Is Voltage SecureData Sentry a CASB?
Voltage SecureData Sentry is a Security Broker that specializes in data protection, not only for cloud services but also for on-premises applications. It is therefore not a traditional CASB in that it does not seek to provide other functionality across the four pillars. Instead, Sentry coexists with CASBs that specialize in provision of those complementary features, while doing the cryptographic heavy lifting to add strong data-centric protection mechanisms that can be applied across SaaS and other cloud services as well as to commercial and self-developed applications in internal networks.
Voltage SecureData is innovative and standards-based, and has been subject to independent verifications of security strength by internationally recognized, independent cryptographic bodies. It is trusted to secure the world’s most sensitive data by many leading global organizations across the public and private sectors, and in multiple industries.
Format-Preserving Encryption (FPE), which ensures that protection is applied at the field-level in a way that will not break existing database schemas or SaaS field type or size limitations, is combined with a stateless key management system that avoids additional burdens to security administrators. Secure Stateless Tokenization (SST) ensures that numeric fields containing credit card numbers or SSNs are protected without the management or performance overhead of a token database while enabling selected portions of the field to remain in the clear, such as the first six or last four digits, to support routing or customer verification. Format-Preserving Hash (FPH) ensures data referential integrity for analytics and other use cases while complying with regulations such as the GDPR’s right to erasure. Moreover, through additional innovations, such as secure local indices supporting partial and wildcard search terms, and secure email address formatting for SMTP relaying, Sentry preserves application functionality that is impacted by competing solutions.
Organizations can deploy Sentry on premises and/or in the cloud. Sentry communicates with ICAP (Internet Content Adaptation Protocol) capable network infrastructure, such as HTTP proxies and load balancers, to apply security policies to data traveling to and from the cloud, and it intercepts JDBC (Java Database Connectivity) and ODBC (Open Database Connectivity) API calls to apply security policies to data traveling to and from the database. Wherever it is deployed, the enterprise retains complete control over the infrastructure, without the need to share encryption keys or token vaults with any other party, and Sentry’s inspection mode ensures that security policies can be targeted at the specific data fields and file attachments that contain sensitive information.