Discover the latest DSPM insights, trends, and news. Your go-to source for Data Security and Protection Management updates and best practices.
Search across headline titles and summaries.
Background for this topic.
Data Security Posture Management (DSPM) discovers and classifies sensitive data, maps its locations and movement, and evaluates the controls protecting it. It commonly covers cloud databases, data warehouses, object storage, SaaS repositories, backups, and analytics copies. By linking data sensitivity to identity permissions, configuration, and exposure, DSPM can show where regulated or confidential information is accessible to too many users, publicly reachable, duplicated unnecessarily, or retained without a clear purpose.
Its main security value is prioritization: an exposed storage location containing sensitive records merits more urgent remediation than one containing low-risk data. Effective DSPM validates access rights, encryption, network exposure, retention, and data flows, then routes findings to owners for correction. It can support privacy and compliance evidence and help vulnerability management or incident response determine which data is affected. DSPM is not itself an access-control, data-loss-prevention, or application-security control; its inventories and findings are useful only when underlying permissions, configurations, and software are fixed.
Weekly headline count for the current query.
The emergence of Data Security Posture Management (DSPM) in early 2023, followed by major acquisitions by companies like IBM, Thales, and Palo Alto Networks, demonstrates industry recognition of the need for a more holistic approach to data protection.
Deal Would Boost Veeam's Cyber Footprint as Data Protection Vendor Valuations SurgeBloomberg reported that data protection and ransomware recovery giant Veeam is in advanced talks to buy DSPM and AI security vendor Securiti for $1.8 billion, with an announcement coming as soon as this week. The deal would accelerate Veeam's pivot from backup and disaster recovery to cybersecurity.
Deal Would Boost Veeam's Cyber Footprint as Data Protection Vendor Valuations SurgeBloomberg reported that data protection and ransomware recovery giant Veeam is in advanced talks to buy DSPM and AI security vendor Securiti for $1.8 billion, with an announcement coming as soon as this week. The deal would accelerate Veeam's pivot from backup and disaster recovery to cybersecurity.
Firm Hits $6B Valuation, Eyes Fast Delivery of Unified DSPM, DLP and Identity ToolsCyera’s latest $540 million Series E funding underscores growing urgency among global firms to secure sensitive data before feeding it into AI models. With demand soaring, the startup is investing heavily in DSPM, DLP and identity innovation across cloud and on-prem environments.
CEO Howard Ting's Resignation Comes as Data Protection Company Hits $1B ValuationCyberhaven appointed product chief Nishant Doshi as interim CEO as longtime leader Howard Ting transitions to the board. With a sevenfold valuation increase and deep investment in Gen AI security and DSPM, the company is preparing to unify data controls across enterprises.
Integrated Tools Across Generative AI Security, DSPM, DDR Key to Growth StrategyCyberhaven is building a data security platform to address evolving risks in generative AI, DSPM and beyond. Backed by $100 million, CEO Howard Ting says the firm will use the funds to expand its portfolio and go-to-market footprint while staying independent.
Data Security Posture Management Becomes Key to Cloud Visibility But Lacks ControlsThe rapid rise of DSPM has fueled deals by major security firms looking to enhance their platforms. Industry leaders see DSPM as crucial for cloud data visibility, security integration and regulatory compliance. But can standalone DSPM vendors survive, or will they be absorbed by larger platforms?
Data Security Posture Management Becomes Key to Cloud Visibility But Lacks ControlsThe rapid rise of DSPM has fueled deals by major security firms looking to enhance their platforms. Industry leaders see DSPM as crucial for cloud data visibility, security integration and regulatory compliance. But can standalone DSPM vendors survive, or will they be absorbed by larger platforms?
Cyera's Valuation Doubles Amid Expansion From DSPM to DLP, Identity ProtectionCyera secures $300M in funding from Accel and Sapphire Ventures, doubling its valuation to $3 billion. The company is enhancing its data security platform by integrating DSPM with DLP and identity security capabilities, addressing enterprise demand for comprehensive solutions.
Normalyze’s AI-Powered DSPM Technology Boosts Proofpoint’s Data Visibility, ControlProofpoint will acquire DSPM startup Normalyze to strengthen its data security offerings across cloud, SaaS and hybrid environments. The company aims to give security teams enhanced visibility, control and human-centric risk reduction for sensitive data across complex infrastructures.
In the modern enterprise, data security is often discussed using a complex lexicon of acronyms—DLP, DDR, DSPM, and many others. While these acronyms represent critical frameworks, architectures, and tools for protecting sensitive information, they can also overwhelm those trying to piece together an effective security strategy. This article aims to demystify some of the most important acronyms
Also: Impact of NIS2 Directive in Europe, Cloud Governance ChallengesIn the latest weekly update, ISMG editors discussed the strategic convergence of data security posture management and data loss prevention technologies, evolving priorities of security leaders and the urgent readiness challenges posed by the NIS2 Directive.
Picture your company's data as a vast, complex jigsaw puzzle—scattered across clouds, devices, and networks. Some pieces are hidden, some misplaced, and others might even be missing entirely. Keeping your data secure in today’s fast-evolving landscape can feel like an impossible challenge
Trail Acquisition Brings Enhanced DLP, DSPM Integration, Safeguards Data in MotionWith the $162 million buy of Trail Security, Cyera will offer customers AI-enhanced data loss prevention alongside its DSPM solution. The new platform promises stronger, real-time data protection for sensitive information both in motion and at rest, helping enterprises meet security demands.
Integration of DSPM Firm Dasera Enhances Data Protection Across Cloud EnvironmentsNetskope’s purchase of Desera enhances its data security posture management capabilities, enabling customers to secure both structured and unstructured data across cloud and on-premises environments. The integration will offer a platform for holistic data protection and security posture management.
IBM, Rubrik, Palo Alto & CrowdStrike All Bought into DSPM. Will Tenable Join Them?IBM, Rubrik, Palo Alto Networks and CrowdStrike entered the red-hot data security posture management market with nine-figure deals announced between May 2023 and March 2024. Now, Tenable reportedly wants a piece of the action as it eyes the purchase of Eureka.