A versatile and powerful tool for protecting supported SaaS applications
Rating: 10 out of 10
May 09, 2023
NH
Vetted Review
Verified User
1 year of experience
Cloudlock helps us with pii protection by reducing dwell time of sensitive files. It also is a major element of our data loss prevention strategy, by allowing us to the transfer of files in and out of the organization. Finally it is a great indicator of accidental deletions of files in SharePoint and alerts us to the cause of missing files.
- Data Loss Prevention - files accessed from outside of the organization can be audited or blocked based on content, file type, and regex
- Policy Management - policy options are sophisticated and give great control over the actions to be taken and when the policy should be triggered
- Behavioral Analysis - cloudlock is usually the first place we learn about suspicious activity in our SaaS applications, such as login attempts from outside the country
- We've identified a number of close calls with sensitive data being prevented from being uploaded to a broader audience than was intended. This saved us from potential liability from a data breach.
- We identified and were able to react to a huge number of brute force attacks with the alerts set up in CloudLock
- We are able to discover when apps with sensitive permissions are being connected to our SaaS products and audit or ban them from being used on work devices and resources. This improves our security and productivity and reduces spend on non-work usage of resources.
Amazon Macie is limited to an AWS environment and fulfills some of the same functions that CloudLock does in SaaS products. Both are very valuable tools, so the decision is not really which to use, but whether to use both for their respective environments. In general I feel CloudLock is a more powerful tool because it connects to Microsoft 365, which is more business critical for our organization, but that really is a personal call.