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Forcepoint DSPM
Forcepoint DSPM from Forcepoint focuses on sensitive data discovery and posture assessment. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data access visibility: Shows who or what can access the covered data assets. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Forcepoint DSPM addresses the discovery and protection state of sensitive data. Evaluate a representative repository, review how data is classified and exposed, and establish how the findings lead to an access or governance correction by the responsible owner. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Forcepoint DSPM focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Digital Guardian
Digital Guardian from Fortra focuses on endpoint data loss prevention and activity visibility. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. Use and operational context Digital Guardian is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Digital Guardian focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
GoAnywhere MFT
GoAnywhere MFT from Fortra focuses on managed file transfer and secure data exchange. It is managed file transfer software used for coordinating controlled movement of files between approved systems. Capabilities - Data access visibility: Shows who or what can access the covered data assets. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. Use and operational context GoAnywhere MFT is relevant to teams operating scheduled or partner-facing file exchange when the requirement centers on coordinating controlled movement of files between approved systems. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review transfer protocols, key and credential administration, workflow scheduling and transfer auditing. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? GoAnywhere MFT focuses on coordinating controlled movement of files between approved systems. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
VM Backup
VM Backup from Hornetsecurity focuses on virtual machine backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. Use and operational context VM Backup is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? VM Backup focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
IBM Guardium
IBM Guardium from IBM focuses on data security monitoring and risk assessment. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Data classification: Organizes data using the classification methods described by the product. - Database monitoring: Tracks activity involving the databases or data systems covered by the product. Use and operational context IBM Guardium is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? IBM Guardium focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Imperva Data Security
Imperva Data Security from Imperva focuses on database monitoring and data risk protection. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Imperva Data Security is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Imperva Data Security focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Datto SIRIS
Datto SIRIS from Kaseya focuses on backup and disaster recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Appliance and cloud recovery: Combines the documented local recovery approach with the cloud recovery options included in the service. - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. Use and operational context Datto SIRIS is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Datto SIRIS focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
EJBCA
EJBCA from Keyfactor focuses on public key infrastructure and certificate issuance. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. Use and operational context EJBCA is a certificate-authority and PKI entry. Assess issuance policy, administrator permissions and integration with relying applications, alongside the operational procedures needed to protect trust infrastructure and maintain certificates throughout their lifecycle. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? EJBCA focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Keyfactor Command
Keyfactor Command from Keyfactor focuses on certificate inventory and lifecycle management. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate inventory governance: Brings certificate discovery and lifecycle information into a centrally administered inventory. - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. Use and operational context Keyfactor Command is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Keyfactor Command focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
SignServer
SignServer from Keyfactor focuses on digital signing services and signing policy. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Centralized signing services: Provides the documented signing-service workflow for applications or organizations that need controlled digital signing. - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. Use and operational context SignServer is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? SignServer focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Microsoft Purview
Microsoft Purview from Microsoft focuses on data security and compliance management. It is data governance, security and compliance technology used for governing data use and managing information protection or compliance workflows. Capabilities - Data security and compliance portfolio: Brings the documented data-governance, security or compliance services into the organization's Microsoft data workflow. - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. Use and operational context Microsoft Purview is relevant to teams protecting and governing data in the supported Microsoft ecosystem when the requirement centers on governing data use and managing information protection or compliance workflows. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review enabled services, data locations, classification policies and the licensing requirements of the functions being evaluated. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Microsoft Purview focuses on governing data use and managing information protection or compliance workflows. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cove Data Protection
Cove Data Protection from N-able focuses on cloud-managed backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. - Recovery verification: Provides a way to assess whether protected data can be recovered as intended. Use and operational context Cove Data Protection is N-able's cloud-managed data protection entry. Review the protected workload scope and the administration workflow used by the organization or service provider, then perform a recovery test that reflects the customer's retention and availability needs. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cove Data Protection focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Netskope Data Loss Prevention
Netskope Data Loss Prevention from Netskope focuses on sensitive data discovery and movement controls. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Netskope DLP addresses sensitive-data policies within the traffic and applications covered by the selected offering. Evaluate a real data-use scenario, including classification, permitted movement and the action taken when a policy condition requires intervention. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Netskope Data Loss Prevention focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Netwrix Auditor
Netwrix Auditor from Netwrix focuses on change auditing and sensitive access visibility. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Configuration change auditing: Records the configuration or access changes covered by the audited environment. - Audit search and reporting: Provides the documented way to review and communicate the audit activity recorded by the deployment. - Data access visibility: Shows who or what can access the covered data assets. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. Use and operational context Netwrix Auditor concentrates on visibility into changes and access activity. Review a representative administrative or data-access event, how it is recorded and searched, and whether the resulting record gives the team enough context to explain what happened. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Netwrix Auditor focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Netwrix Data Classification
Netwrix Data Classification from Netwrix focuses on sensitive data discovery and classification. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Netwrix Data Classification addresses identification and categorization of sensitive information. Review representative documents or repositories and verify how the classification result supports the organization's retention, access-review or protection decisions. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Netwrix Data Classification focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
NinjaOne Backup
NinjaOne Backup from NinjaOne focuses on endpoint backup and recovery management. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. Use and operational context NinjaOne Backup is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? NinjaOne Backup focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
OpenText Carbonite Endpoint Backup
OpenText Carbonite Endpoint Backup from OpenText focuses on endpoint data backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Endpoint backup: Addresses data protection for supported employee devices rather than only servers or cloud workloads. Use and operational context OpenText Carbonite Endpoint Backup is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? OpenText Carbonite Endpoint Backup focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Next-Generation Trust Security
Next-Generation Trust Security from Palo Alto Networks focuses on TLS certificate discovery and lifecycle management. It is machine trust and certificate management technology used for discovering certificates and coordinating their lifecycle. Capabilities - Certificate lifecycle management: Coordinates certificate discovery, issuance, renewal or retirement within the documented management scope. - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. Use and operational context Next-Generation Trust Security is relevant to teams managing machine identities and certificate operations when the requirement centers on discovering certificates and coordinating their lifecycle. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review certificate discovery, supported issuance integrations, renewal policy and recovery procedures for trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Next-Generation Trust Security focuses on discovering certificates and coordinating their lifecycle. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Proofpoint Information Protection
Proofpoint Information Protection from Proofpoint focuses on sensitive data monitoring and loss prevention. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. Use and operational context Proofpoint Information Protection is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Proofpoint Information Protection focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Proofpoint Insider Threat Management
Proofpoint Insider Threat Management from Proofpoint focuses on insider activity visibility and investigation. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data access visibility: Shows who or what can access the covered data assets. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Proofpoint's insider-threat entry addresses review of user activity and the risk associated with access to business information. Define the activity and systems in scope, the investigation permissions and the privacy requirements governing how evidence is collected and used. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Proofpoint Insider Threat Management focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Rubrik Security Cloud
Rubrik Security Cloud from Rubrik focuses on data protection and cyber recovery management. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. - Virtual machine protection: Protects the supported virtualized workloads using the vendor's backup workflow. - Backup isolation: Separates recovery data or its access path according to the isolation mechanism described by the product. Use and operational context Rubrik Security Cloud is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Rubrik Security Cloud focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Securiti Data Command Center
Securiti Data Command Center from Securiti focuses on data visibility and security governance. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data access visibility: Shows who or what can access the covered data assets. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. - Data protection policy management: Gives teams a way to administer data protection rules across the product's supported scope. Use and operational context Securiti Data Command Center is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Securiti Data Command Center focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
CipherTrust Data Security Platform
CipherTrust Data Security Platform from Thales focuses on data encryption and key lifecycle management. It is cryptographic key or certificate technology used for managing protected keys, certificates or signing operations. Capabilities - Certificate discovery: Builds visibility into certificates or cryptographic assets before lifecycle policies are applied. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Certificate automation: Helps reduce repetitive certificate handling through the automation mechanisms described by the vendor. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. - Hardware-backed key storage: Uses the documented hardware protection boundary for sensitive cryptographic material. Use and operational context CipherTrust Data Security Platform is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? CipherTrust Data Security Platform focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Luna HSM
Luna HSM is a hardware security product from Thales, focused on hardware-backed cryptographic key protection. Capabilities - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Code signing workflows: Supports signing software or artifacts using the product's documented key access and policy model. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. - Hardware-backed key storage: Uses the documented hardware protection boundary for sensitive cryptographic material. Use and operational context Luna HSM is relevant to teams operating cryptographic trust services when the requirement centers on managing protected keys, certificates or signing operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical hardware device; integration requirements depend on the selected model. Before adoption, review key ownership, certificate discovery, integration requirements and recovery procedures for critical trust infrastructure. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Luna HSM focuses on managing protected keys, certificates or signing operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Varonis Data Security Platform
Varonis Data Security Platform from Varonis focuses on data discovery and sensitive access risk analysis. It is data security technology used for understanding sensitive information and controlling its exposure. Capabilities - Sensitive data discovery: Finds protected information so teams can establish where it is stored or used. - Data classification: Organizes data using the classification methods described by the product. - Data access visibility: Shows who or what can access the covered data assets. - Data loss prevention: Applies policies intended to identify or control unauthorized data movement. - Data security posture assessment: Assesses sensitive-data exposure and the protection state of the connected environment. - Insider risk investigation: Brings user activity or insider risk context into data security investigations. - Database monitoring: Tracks activity involving the databases or data systems covered by the product. - Permission risk assessment: Helps identify data access that is broader than the documented business requirement. Use and operational context Varonis Data Security Platform is relevant to teams responsible for protecting business data when the requirement centers on understanding sensitive information and controlling its exposure. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review connected repositories, classification accuracy, access findings and the handling of approved data movement. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Varonis Data Security Platform focuses on understanding sensitive information and controlling its exposure. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Veeam Backup for Microsoft 365
Veeam Backup for Microsoft 365 from Veeam focuses on cloud productivity data backup and recovery. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Microsoft 365 workload recovery: Provides the documented backup and recovery workflow for supported Microsoft 365 services. - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. Use and operational context Veeam Backup for Microsoft 365 is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Veeam Backup for Microsoft 365 focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Veeam Data Cloud
Veeam Data Cloud from Veeam focuses on cloud-delivered backup and recovery services. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. - Microsoft 365 backup: Includes the Microsoft cloud productivity workloads named in the vendor documentation. Use and operational context Veeam Data Cloud is a hosted data-protection service entry. Confirm the supported workload service being purchased, the administration and retention requirements and the restore workflow the customer will use when a business user or application requires recovery. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Veeam Data Cloud focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Veeam Data Platform
Veeam Data Platform from Veeam focuses on backup management and recovery orchestration. It is backup and recovery technology used for protecting recoverable data and organizing restoration. Capabilities - Veeam backup and recovery operations: Connects the backup, recovery and resilience functions included in the selected Veeam platform edition. - Backup and restore workflows: Creates recoverable copies of the data or workloads within the product's documented protection scope. - Ransomware recovery support: Supports planning for recovery scenarios in which malicious activity has affected production systems. - Immutable storage options: Provides an option intended to protect stored recovery data from alteration under the documented configuration. - Recovery orchestration: Supports coordinating recovery steps instead of treating each restore as an isolated activity. Use and operational context Veeam Data Platform is relevant to IT teams accountable for data resilience when the requirement centers on protecting recoverable data and organizing restoration. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review protected workloads, retention settings, recovery location and a practical restore test using representative business data. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Veeam Data Platform focuses on protecting recoverable data and organizing restoration. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
YubiHSM 2
YubiHSM 2 is a hardware security product from Yubico, focused on hardware-backed cryptographic key protection. Capabilities - Hardware-protected cryptographic operations: Provides the documented hardware boundary for supported key storage and cryptographic operations. - Cryptographic key protection: Provides the documented protections for keys used in cryptographic operations. - Public key infrastructure services: Supports certificate issuance and trust infrastructure within the vendor's product scope. - Signing policy controls: Applies controls to how signing operations or protected keys can be used. - Hardware-backed key storage: Uses the documented hardware protection boundary for sensitive cryptographic material. Use and operational context YubiHSM 2 is relevant to teams integrating hardware-protected cryptography into applications when the requirement centers on protecting keys and supported cryptographic operations. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical hardware device; integration requirements depend on the selected model. Before adoption, review supported algorithms, integration interfaces, key lifecycle administration and backup and recovery procedures. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? YubiHSM 2 focuses on protecting keys and supported cryptographic operations. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.