Cyber security and compliance services firm Proofpoint is acquiring Normalyze, a specialist in data security posture management (DSPM).
The acquisition is expected to close next month. As more access to data is granted to people and machines, gaps in visibility and control can emerge, without appropriate governance or controls from security teams.
With the acquisition, Proofpoint says it will further enhance its security platform, allowing organisations to discover, classify and protect data at scale, across SaaS, PaaS, public or multi-cloud, on-prem and hybrid environments, all while prioritising the reduction of human-centric risks in data security.
“As organisations embrace AI and generative technologies to drive innovation, the human element in data security has become increasingly critical,” said Proofpoint. “The widespread adoption of AI, databases as-a-service, and continuous integration/continuous development (CI/CD) practices has created a web of interconnected data environments that security teams can struggle to secure.”
By implementing DSPM technology, it is promised, companies can fill the security gaps created by their teams’ interactions with complex data environments, and reduce the total data attack surface.
Mayank Choudhary, executive vice president and general manager, data security and compliance, Proofpoint, said: “By combining Proofpoint’s platform with Normalyze’s pioneering DPSM technology, we can provide our customers with comprehensive visibility and control of their data posture, so they can further mitigate human risk across their organisation.”
Ravi Ithal, co-founder and chief technology officer, Normalyze, added: “As data has become increasingly difficult to secure, the driving force behind our mission and technology has been to help organisations secure the data they care about, wherever it is. By joining forces with Proofpoint, we can empower firms to further improve their data security posture.”
Normalyze’s agentless One-Pass Scanner leverages AI to accurately identify and classify valuable and sensitive data at scale across a wide range of data environments. Scanning is performed in place to keep data under IT control, support compliance with stringent data protection regulations, and enhance operational efficiency. A DataValuator assigns monetary value to data, and identifies the data stores with the highest impact of potential data loss.
And a Data Access Graph visualises access and trust relationships to identify human-centric risk, with a Data Risk Navigator highlighting attack paths that can lead to data breaches or loss.
Normalyze’s technology will become part of Proofpoint’s offering after the acquisition is closed.
