Products
Solutions
Developers
Plans
Resources
Customers
Company
Sensitive Data Protection
Data Exfiltration Prevention
SaaS Security Posture Management (SSPM)
Data Encryption
Developer Platform
Channels
SaaS & Email
Browser & Endpoint
Custom Apps
AI Models
Apps
ChatGPT & GenAI
Slack
Jira
Confluence
Salesforce
GitHub
Gmail
Google Drive
Asana
Zendesk
Notion
Google Suite
Microsoft 365 Suite
Microsoft Exchange
Microsoft OneDrive
Security for AI
Insider Risks
SaaS Security
Governance & Risk
External Threats
COMPLIANCE
HIPAA
PCI
GDPR/CCPA
ISO 27001
SOC 2
SOX
Industries
Healthcare
Financial Services
Software
Getting Started
API Quickstart
Detection PlaygroundÂ
Libraries & SDKs
TutorialsÂ
USE CASES
Ecosystem
LLM Content Filter
Cribl Integration
Fluentbit Integration
CAPABILITIES
Platform Overview
Human Firewall
GenAI Detection
Nightfall DLP vs. 
Legacy DLP
MEDIA
Blog
Guides
Webinars & Tutorials
Podcasts
TOOLS
Free Tools
Help Center
COMPANY
About us
Careers
PressÂ
Contacts
PARTNERS
Reseller
Referral
Technology
Audit & Compliance
Product
=
Mobile Menu Placeholder
Everything you've needed to know about core concepts in cloud security and why they matter.
Implementing robust security practices is critical in protecting your organization's data and infrastructure. In this article, we will discuss essential aspects of data security within the CI/CD pipeline.
In this post, we'll explore the different deployment modes of CASBs to help you determine if a CASB will work for you.
In this post, we’re going to cover four common types of attack surfaces and best practices for addressing the risks of each type.
Learn how to prevent the abuse, exposure, and sharing of corporate credit cards via collaborative SaaS applications.
Michael Gugliotti joins Nightfall as our Director of Sales Enablement. Mike's career has taken him on a rewarding journey that's combined his passion for education, with customer success, and sales.
In this post, we'll explore how improving employee security awareness can help companies implement zero trust data security principles
Our data loss prevention buyer's guide will help you understand differences between network & cloud solutions and comes with an RFP.
In this post, we’ll cover privilege escalation as it relates to cloud security risk and the best practices for mitigation.
Nightfall has been named a Leader in Data Loss Prevention (DLP) in G2's Spring '23 rankings. Huge thank you to our customers and supporters!
For many organizations their attack surface is expanding, as an increasing amount of sensitive data, including customer PII is stored in the cloud.
In this post, will discuss key aspects of API security and provide actionable steps for organizations to harden their APIs.Â
Organizations face an ever-growing threat landscape given the growth in the cloud-based platforms, tools, and services they leverage.
API keys, by themselves, are not inherently secure or insecure. Their security depends on how they are managed, stored, and protected.
Our newest platform-wide update, content preview, is intended to provide context that Nightfall users can see at a glance to triage alerts even quicker than before.
From LastPass and Okta to Slack and CircleCI, the news has been filled with headlines reporting on the aftermath of these incidents. We wanted to briefly cover these stories and discuss their implications for you in the current year
One of the most important infosec tools is a SIEM, or Security Information and Event Management System.
We’re excited to introduce a new PHI detector that is available to all customers on the Nightfall platform.
We’ve been hard at work expanding Nightfall’s secret detection capabilities to improve customers’ remediation workflows.
The Nightfall blog is a knowledge base for cybersecurity professionals with news and insights from the world of cloud security. Each week, we’re publishing new content to help you stay up-to-date on cybersecurity topics and to prepare you for the issues and threats that occur every day on the job.
we are going to show you how to best set up Nightfall to discover and protect HIPAA data stored across your organization
We’re going to separate signal and noise by disambiguating the term zero trust. We’ll talk about what it is, why it matters, and key takeaways you should have regarding the state of cybersecurity in 2023.
Jason Lakeman joins Nightfall as our Director of Demand Generation. Jason is a wealth of knowledge about the marketing industry and brings with him a very holistic approach to understanding and evaluating marketing campaigns.
Read this guide to understand core aspects of PCI compliance and security standards, as well as how to implement them.
The shared responsibility model is a cybersecurity framework that works to ensure the most secure environment and infrastructure for both cloud service providers and their customers.
2022 has been a busy and exciting year for us here at Nightfall as we’ve built out the platform in response to these developments. We wanted to take the time to reflect on what we accomplished this year and how it’s moving our vision forward.
The ISO 27001 is one of the most recognized security standards for private sector organizations across the globe and is often required by prospective enterprise customers, helping organizations unlock new business opportunities.
In this post, we’ll briefly outline the structure of ISO and highlight new control areas required by the new ISO 27001:2022 standard.
Between supply chain attacks, API key leaks, and other security risks, 2022 revealed that security challenges remain for orgs on GitHub
Cryptojacking is the theft of computational resources for the purpose of mining a cryptocurrency.
The Atlassian ecosystem provides thousands of companies with the ability to collaborate remotely through powerful, feature-rich SaaS applications like Jira. As such tools become the norm across companies, big and small, the amount of sensitive information stored in these systems will increase. This means that organizations need to prioritize minimizing the risk of exposure within cloud environments.
The Atlassian ecosystem provides thousands of companies with the ability to collaborate remotely through powerful, feature-rich SaaS applications like Confluence. Over the least year, the rise of remote work has meant many companies have hosted their internal information hubs on Confluence. As such tools become the norm across companies, big and small, the amount of sensitive information stored in these systems will increase.
The last decade has seen a dramatic rise in data breach risk, with data breach incidents increasing nearly 840% between 2005 and 2019 according to the Identity Theft Resource Center. In this guide, learn about the growing problem of sensitive data exposure and how to use the Nightfall Developer Platform to easily build tools to identify and remediate this problem.
Learn about sensitive data exposure risk in Google Drive and how you can properly mitigate it.
We’re excited to introduce Jeannie Liou who joined Nightfall as our Director of Product Marketing. With an extensive background in product marketing, Jeannie has a storied marketing career working with companies such as Apple, Rubrik, and Snowflake. She brings with her a deep knowledge of building out product positioning and messaging that resonates with customers, as well as a passion for technology that improves the way we work, transact, and collaborate.
As with most SaaS applications, within Salesforce it is your organization’s responsibility to determine whether Salesforce’s default security settings meet your specific security and compliance obligations.Read this online guide, for free, to learn about the problem of data exposure in Salesforce and how to ensure compliance with HIPAA, PCI, and other leading industry standards while storing sensitive data in Salesforce.
Environments like GitHub present data exposure risk in the form of secrets leakage and sensitive PII leaking from repositories. Read this online guide, for free, to learn about the problem of secrets exposure and leakage in GitHub, as well as how to easily implement secrets detection and scanning to prevent this risk.
When Uber was breached in September, the hacker remained undetected until they announced their presence within the org via Slack. This incident provides yet another example of Slack being leveraged by an attacker. In this post, we’re going to review some of the ways attackers have used Slack in breaches, why this is happening, and what you can do about it.
Many states in the US have data privacy and protection statutes as part of their legal codes. For the most part, these codify what types of PII/PI constitute a data breach, as well as when and how an entity doing business should communicate with customers if a data breach occurs.
Nightfall customers have always lauded the platform’s ease of use and simplicity, but our team is always hard at work looking for ways to improve user experience. This month, we’ve made multiple features GA across the platform, that will further your ability to further customize what content and files trigger Nightfall detectors as well as the ways you can ingest this data.
Yesterday, TechCrunch broke a story about pharmaceutical giant AstraZeneca, which experienced a leak affecting sensitive patient data. We think this incident is worth reviewing to learn more about how data exfiltration risk is distributed across the entirety of an organization’s SaaS infrastructure.
While API keys are a necessary part of modern software development, they can also be a major security risk. If an attacker is able to steal an API key, they can gain access to the data and resources that key is meant to protect. There are a number of steps you can take to protect your API keys, secrets, and credentials and prevent them from being stolen. One such method that we will cover in depth in this guide is secret scanning.
With the rise of cloud-based applications, data loss prevention (DLP) has become an increasingly important part of information security. DLP refers to the policies and technologies used to prevent sensitive data from being lost or stolen. In the context of SaaS, this can include both the security measures implemented by the SaaS provider and the steps taken by the customer to protect their data. In this blog post, we'll provide a more detailed overview of what SaaS DLP is, why it's important, and how you can go about setting up a DLP strategy for your business.
Today, we are delighted to announce that Nightfall has launched the first and only DLP solution for Asana. As part of this launch, Nightfall has joined the Asana Partner program as an official Technology Partner. Nightfall’s solution for Asana builds comprehensive data protection into the Asana app.
The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996 and sets forth a comprehensive set of standards for protecting sensitive patient health information. The Privacy Rule applies to all entities that fall within the definition of a "covered entity", which generally includes healthcare providers, health plans, and clearinghouses.
The FTC Safeguards Rule, is a set of regulations promulgated by the Federal Trade Commission in order to protect the privacy of consumers' personal information. The Rule requires financial institutions to develop, implement, and maintain a comprehensive information security program designed to safeguard customer information.
With high-profile data breaches making headlines on a regular basis, it's no wonder that data security is top of mind for so many organizations. But what exactly is data security posture management (DSPM)? In this blog post, we'll take a closer look at DSPM and how it can help your business keep its data safe and secure.
By design, Salesforce is an environment where customer PII and other sensitive information must be shared and stored. However, compliance regulations like PCI DSS, HIPAA, GDPR, CCPA, and others limit this storage and usage of customer data to only what’s justifiably required for an organization to carry out its duties.
On Thursday evening, around 6:25 PM, Uber announced that it was responding to a cybersecurity incident. While Uber hasn’t gone into details about what happened, the purported threat actor has openly corresponded with several security professionals, including Sam Curry at Yuga Labs, Corben Leo at Zellic.io and The New York Times.
New funds from WestBridge Capital, Next Play Capital, Bain Capital Ventures, and Venrock will be used for hiring, growth, and expanding product integration
The Nightfall platform is a SaaS data protection platform already known for its high accuracy findings and analytics. Now, thanks to new features baked into the Nightfall Console, users will have enhanced analytics functionality through an elegant and easy to navigate dashboard interface.
This guide includes answers to the most frequently asked questions about HIPAA, first starting by talking about the law at a high level, then going into the specifics of HIPAA compliance
We recently hosted a live discussion covering emerging trends within the cloud security space, primarily reflecting on how organizations could adopt a posture of continuous security and compliance across their SaaS applications. Continue on below to view the highlights from this discussion.
We're living in the era of "giga-breach," where cloud data breaches can easily expose in excess of one billion records. As such, the stakes couldn't be higher for cloud security teams seeking to secure cloud environments. That's why it's important to understand the key vectors driving data breaches today. Read on to learn more.
At the beginning of every startup's journey, the question plaguing every technical founder and their team is how to build their tech stack. A lot of thought must go into this question because it informs how the startup will adapt to the demands of business growth and any necessary adjustments or pivots of the business.
We’re excited to announce Nightfall’s partnership with Cribl, the high scale, data processing and observability platform.
While these two trends—the emergence of misconfigurations and supply chain attacks—exist as separate concerns, breaches this year have illustrated how these trends are converging and how threat actors are taking advantage of both.
Today, for enterprises and even SMB companies, IT is a sprawling but interconnected universe of applications, devices, and services all running in tandem to maintain the lifeblood of these organizations—data.
In early April, the tech industry witnessed a major GitHub security incident targeting GitHub organizations using Heroku and Travis CI. GitHub was made aware of this threat via an attack leveraging AWS API keys to GitHub’s own npm production infrastructure.
We’re pleased to announce that Nightfall has joined Snyk’s Technology Alliance Partner Program (TAPP). Nightfall will sit alongside partners like RedHat, and Hashicorp to provide critical DevSecOps functionality to developers.
At Nightfall, our mission is to discover and secure sensitive data in every cloud application through a cloud-native, accurate, and performant platform. Since 2019, Nightfall has partnered with some of the world’s most innovative organizations to proactively eliminate data security risks across a fleet of SaaS applications via our native integrations for Slack, Atlassian Jira, Confluence, Google Drive, and GitHub.
The Nightfall blog is a knowledgebase for cybersecurity professionals with news and insights from the world of cloud security. Each week, we’re publishing new content to help you stay up-to-date on cybersecurity topics and to prepare you for the issues and threats that occur every day on the job.
We’re pleased to announce that Nightfall is partnering with Hanzo, a best-in-class enterprise e-discovery and investigations platform.
Our team has been hard at work with continuous updates to improve and streamline the Nightfall DLP platform. We wanted to share with you the latest platform updates guaranteed to improve the speed at which security administrators and teams will be able to remediate incidents.
You probably don’t need anyone to tell you that, today, infosec and cybersecurity are challenging and fast-paced endeavors. In the last five years alone, we’ve seen a myriad of industry altering developments — from an ever expanding universe of privacy compliance legislation and the permanent entrenchment of hybrid and remote work, to growth in the size and scope of data breaches — the world of security has proven ever complex and ever-shifting.
The sudden shift to remote work in 2020 exposed companies to a variety of new security challenges that haven’t gone away. Review the seven most crucial areas of security for emerging remote-first organizations
We hosted a webinar alongside Bluecore CISO Brent Lassi to discuss data security risks facing high-growth organizations like his on SaaS systems like Slack. Watch the following clips to learn 5 important lessons about Slack and SaaS security that are worth keeping in mind this year.
We’re excited to announce that Nightfall DLP for Jira now has real-time detection. Services like Jira, which are part of the Atlassian ecosystem, are among some of the most popular cloud tools leveraged by companies today.
Nightfall’s vision is to power data protection in every app or service. Our native SaaS integrations for apps like Slack, GitHub, and Google Drive already protect organizations, ranging from small startups to the Fortune 100, against data leaks with our machine learning-powered detection engine.
It’s no surprise that cloud adoption continues to be a major force impacting organizations today. A 2020 McKinsey survey indicated that many organizations saw several years worth of digital transformation take place in 2020.
Historically, processing claims, forms, and legal documents was an expensive and time-consuming affair that took place over fax and mail. DocuSign is one of the oldest companies in the electronic document processing space.
Security teams that work in highly regulated industries or build solutions for consumers must adhere to compliance controls and regimes required for their business. One of the most important compliance requirements for many companies is the SOC 2 audit. The SOC 2 audit provides detailed information and quality assurance about essential security factors such as the confidentiality of data under your organization's stewardship, privacy controls, and many other standards.
Microsoft Teams, and subsequently Microsoft, likely need no introduction. The popular collaboration tool launched in 2016, providing organizations with a powerful way to communicate and share information within the Microsoft ecosystem
Last month we hosted a webinar dedicated to discussing the issue of codebase security. As trends like secrets and credential exfiltration continue to be of concern within systems like GitHub, threats, such as cryptojacking and supply side attacks, have become more of a problem.
Dropbox is known for being a convenient file sharing and storage tool. For over a decade, Dropbox has allowed teams to collaborate cross- functionally by providing a single source of truth. With files being managed and synced to a central location, teams can work together without issues of version control. Even in a post- Google Drive and OneDrive era, Dropbox remains important, as not everyone uses the same productivity suites.
We’ll briefly cover how healthcare organizations can use Google Drive while remaining compliant with HIPAA.
As an omni-channel customer service solution, Zendesk allows for companies to meet customers where they are by providing a variety of options for customer support, intake, and management of the overall customer experience (CX) process.
As a cloud-native data loss prevention solution, Nightfall DLP can natively integrate with some of the most popular SaaS applications in order to protect against the proliferation of sensitive data in these environments.
In 2021, digital transformation has accelerated. At the tail end of the COVID pandemic, with companies remaining remote, the demand for cloud services in the enterprise is the highest it's ever been.
We took a look at the top 100 breaches between 2004 and 2020, ranked by the number of records impacted. Read our original report.
We are excited to announce that Nightfall DLP for GitHub now has two plans available: Pro and Enterprise. Both plans allow you to discover, classify and protect sensitive information in any GitHub organization by actively scanning your codebase for secrets, credentials, PII, and other business-critical data to notify you of data policy violations.
Here are three best practices for adopting Slack without increasing your organization’s security risks.
At the end of 2020, we hosted a webinar alongside Sisense's Chief Security & Trust Officer, Ty Sbano titled Securing Best of Breed SaaS applications in 2021. The discussion focused on reviewing the most important security trends of last year and how that should inform security programs this year. As 2021 continues to progress, these are the 4 trends and lessons we think are worth keeping in mind.
Read the 5 biggest GitHub stories from 2020 and the lessons we learned from them.
We wanted to review the state of cloud adoption in 2020 and update our threat assessment going into the new year.
Business need to understand their security obligations in the cloud when planning migrations. Learn how.
By using machine learning detectors specifically tuned to the types of sensitive data commonly found in cloud environments, including PHI, Nightfall is capable of automating data security and providing alerts whenever PHI appears somewhere it shouldn’t,
We’re excited to announce a new feature of the Nightfall platform: the Nightfall detection engine. With the detection engine, security teams can now more granularly customize when and how PII, PHI, secrets/credentials, and other business-critical data are detected within their cloud environments.
We’ll cover four key reasons why the OSI model still matters and how you can operationalize it in today’s world.
In this post, we’ll go over the scope of the problem of secrets exposure as well as discuss the options you have for finding and removing secrets from GitHub.
Nightfall’s DLP platform is now available in the form of an open-source GitHub Action to protect your secrets and sensitive data as an integrated part of your code review workflow.
Learn how 2019's Capital One Breach illustrated the importance of cloud security.
.jpeg)
.png)
.png)
.png)
.png)
.svg){kind=small}
