Product Capabilities DSPM

Comprehensive Data Protection
Sotero's DSPM and DDR capabilities offer an all-in-one platform for data security. This not only enables real-time threat detection but also actively neutralizes these threats, providing robust, multi-layered protection against malicious activities beyond ransomware.

Continuous Monitoring & Adaptive Security
Sotero's solution continuously monitors your data security posture and dynamically adapts to emerging threats. This ensures that your data security measures remain up-to-date and effective, enhancing overall cyber resilience.

Uninterrupted Business Continuity
By detecting and stopping cyber threats in their tracks, Sotero helps prevent disruptions to business operations. This guarantees seamless business continuity, even in the face of rapidly evolving digital threats.

Stakeholder Trust
By providing comprehensive and effective data protection, Sotero helps bolster trust among your customers, partners, and employees. This trust is crucial to maintain and enhance your organization's reputation in today's digital environment.

A DSP That Scales with Your Organization
By ensuring robust data security, Sotero allows businesses to confidently expand their digital operations without fear of data breaches. This effectively removes a major barrier to digital transformation, letting your organization fully leverage new opportunities.

Meet Regulatory Compliance
With robust data protection, Sotero aids organizations in meeting regulatory requirements for data security. This not only helps avoid penalties but also ensures a positive standing with regulatory bodies.

Cost Efficiency
By offering DSPM and DDR from a single platform, Sotero helps organizations save on the cost of investing in multiple solutions, while also reducing the time and resources needed to manage separate platforms.

Sotero's comprehensive data protection solution offers significant benefits to organizations looking to safeguard their sensitive data and maintain a strong and adaptable security posture.

Sotero monitors the behavior of every database, file store, and application without agents to provide complete visibility into every technology that touches your structured or unstructured data, whether on-premises, in the cloud, or in hybrid environments.

Sotero is deployment agnostic, and works seamlessly with structured and unstructured data. Our DSP connects with data stores like public or private cloud storage systems, network file storage systems, and databases. Our platform is built with an API-first architecture approach, letting you leverage APIs to automate your system integration to provide seamless data protection across your environment. Sotero supports organizations as they scale from SMB to multi-national enterprises to provide complete data security to make your data our priority. Sotero’s DSP also seamlessly integrates with:

Existing directory services/IdP for RBAC controls
Existing SIEM/UEBA solutions
Existing key management solutions for FIPS 140-2 or 140-3 level 2 or level 3 requirements

At the heart of our data security solution, the data identification and classification process leverages advanced machine learning (ML) techniques coupled with artificial intelligence (AI) to provide efficient, accurate, and industry-specific data discovery. When your data is ingested, our models scan it meticulously, parsing both structured and unstructured data for potential sensitive attributes. These attributes are not merely pre-determined but can be customized based on your data governance policies and compliance requirements. Whether it's Personally Identifiable Information (PII), financial data, health records, or any other sensitive attribute you define, our solution will identify and flag these elements accurately.

Simultaneously, the sophisticated artificial intelligence, tailored to specific industries, identify unique patterns, terminology, and nuances within each dataset or file server, ensuring precise classification and recognition of sensitive attributes. This combination of targeted machine learning and customizable sensitivity parameters facilitates the delivery of comprehensive data protection, bolstering your security posture while ensuring regulatory compliance.

Sotero’s risk analysis is a comprehensive process that evaluates the potential vulnerabilities in an organization’s data security framework. Leveraging advanced machine learning (ML) algorithms and data analytics to evaluate each data access request, Sotero reviews and categorizes all access to data based on their threat potential. This analysis is done in real-time by a powerful self-training ML model. Every transaction that is submitted for execution is inspected in addition to be logged, and then parsed into its separate components. These components are then evaluated in the context of historical use of the data. Each attribute that is part of the transaction is then assigned an anomaly score and a combined threat score that is computed using weighted scores for all attributes in the transaction.

The threat score is used to categorize transactions based on the score ranges. Score ranges are utilized to make decisions on the execution of the transaction, execution with a notification, or quarantining the transaction for further review and approval or disapproval. All decisions are then logged. The transaction review, scoring, and decision engine is a major component of Sotero’s in-use encryption APIs. The logging and scoring framework works seamlessly in conjunction with the translation and encryption/decryption APIs with an autonomous service and asynchronous function. One benefit of this approach is that each transaction adds to the history of learnings that will be used to analyze the next set of transactions. Another benefit is to use Sotero across multiple datasets or file stores to allow you to build threat detection learnings across data sources.

The accompanying management console provides both administrative functions as well as serving as a repository of database activity that can be filtered by database, file storage, or application, including multi-tenant scenarios.

These include information such as:

Total transactions
Transactions by threat score range
Flagged transactions
Quarantined transactions

Administrators can review transactions from within the management console to either review or decline them.

RBAC

Sotero’s role-based access controls (RBAC) allow organizations to control who has access to what data based on their role within the organization. RBAC operates by binding predefined roles with explicit permission that govern data access and manipulation.

RBAC Decryption Mask

Sotero’s DSP also has an RBAC Decryption Mask security measure that regulates data access based on a user’s role within the organization. It allows decryption of only the specific data pieces that a user’s role requires, maintaining the encryption of other data, thereby enhancing privacy and minimizing exposure risk. An example of this is only decrypting the last four numbers of a social security number, while keeping the remaining numbers encrypted. This controlled access model greatly mitigates the potential for data compromise and misuse, making it an essential aspect of securing complex environments with numerous users having diverse operational responsibilities.

Partial Encryption

Complementing RBAC, Sotero’s partial encryption capabilities (also referred to as selective or attribute-based encryption), significantly enhance data security posture. This feature facilitates granular control over data visibility. Instead of indiscriminately encrypting all data, which may inhibit data utility and cause latency and end user issues, selective encryption focuses on securing specific data attributes or segments. Sensitive data is thereby well-protected while non-sensitive data remains readily accessible to authorized roles, avoiding unnecessary decryption procedures. This method strikes a balance between safeguarding data and preserving its operational value, to avoid business disruption due to overly restrictive encryption protocols.

Row-Level Security (RLS)

Row-Level Security is another pivotal feature Sotero offers that functions in tandem with RBAC and partial encryption capabilities to provide a comprehensive data security model. RLS imposes fine-grained control over data visibility down to individual rows in a database. It allows you to set customized access rules to for individual database rows based on the user’s role, their attributes, or the characteristics of the data itself. For example, a regional manager’s data access might be confined only to the rows relevant to their operational area. The level of tailored security creates an enhanced data access environment that minimally exposes data and significantly boosts the integrity of an organization’s overall data security posture.

One Platform for All Your Data

Today’s complex and heterogeneous data environments make it imperative for vendors to safeguard all data types. Sotero does just that, whether you have sensitive data in structured data, semi-structured data, or structured data repositories, Sotero keeps all your data secure. Traditional data protection methods struggle to maintain a uniform security posture because they protect data only while it is in motion or at rest, but not when it is accessed.

In-Use Encryption

With innovative technologies, like our in-use or queryable encryption, we empower you to keep your data secure at all times, thereby rendering it useless to any attackers as they will end up with unreadable, jumbled text. In-use encryption (that adheres to the AES-256 standard) has changed the game for data security, it allows sensitive data to remain encrypted while it is being processed or analyzed. This means that even during operations that traditionally required decryption, the data remains secure, significantly reducing the attack surface and risk of exposure. This functionality enables organizations to perform real-time analytics on encrypted data, supporting business insights without compromising security. Additional benefits of in-use encryption include:

No application or code changes required
No dependency on OS version/patches
No impact on end users - unparalleled low latency
Up to 30% reduction in data storage costs

Sotero’s capability to secure all data types across different environments, coupled with queryable encryption, provides a comprehensive security solution, offering robust protection that adapts with the evolving nature of data and business requirements. This advanced, holistic approach to data security is what allows your organization to gain a competitive advantage while providing it with the necessary tools to thrive securely in an increasingly data-driven world.

Key Management

You, and only you own the encryption keys to your sensitive data. Sotero utilizes highly secure key management that uses TLS access control and multiple layers of AES-256 keys to encrypt data. Sotero’s vault holds the data encryption keys (DEKs) used to encrypt the data as well as a master key (or key encryption key, KEK), which is used to encrypt the DEKs themselves. The DEKs are symmetric keys, meaning the same key is used to encrypt and decrypt the data. If Sotero is deployed on your premises, you will receive a Key Generator utility that enables you to create the keys and store them in your private Sotero Vault. In this scenario, Sotero will never see or access your keys. If you are using Sotero in the Sotero cloud, you will receive a dedicated namespace within the common Vault, which acts as a vault within a vault. Sotero will then run the Key Generator utility on your behalf. To further protect the encryption key, you have the ability to change the DEK, which will require re-encrypting all sensitive data with the new DEK, or to rotate, or change, the DEK.

Decentralized Key Management Offering

Sotero’s decentralized key management separates encryption keys into separate pieces or “shards”, each of which is independently encrypted and stored separately. The process to reconstruct the full keys requires a certain number of these shards, making unauthorized access to the key extremely difficult. This further enhances your organization’s data privacy, as no single entity has access to the complete key.

This approach enables your organization to scale, as it can handle an increasing volume of keys without overburdening a central repository. It also offers more control and flexibility, as the permission to access and use keys can be finely tuned and assigned on a need-to-know basis. By scattering the control of keys, the system eliminates a single point of failure, improving your organization’s data security and resilience.

Real-Time Monitoring

Sotero’s continuous monitoring and governance capabilities continuously scan and analyze your data ecosystem to identify potential vulnerabilities, misconfigurations, or signs of malicious activity. The platform has advanced machine learning (ML) algorithms built in that work in combination with behavior-based monitoring. Because Sotero utilizes behavior-based detection, we can quickly detect unusual activity on data, policy violations, or deviations from established baselines of “normal” user or application behavior. Monitoring occurs in real-time, promptly identifying threats, sending appropriate alerts, and mitigating risks by stopping malicious activity in its tracks before it can escalate into a serious incident or breach. Sotero’s DSP monitors data across your entire environment, whether on premises, in the cloud or hybrid to empower you with full visibility and control.

Data Access Governance (DAG)

Sotero’s platform puts you in control of your data - you can manage, control and ensure compliance according to your organization’s security practices from a single user interface. From our AI identification and classification capabilities to enabling you to create custom security policies that you can manage centrally, you can deploy consistent security practices across your organization to ensure all data is protected per established standards. By constantly evaluating these policies against real-time monitoring data, organizations can iteratively refine their security posture, making necessary adjustments to align with the changing threat landscape and business requirements.

Sotero ensures compliance by meticulously tracking and recording all data access requests across both databases and files, catering to even the most stringent data compliance mandates. By offering consistent visibility into an organization’s data assets, the platform can systematically monitor security controls to identify any misconfigurations or anomalies that could lead to non-compliance.

Should an attack occur, Sotero will stop the malicious activity in its tracks while logging precisely what data points were compromised, right down to timestamps and in granular detail. This not only drastically reduces costly downtime and recovery time, but also provides the necessary details to stay compliant.

Sotero helps customers with regulations such as:

GDPR
CCPA
HIPAA
PII
PHI
GxP

Sotero's DSPM platform stands out from the competition as the only data security technology capable of not only detecting zero-day attacks - threats exploiting previously unknown vulnerabilities - but also automatically blocking them in on average 77 seconds. Sotero’s Data Detection and Response (DDR) capability is designed to address the growing challenge of malware and ransomware attacks in a holistic manner. Unlike traditional signature-based detection methods that rely solely on known malware patterns, Sotero employs a combination of signature and behavior-based analytics. By proactively defending against these emerging threats, Sotero ensures that your organization will not have to account for ransom payments, thereby reducing your risk and safeguarding your valuable data and resources.