Material Security

Material Security is a security solution offered by Material Security that aims to provide visibility, defense-in-depth, and security infrastructure for Microsoft 365 and Google Workspace. According to the vendor, this solution helps organizations protect their sensitive email assets from phishing attacks, data breaches, and other cyber threats. It is designed to be used by organizations of all sizes, ranging from small businesses to large enterprises. The solution is utilized by various professionals, including IT security professionals, CISOs, technology executives, security engineers, cloud architects, and individuals in industries such as financial services, healthcare, technology, and media and entertainment.

Key Features

Data Protection: According to the vendor, Material Security allows organizations to identify and protect sensitive content without sacrificing productivity. It provides built-in detection for personally identifiable information (PII), protected health information (PHI), financial data, and other common types of sensitive information. The solution continuously detects sensitive data in mailboxes, offering insights into data location and management. It also has the capability to redact sensitive messages at rest, even in the event of an account compromise.

Phishing Protection: Material Security is said to offer AI-based detection capabilities to identify and remediate inbound threats. The solution can reportedly detect and mitigate business email compromise (BEC), VIP impersonation, and other evasive attacks. Custom rules can be created to establish specific detection criteria. Additionally, the solution includes user reporting and automated response mechanisms to address user-reported threats.

Posture Management: According to the vendor, Material Security helps organizations discover and address vulnerabilities, misconfigurations, and risky user behavior. It assists in identifying unfederated and misconfigured apps that use legacy authentication, providing insights into third-party apps used within the organization and the associated accounts. The solution also has the ability to detect signup confirmations, password resets, and other automated messages, thereby enhancing posture management.

Identity Protection: Material Security aims to protect legacy authentication and signups to prevent lateral takeovers and manage Shadow IT. The solution intercepts and challenges identity verification emails, adding an extra layer of security. Users can reportedly confirm messages they requested by verifying their identity through an existing identity provider or a custom workflow. The solution also blocks the delivery of identity verification emails from blocked apps and requires proper authorization.

Deployment + Security: Material Security offers fast and flexible deployment through Microsoft 365 and Google Workspace APIs, according to the vendor. It provides a single-tenant, isolated instance that grants complete control over the underlying infrastructure. The solution is fully extensible with Material API and built-in integrations. It also offers in-product security controls, role-based access control (RBAC), audit logs, single sign-on (SSO), and infrastructure control.

Integration with Other Security Products: Material Security claims to seamlessly integrate with SIEM (Security Information and Event Management), IdP (Identity Provider), BI (Business Intelligence), and SOAR (Security Orchestration, Automation, and Response) tools. This integration is said to enhance the functionality of Material Security and existing security infrastructure. It enables organizations to gain insights into user mailboxes, behavior, and data usage patterns, thereby strengthening the overall security capabilities of the Data Cloud.