Netskope named a Leader in the 2022 Gartner® Magic Quadrant™ for Security Service Edge. Get the Report.

  • Platform

    Unrivaled visibility and real-time data and threat protection on the world's largest security private cloud.

  • Products

    Netskope products are built on the Netskope Security Cloud.

Netskope delivers a modern cloud security stack, with unified capabilities for data and threat protection, plus secure private access.

Explore our platform

Netskope Named a Leader in the 2022 Gartner Magic Quadrant™ for SSE Report

Get the report

Make the move to market-leading cloud security services with minimal latency and high reliability.

Learn more

Prevent threats that often evade other security solutions using a single-pass SSE framework.

Learn more

Zero trust solutions for SSE and SASE deployments

Learn more

Netskope enables a safe, cloud-smart, and fast journey to adopt cloud services, apps, and public cloud infrastructure.

Learn more
  • Customer Success

    Secure your digital transformation journey and make the most of your cloud, web, and private applications.

  • Customer Support

    Proactive support and engagement to optimize your Netskope environment and accelerate your success.

Trust Netskope to help you address evolving threats, new risks, technology shifts, organizational and network changes, and new regulatory requirements.

Learn more

We have qualified engineers worldwide, with diverse backgrounds in cloud security, networking, virtualization, content delivery, and software development, ready to give you timely, high-quality technical assistance.

Learn more
  • Resources

    Learn more about how Netskope can help you secure your journey to the cloud.

  • Blog

    Learn how Netskope enables security and networking transformation through security service edge (SSE).

  • Events & Workshops

    Stay ahead of the latest security trends and connect with your peers.

  • Security Defined

    Everything you need to know in our cybersecurity encyclopedia.

Security Visionaries Podcast

Bonus Episode: The Importance of Security Service Edge (SSE)

Play the podcast

Read the latest on how Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog

Netskope at RSA 2022

Meet and speak with Netskope security specialists at RSA.

Learn more

What is Security Service Edge?

Explore the security side of SASE, the future of network and protection in the cloud.

Learn more
  • Company

    We help you stay ahead of cloud, data, and network security challenges.

  • Why Netskope

    Cloud transformation and work from anywhere have changed how security needs to work.

  • Leadership

    Our leadership team is fiercely committed to doing everything it takes to make our customers successful.

  • Partners

    We partner with security leaders to help you secure your journey to the cloud.

Netskope enables the future of work.

Find out more

Netskope is redefining cloud, data, and network security to help organizations apply Zero Trust principles to protect data.

Learn more

Thinkers, builders, dreamers, innovators. Together, we deliver cutting-edge cloud security solutions to help our customers protect their data and people.

Meet our team

Netskope’s partner-centric go-to-market strategy enables our partners to maximize their growth and profitability while transforming enterprise security.

Learn more
Press Release
Los Altos, Calif.
Oct. 25, 2018

Netskope Report Reveals Identity and Access Management Top Concern for I/PaaS Deployments

71.5% of CIS Benchmark Violations in AWS Occur in Identity and Access Management Category

LOS ALTOS, Calif. – Oct. 25, 2018 – Netskope, the leader in cloud security, today announced the release of the October 2018 Netskope Cloud Report™ on enterprise cloud service usage and trends. According to the report, which analyzed the Center for Internet Security’s Benchmarks for Amazon Web Services (AWS), 71.5 percent of violations occur around Identity and Access Management for AWS. Public cloud infrastructure services like AWS have seen widespread adoption in enterprises, affirming the need for clear identity and access policies in place to ensure sensitive data is secure. 

Insecure IAM Exposes Enterprises to Risks

Several major recent high profile corporate breaches have been traced back to a misconfiguration of resources like S3 buckets, pointing to a major weakness in many enterprise I/PaaS security strategies. While many organizations have controls around cloud services such as multi-factor authentication and single sign-on solutions, porting the same types of controls over to cloud infrastructure like AWS often goes overlooked. Organizations are exposing themselves to significant security risks without addressing these gaps.

According to the report findings, many of the IAM violations found involve instance rules, role-based access controls, and access to resources or password policy requirements — simple fixes that enterprises can easily address even without an external security solution.

Additional CIS Benchmark violations by category included Monitoring (19 percent), Networking (5.9 percent) and Logging (3.6 percent). In resource type violations, EC2 led the way at 66.2 percent of the violations, followed by CloudTrail (15.2 percent), S3 (10.9 percent), IAM (4.5 percent) and other (3.2 percent). In severity, 86.3 percent of violations were of medium severity, 9.1 percent high, 4 percent critical and 0.6 percent low.

Cloud DLP Violations on the Rise

Consistent with previous reports, most DLP violations still occur across cloud storage services (54 percent) and webmail (35.3 percent), followed by collaboration services (10.1 percent) and other (including cloud infrastructure) at 0.6 percent. Cloud infrastructure DLP policies are on the rise due to the increase in use of these services.

In DLP violations by activity, uploads made up the majority with 55.3 percent, followed by downloads (32.4 percent), send (11.2 percent) and other (1.1 percent). The report also looked at I/PaaS DLP violations as a separate category to understand the areas and activities in which security teams are focusing their DLP policies. Similar to the entire category, download and upload were the major activities with violations with 64.1 percent and 35.7 percent, respectively.

“As organizations increasingly adopt a multi-cloud approach, IT teams must continuously assess the security of their public cloud infrastructure and be aware of the data moving in and out of those services,” said Sanjay Beri, founder and CEO, Netskope. “Enterprises should consider using the same security profiles, policies and controls across all services — SaaS, IaaS, and web — in order to reduce overhead and complexity as the use of cloud services scales.”

Average Cloud Services Per Enterprise by Category

This quarter, the average number of cloud services per enterprise increased by 5.5 percent to 1,246, compared to 1,181 in the February 2018 report. The vast majority, 92.7 percent of these services, are not enterprise-ready (NER), earning a rating of “medium” or below in the Netskope Cloud Confidence IndexTM (CCI).

Similar to the February 2018 report, HR and marketing services are the most highly used in organizations in terms of average number, followed by collaboration services.

Service Category Average Number of Cloud Services  % NER
HR  175  96%
Marketing  170  98%
Collaboration  110  83%
Finance/Accounting  76  94%
CRM  76  93%
IT Service/Application Management  31  93%
Cloud Storage  28  67%
Social  26  92%

 

Resources:

  • Download the Netskope Cloud Report for more detailed analysis and to see the full list of the most widely used cloud services by enterprises.
  • Learn more about how to gain visibility into enterprise cloud services and how to ensure they are secure and compliant.
  • Visit the Netskope Hub for the latest commentary and insight on trends from the Netskope team.

 

About Netskope

Netskope is the leader in cloud security. We help the world’s largest organizations take full advantage of the cloud and web without sacrificing security. Our patented Cloud XD technology eliminates blind spots by going deeper than any other security provider to quickly target and control activities across thousands of cloud services and millions of websites. With full control through one cloud-native interface, our customers benefit from 360-degree data protection that guards data everywhere and advanced threat protection that stops elusive attacks. At Netskope, we call this smart cloud security.