Code42 Next-Gen Data Loss Protection offers centralized visibility and simplifies data risk detection and response through the collection of file content and metadata. It collects file content and user file activities from email-leveraging agents, endpoints and the cloud. The product protects and monitors cloud files through direct integrations with leading cloud collaboration platforms. Code42’s protective approach sets it apart from other solutions that take a preventative approach. The company believes data loss prevention is sometimes so stringent it can hinder or prevent end-users from doing their jobs.
The first step of the protective approach is to collect as much endpoint metadata, email exfiltration data and file content as possible from several sources and across cloud services, providing a 90-day window into the network’s activities. This massive data collection allows organizations to use a variety of lenses to monitor what is happening and detect anomalous behavior. The lenses are purpose-built for specific use cases and show exactly what to investigate by identifying the most relevant risk indicators and all user/file information necessary to contextualize events. They also function like reports that show trends in different areas. Finally, the 90-day window lets administrators explore prior behaviors and identify any inappropriate data handling.
This extensive data collection supports the true heart of this product: data monitoring. Removable media exfiltration is closely watched, as are all files moved to and from removable media devices. Full metadata of these files is collected to provide specific orders on what drives must be returned and determine if data has been stolen. Web browser exfiltration also is closely watched to track file movement to and from browsers. The metadata is specific and reveals important information, including browser used, table title and URL.
Data collection and careful monitoring give organizations access to comprehensive details regarding file hash, owner, path size and more, allowing security teams to efficiently investigate, act and escalate whenever necessary. They can drill into all the metadata associated with suspicious events and recover data directly through the interface to see if file contents have valuable intellectual property. If so, they can trigger a response that follows the standard legal process and supports further investigation.
Code42 Next-Gen Data Loss Protection is a highly flexible and customizable data-loss prevention solution that uniquely focuses on protection over prevention. Although this product does not include several features on our list, its innovative approach makes security easy.
Pricing is $126 per user/year and includes 24/7 phone, email and web support. Customers have access to a full documentation knowledgebase, FAQ list and product training video.
Tested by Tom Weil