Proofpoint has signed a definitive agreement to acquire Normalyze, aiming to enhance its human-centric security platform with Normalyze’s AI-driven Data Security Posture Management (DSPM) technology. Although the specific terms of the agreement were not disclosed, the deal is set to close in November, pending standard conditions. This acquisition is poised to significantly bolster Proofpoint’s capability to handle data security across various environments such as SaaS, PaaS, public or multi-cloud, on-premises, and hybrid systems, reinforcing its mission to mitigate human-centric security risks.
Addressing Human Risk in Data Security
One prevailing theme in the announcement is the increasing importance of addressing human risk in data security. Proofpoint’s focus is on identifying and securing data to minimize human-related errors, which are cited as common causes of data breaches. These errors range from accidental and careless mistakes to malicious actions. The addition of Normalyze’s DSPM technology enhances Proofpoint’s existing platform, providing more robust tools for data discovery, classification, and protection.
Challenges in Data Security Management
Mayank Choudhary, executive vice president and general manager of Data Security & Compliance at Proofpoint, emphasized that today’s data security challenges stem largely from the interconnected nature of modern applications and the diverse data sources they utilize. Small, independent developer teams and microservices contribute to the rapid expansion of data, complicating data management for security teams. By integrating Normalyze’s technology, Proofpoint aims to deliver greater visibility and control over data, helping organizations to mitigate risks associated with human behavior.
The article points out that regulatory bodies are becoming increasingly stringent about data management. Consequently, businesses are seeking more effective solutions for data handling and protection to avoid financial penalties. Proofpoint believes that addressing human risk is crucial because humans are responsible for preparing the data that AI and other applications consume. Mistakes in data preparation can have significant implications.
Enhancements in Data Security Posture Management
Normalyze’s DSPM platform enhances Proofpoint’s offerings by providing several key functions. First, it enables the discovery and classification of data using AI, through an agentless One-Pass Scanner™ that maintains data under IT control and supports compliance with data protection regulations. This scanner works in situ, which is vital for organizations with data spread across on-premises, corporate data centers, and multi-cloud environments.
Second, the platform assesses and prioritizes risks by their impact and likelihood, offering a comprehensive view of data-related risks. Tools like the DataValuator™ and the Data Access Graph help in visualizing access and trust relationships, which are crucial for identifying and mitigating human-centric risks.
Lastly, Normalyze provides actionable insights and recommendations for addressing security and compliance issues, integrating alerts with service management platforms to help teams remediate exposures efficiently. The solution supports adherence to over 500 regulatory benchmarks, reinforcing robust data protection compliance.
Summary
Proofpoint has entered into a definitive agreement to acquire Normalyze, a strategic move intended to enrich its human-centric security platform by incorporating Normalyze’s AI-driven Data Security Posture Management (DSPM) technology. The financial terms of the agreement remain undisclosed, but the acquisition is expected to be finalized in November, pending the fulfillment of standard conditions. This acquisition is set to significantly enhance Proofpoint’s capabilities in managing data security across a wide range of environments, including SaaS, PaaS, public or multi-cloud, on-premises, and hybrid systems. By integrating Normalyze’s advanced DSPM technology, Proofpoint aims to strengthen its mission of mitigating security risks that are inherently connected to human actions and errors. This strategic move underscores Proofpoint’s commitment to providing robust security solutions in an increasingly complex digital landscape, enabling organizations to better protect their valuable data from evolving threats and vulnerabilities.
