Cloud

1/22/2018
06:30 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Baffle Closes $6 Million in Series A Financing

Funding will accelerate product deployment and improve on Baffle's data breach protection solution.

SANTA CLARA, CA – January 17, 2018 – Baffle, Inc., developer of the BaffleManager™ Application Data Protection Service, today announced that it has closed $6 million in Series A funding led by Envision Ventures, with participation from ServiceNow Ventures, Thomvest Ventures and Industry Ventures. Current Baffle investors True Ventures and Engineering Capital also participated in the round. This funding will be used to accelerate product development across additional databases expanding the market opportunity and supporting additional sales and marketing efforts.

The BaffleManager™ Application Data Protection Service offers a comprehensive data protection capability that unifies enhanced data access monitoring and access control with end-to-end encryption.  Baffle’s data protection solution enables secure computing for cloud applications and integrates at the SQL layer as a gatekeeper to constrain how applications access sensitive data and help thwart attacks that were the causes of the latest high profile data breaches.  Baffle’s data protection solution employs an AES 256-bit encryption method that protects sensitive data while it is in memory without breaking the application.  This groundbreaking secure data processing model guarantees data protection even in light of the recent revelations about processor vulnerabilities such as Meltdown and Spectre because memory contents remain encrypted while being processed.

“Baffle’s solution helps organizations accelerate their cloud migration by securing data in a way that has never been done before.  We believe that they are the leader in this emerging category targeting a significant market opportunity, namely cloud service adoption, and are well positioned to deliver true breach protection for enterprise data in the cloud,” said Daniel Ahn, Managing Partner with Envision Ventures. “We also have strong confidence in the Baffle management team, who have exceptional technical expertise and experience in building successful businesses from technically challenging ideas.”

“Baffle’s unique approach for protecting data is attractive because it integrates into existing workflows—such as ServiceNow—without altering the application layer,” said Dominic Phillips, head of ServiceNow Ventures. “Our experience working with the Baffle team convinced us to participate in their funding, and we look forward to a mutually beneficial relationship.”

“As enterprises accelerate their migration of critical applications to the cloud, the biggest pain-point identified by Chief Security Officers is protection of their sensitive data. Baffle provides an innovative and comprehensive data security solution to address this enterprise need,” said Umesh Padval, Partner at Thomvest Ventures who focuses on cybersecurity investments. “We are excited about our investment in Baffle led by a successful serial entrepreneur in Ameesh Divatia, as well as their unique application aware data security model that enables secure computing for cloud workloads accelerating enterprise migration to the cloud.”

“We are grateful and excited to work with all of our investors, who see Baffle as embodying great promise for future growth at the convergence of key industry trends: the rise of data theft, data breaches, theft of intellectual property, compliance with regulations, and newly evolving industry standards and expectations for stronger data protection,” said Ameesh Divatia, Baffle co-founder and CEO. “Baffle is already leading this emerging space and will continue to deliver industry-leading technology as this market grows.”

BaffleManager™ is already available for deployment on Amazon Web Services Marketplace andMicrosoft Azure Marketplace. The service is available for a free 90-day trial and pricing is available on request. For more information, visit http://baffle.io.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
One in Three SOC Analysts Now Job-Hunting
Kelly Jackson Higgins, Executive Editor at Dark Reading,  2/12/2018
Encrypted Attacks Continue to Dog Perimeter Defenses
Ericka Chickowski, Contributing Writer, Dark Reading,  2/14/2018
Can Android for Work Redefine Enterprise Mobile Security?
Satish Shetty, CEO, Codeproof Technologies,  2/13/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: One agent too many was installed on Bob's desktop.
Current Issue
How to Cope with the IT Security Skills Shortage
Most enterprises don't have all the in-house skills they need to meet the rising threat from online attackers. Here are some tips on ways to beat the shortage.
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.