Varonis DatAdvantage

Main articles:

• IT Service Management (ITSM)
• SaaS - History. Philosophy. Development Drivers

VVaronis DatAdvantage consolidates user, data, and access event information from directory and file server services . The collected information is subjected to a thorough analysis that reveals a detailed picture of the use of data, as well as determines the correct access model that corresponds to the business logic of the company.

2021

SOC Audit 2

Varonis Systems was audited for control procedures in service organizations - Service Organization Control for Service Organizations (SOUND2) Type II. This became known on January 12, 2022. Audit confirms that DatAdvantage Cloud, Varonis' cloud-based data protection solution on mission-critical SaaS and IaaS platforms, meets stringent standards of security, availability, privacy, and data integrity. More details here.

Data Classification Cloud View

Varonis, one of the representatives of the global cybersecurity and data analytics market, announced Data Classification Cloud for Box and Google Drive on September 8, 2021. Data Classification Cloud complements DatAdvantage Cloud, a solution for protecting sensitive data in applications deployed in cloud environments. Data Classification Cloud scans files for sensitive information, matching more than 400 classification patterns, and pointing to redundant data.

Varonis helps companies automatically scan and classify sensitive and regulated information in corporate datastores locally and in the cloud, for example. Microsoft 365 Now, with Data Classification Cloud, companies can find unsecured sensitive data in enterprise cloud applications and services to limit it from and, attacks ransomware data leaks said Jacob Broido, vice president of product management at Varonis.

Data Classification Cloud provides highly accurate classification results beyond regular expressions. The module uses word proximity mapping, negative keywords, as well as algorithmic checking to reduce the number of false positives. The solution monitors which sensitive data is available to too many users, monitors their use, and helps decide how to quickly and safely reduce the risk of data loss in SaaS applications.

Our customers worldwide have already appreciated the quality of the classic Data Classification Engine for local storage. Now this functionality is also available for enterprise data stored in cloud environments, "explained Daniel Gutman, head of Varonis in Russia.

Cloud SaaS-ßÑÓó¿ßá DatAdvantage Cloud Release

Varonis On May 19, 2021, the company announced the release of the cloudy SaaS DatAdvantage Cloud service. Now all the capabilities of the flagship Varonis DatAdvantage solution are available to ensure secure work data with such SaaS applications and cloud, datastores for example,, AWS Box,,,,,, and GitHub Google Drive Jira Okta Salesforce others. Zoom

We saw a huge interest in Microsoft 365 and Azure, and with the acquisition of Polyrize in October 2020, we committed ourselves to applying Varonis' proven approach to SaaS applications. Now we are fulfilling this promise, "said Yaki Feitelson, president of Varonis.

As companies increasingly use different cloud services, protecting sensitive data from cyber attacks and accidental leaks becomes more difficult. This is because each cloud service has its own data types, rights models, and activity log formats.

DatAdvantage Cloud maps accounts on different cloud platforms to their privileges, rights, and activity. In this case, the product shows situations when several accounts in different systems belong to the same person. DatAdvantage Cloud detects incorrect access rights, unused accounts, suspicious events, and users associated with these events, and applies uniform security policies to all supported cloud platforms.

Some of the possible use cases for DatAdvantage Cloud are:

• Eliminate redundant data access in SaaS /IaaS of services. DatAdvantage Cloud provides insights into access rights across cloud services and recommendations for removing excessive, incorrect, or unused privileges.
• Alerts of suspicious activity and security policy violations. The solution helps prevent attacks on cloud accounts, internal threats, and policy violations with continuous real-time monitoring and alerts.
• Investigate cross-cloud incidents. The solution normalizes and enriches events with context, which simplifies cross-platform incident investigations.
• Identify inactive accounts and disable them in a timely manner. DatAdvantage Cloud deletes unused administrator accounts, inactive privileged users, and external contractors after the end of cooperation with them.

In Russia, we see so far only isolated examples of the use of platforms common in the west. This is due to the fact that the Russian market is extremely cautious about storing data in the cloud. Companies prefer to use local storage, private clouds or services of Russian providers. At the same time, we are seeing a nascent trend in the use of cloud applications by global manufacturers. In any case, we follow global trends and provide our customers with the opportunity to protect their data, no matter what model of data storage and use they choose, "said Daniel Gutman, head of Varonis in Russia.

2013: Opportunities and Benefits

Varonis delivers to the market a software product that implements the management of unstructured company data.

Visibility of access rights

• Visual bidirectional display of directory access rights
• Which users and groups have access to this folder?
• Which folders does this user or group have access to?
• Consolidated access rights view that takes into account information from AD and Windows/NAS file stores

Detailed audit

• Detailed audit of all file actions on/ servers WindowsNAS
• All events are stored in a normalized, searchable sortable database
• Capture data with minimal impact on storage

Recommendations and Modeling

• Recommendations on redundant access rights to directories that can be reduced without compromising business processes
• Simulate rights changes without affecting the work environment
• Apply rights changes through the DatAdvantage interface

Data Ownership Definition

• Determine data owners based on statistical activity analysis
• Ability to automatically send custom reports to data owners or IT and IB employees