MVISION Cloud

MVISION Cloud by Skyhigh Security is a cloud access security broker (CASB) solution that the vendor claims can help organizations secure their cloud applications, protect sensitive data, and mitigate cloud security threats. This solution is said to be suitable for small, medium, and large enterprises, and can be utilized by various professionals and industries including IT professionals, security professionals, compliance officers, risk managers, and financial services.

Key Features

Visibility of Assets Beyond On-premise Solutions: According to the vendor, organizations can gain visibility into their cloud environment and access a summary of the Shadow IT and Sanctioned cloud services configured within their organization. They can also measure and improve their cloud environment in comparison with their peers, and review policy violation insights to enhance their security maturity.

Monitor and Regulate Access to Cloud Apps: The vendor claims that Skyhigh CASB provides real-time control over user access to sanctioned and unsanctioned cloud services through inline deployment modes (forward and reverse proxy). This enables organizations to monitor and regulate user access to cloud applications, ensuring that only authorized users and devices have access. The solution also offers comprehensive multi-mode coverage for controlling access to cloud apps.

Control Over Data and Cloud Activity From Any Source: The vendor states that organizations can gain control of their data across all cloud services using the Skyhigh SSE framework. They can extend data protection capabilities to web, network, and endpoints through unified policy enforcement and incident management, and implement data protection measures to prevent exfiltration and unauthorized access to sensitive data.

Protect Against Cloud Security Threats and Misconfigurations: According to the vendor, the solution allows organizations to analyze billions of cloud events with machine learning to detect and mitigate threats occurring throughout their portfolio of cloud services. It also reduces the risk of misconfiguration through continuous auditing and automated remediation of detected vulnerabilities. The introduction of MITRE ATT&CK mapping into the multi-cloud workflow is said to enhance threat detection and response capabilities.

Sensitive Data Discovery: The vendor claims that organizations can always know where their data is stored within their cloud services. They can discover sensitive data at rest and quickly remediate any content that violates company policies.

Real-time Activity Monitoring Controls: According to the vendor, organizations can apply real-time controls to protect their data as user activity occurs. They can implement granular content sharing and access controls to ensure data security.

Cloud Registry: The vendor states that organizations can gain access to a comprehensive registry of cloud services, which is claimed to be the world's largest and most accurate. The solution also offers a customizable 261-point risk assessment to support risk-aware cloud governance.

Guided Investigation and Learning: According to the vendor, organizations can capture a comprehensive audit trail of all user and administrator activities, which can support post-incident investigations and forensics.

Insider Threat Detection: The vendor claims that organizations can leverage machine learning to detect negligent and malicious behavior, including insider threat actor activity.

Structured Data Encryption: According to the vendor, organizations can protect sensitive, structured data with peer-reviewed, function-preserving encryption schemes. They can use enterprise-controlled keys to maintain control over data encryption.