Cloud

4/21/2015
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

CloudLock Expands Cloud Security Offering for Salesforce

CloudLock expanded product portfolio helps organizations to secure sensitive data in the cloud and protect corporate assets from cyber threats

San Francisco and Waltham, Mass., April 21, 2015CloudLock, a leading cloud security provider, today announced a major expansion of its cloud security solutions for Salesforce with the introduction of CloudLock for Force.com, CloudLock for Salesforce Community Cloud, CloudLock Selective Encryption for Salesforce, CloudLock Apps Firewall for Salesforce and the free solution CloudLock Event Monitoring Viewer, giving security professionals and internal auditors insight into Salesforce event log files.

Salesforce is one of the most secure cloud platforms. At the same time, organizations using Salesforce are still responsible for understanding and protecting the data entering the system, tracking whom they share it with, and how they use it to prevent over-sharing. CloudLock for Salesforce helps organizations enforce data security policies, monitor user anomalies to protect from cyber attacks and address regulatory compliance and security needs.

The new offerings expand CloudLock’s existing cloud security services for Salesforce Sales Cloud, Salesforce Service Cloud, Salesforce Chatter, Salesforce Files and Salesforce Sandboxes to provide an end-to-end cloud security solution for Salesforce customers.

CloudLock for Salesforce is one of the core components of the CloudLock Security Fabric, a unified cloud security platform that provides centralized visibility for organizations looking to secure multiple SaaS apps such as Salesforce, Office 365, Google Apps, Dropbox, Box, ServiceNow or any other app. CloudLock pioneered the API-first approach in the Cloud Access Security Broker (CASB) market.

In a March 2015 report, one of Gartner’s recommendations is to “favor CASB vendors that support the API mode of access. It has the lightest touch on end users, and, therefore, a greater chance of business acceptance.” [1]  CloudLock deploys in minutes without requiring any hardware, software, agents or network configurations and has minimal impact on the end-user experience.

 The new offerings include:

●        CloudLock for Force.com
CloudLock for Force.com expands the full suite of CloudLock security services to cloud-based solutions built on the proven Salesforce1 platform from Salesforce. Now thousands of applications on the Salesforce AppExchange as well as homegrown applications leveraging Force.com can benefit from the same advanced security controls that CloudLock has offered since 2014.

●        CloudLock for Salesforce Community Cloud
Expanding on its offering for Salesforce Files and Salesforce Chatter, CloudLock now discovers and protects sensitive information across all Salesforce Community Cloud objects.

●        CloudLock Selective Encryption for Salesforce
CloudLock Selective Encryption automates the detection and quarantine of sensitive information based on policies regardless of where this information resides in Salesforce and without breaking any native functionality or workflows. CloudLock’s offering expands Salesforce’s out-of-the box encryption capabilities to protect PII, PHI, PCI and intellectual property (IP) data while maintaining native Salesforce functionality and workflows.

●        CloudLock Apps Firewall for Salesforce
CloudLock focuses on the Shadow IT challenge that matters – cloud and third-party apps that directly connect into an organization’s corporate environment. Through its crowdsourced Community Trust RatingTM, CloudLock discovers and controls the risk across more than 77,000 apps with six million users under management. With this release, CloudLock extends support for connected apps to the Salesforce ecosystem.

 ●        CloudLock Event Monitoring Viewer

The CloudLock Event Monitoring Viewer is a free visualization tool that provides insight into Salesforce event log files to monitor logins and geolocation events as well as detect suspicious user behavior and surface data leakage such as downloads and exports.

 “We’ve seen continued interest and demand from organizations seeking a high level of security controls to protect their assets across the entire Salesforce1 platform,” said Gil Zimmermann, CEO at CloudLock. “CloudLock’s advanced cloud data protection and user behavior analytics at both the application and platform player, combined with Salesforce’s inherently strong built-in security capabilities, creates a complete cloud security solution to thousands of applications.”

About CloudLock

CloudLock offers the cloud security fabric enabling enterprises to protect their data in the cloud, reduce risk, achieve compliance, manage threats and increase productivity. By analyzing 750 million files for more than 6 million end users daily, CloudLock delivers the only complete, risk-appropriate and people-centric approach to cloud cybersecurity. Learn more at cloudlock.com.



[1]   Gartner : Select the Right CASB Deployment for Your SaaS Security Strategy (March 12, 2015)

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Understanding Evil Twin AP Attacks and How to Prevent Them
Ryan Orsi, Director of Product Management for Wi-Fi at WatchGuard Technologies,  11/14/2018
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
2018 on Track to Be One of the Worst Ever for Data Breaches
Jai Vijayan, Freelance writer,  11/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-9071
PUBLISHED: 2018-11-16
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration.
CVE-2018-9073
PUBLISHED: 2018-11-16
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
CVE-2018-9085
PUBLISHED: 2018-11-16
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
CVE-2018-9086
PUBLISHED: 2018-11-16
In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized privileged users.
CVE-2018-19296
PUBLISHED: 2018-11-16
PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.