Cloud App Security Broker

Visibility and executive reporting

Unlike traditional CASBs that slow down users, Proofpoint enables secure productivity with unmatched threat intelligence and DLP.

• Correlate data loss, cloud threats and shadow IT usage to the user within timeline-based views
• Gain visibility into the recently phished users and the most attacked users in your organization using Proofpoint Targeted Attack Protection
• Follow cloud app attacks from initial access to post-access malicious activities
• Get one view into cloud, email, endpoint and web DLP with Enterprise DLP integration
• Provide reports to executives for data security, MITRE ATT&CK framework and cloud threats

Machine learning and DLP

Go beyond false-positives and data-centric policies to protection from modern data loss. With our context-based DLP, you get insight and context that traditional DLP can’t provide. This helps prevent losses from negligent, compromised or malicious users. So if an employee is leaving the organization and steals data, CASB can quickly identify malicious behavior before it’s too late and that person is gone.

• Detect negligent, compromised, or malicious users and their anomalous file activity
• Identify sensitive data in the cloud more easily with ML-based data classification and rules honed over two decades of DLP experience
• Use the same data classification and discovery patterns across cloud, email, endpoint and web channels

Machine learning and threat intelligence-based detection

Move past simple location and IP-based exclusion policies to protect from modern cloud threats. Network-based cloud security solutions don’t correlate threat activity across email and cloud. You need a solution that provides machine learning and threat intelligence-based detection.

• Gain threat intelligence from email and cloud phishing attempts, known threat infrastructure, prior credential dumps, and brute-force campaigns
• Detect account takeovers more accurately using machine learning to correlate threat intelligence and anomalous user behavior
• Identify malicious third-party OAuth apps and attackers abusing legitimate apps
• Get a timeline-based view that ties the initial access vector to the post-access malicious activities with cloud attack sequences

Deep security ecosystem integrations

• Supports hundreds of the most popular enterprise SaaS apps and IaaS services
• Deeply integrated with Proofpoint Information Protection, Targeted Attack Protection (TAP), Cloud Security, Threat Response, Emerging Threat Intelligence 
• Integrated with SIEMs, SOARs, and ticketing and messaging systems through modern, RESTful APIs in the Proofpoint platform

Fast time to value

With CASB, you get flexible deployment models to meet all your use cases. Choose the one that’s right for you.

• For immediate visibility with the fewest hassles: Proofpoint CASB with cloud API connectors
• For real-time protection with no endpoint agents: Proofpoint CASB with adaptive access controls
• For more restrictive, real-time cloud controls: Proofpoint CASB with cloud proxy