A Netskope foi nomeada Líder no Quadrante Mágico do Gartner™ de 2022 para Security Service Edge. Obtenha o Relatório

  • Produtos de Serviço de Segurança Edge

    Proteger-se contra ameaças avançadas e com nuvens e salvaguardar os dados em todos os vetores.

  • Borderless SD-WAN

    Confidentemente, proporcionar acesso seguro e de alto desempenho a cada usuário remoto, dispositivo, site, e nuvem.

  • Plataforma

    Visibilidade incomparável e proteção de dados e contra ameaças em tempo real na maior nuvem privada de segurança do mundo.

Netskope é nomeada Líder no Relatório do Quadrante Mágico™ do Gartner de 2022 para SSE

Obtenha o Relatório Vá para a plataforma
Netskope gartner mq 2022 sse leader

Resposta rápida da Gartner®: como a aquisição da Infiot pela Netskope impacta projetos de SD-WAN, SASE e SSE?

Obtenha o Relatório
Resposta rápida: Como a aquisição da Infiot por Netskope afeta os projetos SD-WAN, SASE e SSE?

A Netskope oferece uma pilha de segurança na nuvem moderna, com capacidade unificada para proteção de dados e ameaças, além de acesso privado seguro.

Explore a nossa plataforma
Birds eye view metropolitan city

Mude para serviços de segurança na nuvem líderes de mercado com latência mínima e alta confiabilidade.

Saiba mais
Lighted highway through mountainside switchbacks

Previna ameaças que muitas vezes contornam outras soluções de segurança usando uma estrutura SSE de passagem única.

Saiba mais
Lighting storm over metropolitan area

Soluções de zero trust para a implementação de SSE e SASE

Saiba mais
Boat driving through open sea

A Netskope permite uma jornada segura, inteligente e rápida para a adoção de serviços em nuvem, aplicações e infraestrutura de nuvem pública.

Saiba mais
Wind turbines along cliffside
  • Nossos clientes

    Netskope atende a mais de 2.000 clientes em todo o mundo, incluindo mais de 25 dos 100 da Fortune.

  • Customer Solutions

    Estamos aqui junto com você a cada passo da sua trajetória, assegurando seu sucesso com a Netskope.

  • Treinamento e certificação

    Os treinamentos da Netskope vão ajudar você a ser um especialista em segurança na nuvem.

Ajudamos nossos clientes a estarem prontos para tudo

Ver nossos clientes
Woman smiling with glasses looking out window

A talentosa e experiente equipe de Serviços Profissionais da Netskope fornece uma abordagem prescritiva para sua implementação bem sucedida.

Saiba mais
Netskope Professional Services

Proteja sua jornada de transformação digital e aproveite ao máximo seus aplicativos de nuvem, web e privados com o treinamento da Netskope.

Saiba mais
Group of young professionals working
  • Recursos

    Saiba mais sobre como a Netskope pode ajudá-lo a proteger sua jornada para a nuvem.

  • Blog

    Saiba como a Netskope viabiliza a segurança e a transformação de redes através do security service edge (SSE).

  • Eventos e workshops

    Esteja atualizado sobre as últimas tendências de segurança e conecte-se com seus pares.

  • Security Defined

    Tudo o que você precisa saber em nossa enciclopédia de segurança cibernética.

Podcast Security Visionaries

Episode 18: Fostering Relationships for Security Awareness

Reproduzir o podcast
Black man sitting in conference meeting

Leia as últimas novidades sobre como a Netskope pode viabilizar a jornada Zero Trust e SASE por meio dos recursos do security service edge (SSE).

Leia o Blog
Sunrise and cloudy sky

SASE Week

Netskope is positioned to help you begin your journey and discover where Security, Networking, and Zero Trust fit in the SASE world.

Saiba mais
SASE Week

O que é o Security Service Edge?

Explore o lado de segurança de SASE, o futuro da rede e proteção na nuvem.

Saiba mais
Four-way roundabout
  • Empresa

    Ajudamos você a antecipar os desafios da nuvem, dos dados e da segurança da rede.

  • Por que Netskope

    A transformação da nuvem e o trabalho em qualquer lugar mudaram a forma como a segurança precisa funcionar.

  • Liderança

    Nossa equipe de liderança está fortemente comprometida em fazer tudo o que for preciso para tornar nossos clientes bem-sucedidos.

  • Parceiros

    Fazemos parceria com líderes de segurança para ajudá-lo a proteger sua jornada para a nuvem.

A Netskope possibilita o futuro do trabalho.

Saiba mais
Curvy road through wooded area

A Netskope está redefinindo a nuvem, os dados e a segurança da rede para ajudar as organizações a aplicar os princípios de Zero Trust para proteger os dados.

Saiba mais
Switchback road atop a cliffside

Pensadores, construtores, sonhadores, inovadores. Juntos, fornecemos soluções de segurança na nuvem de última geração para ajudar nossos clientes a proteger seus dados e seu pessoal.

Conheça nossa equipe
Group of hikers scaling a snowy mountain

A estratégia de comercialização da Netskope, focada em Parcerias, permite que nossos Parceiros maximizem seu crescimento e lucratividade enquanto transformam a segurança corporativa.

Saiba mais
Group of diverse young professionals smiling

How Graph-powered SSPM Adds the Right Context

Nov 30 2022

SaaS apps have become the “easy button” for organizations seeking a fast and simple way to make foundational business apps available to their employees. According to Gartner, “SaaS remains the largest public cloud services market segment, forecasted to reach $176.6 billion in end-user spending in 2022,” growing 14% over 2021. And according to research by Netskope, the average company with 500–2,000 employees had 805 distinct apps and cloud services in use during the first half of 2021.

The growing SaaS app security challenge

Cloud access security brokers (CASBs) can be used to protect SaaS apps and often have both API-based and inline protections that can be used to control access, protect data, and even block threats and malware. However, when it comes to governance and compliance issues, CASBs were not designed for continuous monitoring of SaaS app configurations and security settings. Each SaaS app is unique and can have tens or hundreds of global settings to monitor and manage, and compliance admins can be quickly overwhelmed when responsible for monitoring a large number of SaaS apps. Often, they’re forced to increase the time between manual configuration checks or stop monitoring certain apps altogether.

These are the challenges that first generation SaaS security posture management (SSPM) solutions were designed to address. For example, Netskope SSPM was initially built to consolidate and monitor an array of SaaS app configuration and security settings from within a single console, and excels at helping security practitioners minimize risky configurations, prevent configuration drift, and ensure compliance. It’s also great for configuration hardening, tracking public compliance metrics, user management, and automating common security tasks.

However, as organizations become evermore reliant on SaaS apps, security analysts are increasingly being tasked with protecting them and the growing amount of sensitive information they store. Security analysts understand that your environment is constantly changing, and that all connected resources form a complex topography that needs to be shielded against ever-evolving threats, both external and internal. What’s more, the collaborative SaaS apps that organizations rely on often extend data, permissions, and privileges outside of their walled gardens—exposing sensitive information beyond the managed security perimeter and expanding the attack surface. Of particular concern are the large number of popular SaaS apps that allow the use of extensions and plugins via OAuth, or Open Authorization. SSPM tools can’t see unmanaged OAuth extensions and so connections to them are invisible, creating covert security vulnerabilities. Because of security gaps like this, Netskope believes that better, more comprehensive protections are needed to secure today’s sprawling SaaS app ecosystems, and now we are proud to unveil new capabilities that we believe will set the standard for the next generation of SSPM tools.

Netskope Next Generation SaaS Security Posture Management (SSPM)

Netskope has been rethinking how to best secure SaaS apps and has now added new features that go beyond what’s possible with traditional “asset list”-based configuration management tools. Netskope’s new, graph-powered SSPM regards SaaS apps as extensions of your business and maps their contextual information, including data models and all resource connections, into a single graph. Monitored assets and attributes are placed on the graph structure according to application-native data models and their related object hierarchies. Connections between elements and apps are drawn as graph edges, allowing security practitioners to accurately visualize and secure all connected resources.

Netskope’s intuitive SSPM console helps security analysts to navigate and mine this rich trove of assets and contextual data. The graph structure enables more granular and accurate logic to be used when defining basic posture management policies such as continuous monitoring of security settings to prevent configuration drift, real-time incident investigations, asset inventory management, and threat surface and impact modeling. Security administrators gain detailed visibility into SaaS apps and their related assets so they can quickly determine how they’re connected and structured, what their security models look like, and what resources and data are directly or indirectly exposed by the asset.

Graph-powered SSPM enables new SaaS security use cases

Netskope’s graph-powered SSPM provides broader and deeper monitoring of SaaS apps, opening up some powerful new use cases for security analysts:

  • More granular search options expose hidden risks: Netskope graph-powered SSPM enables security analysts to evolve from basic searches, such as “Find all Salesforce users who do not have multi-factor authentication enabled,” to validating complex relationships like “Discover everyone who is using internet-connected Microsoft 365 plugins which have read and write access to our documents.” 
  • Graph-based visualization simplifies security analysis: The single graph allows administrators to create connections and enforce rules between apps, such as “List users who have their Azure AD account disabled but can still access Salesforce,” and also “Get me their active session tokens.”
  • Convert risky findings into monitoring policies with one click: The discovered anomalies and violations of company policies become continuous monitoring rules with a single click, alerting you immediately to any configuration drift.
  • Easily deploy uniform security policies: Graph-based security monitoring makes it easy to deploy uniform security policies across hundreds or thousands of SaaS apps.
  • Apply security models developed for advanced apps to less advanced apps, for example:
    • Apply identity provider group policies to an app that does not have native integration capabilities (e.g., extend Azure AD domain controls developed for an app that supports them natively to an app that doesn’t).
    • Ensure that all members of a sensitive chat room carry appropriate authorization.
    • Evaluate privileges and trustworthiness of suspected bot accounts which are accessing sensitive spaces.

Conclusion

Demand for SaaS apps will continue to grow along with their complexity, interconnectivity, and security challenges. As you work to transform your business critical workflows and security models to support new cloud-based apps and infrastructure, Netskope graph-powered SSPM is ready to help with the tools you need. A single interface and single graph reduce the effort and complexity of securing dozens of high-risk SaaS apps. Netskope helps you manage multiple security environments and enables you to connect and extend security capabilities to additional platforms, strengthening your overall security posture and reducing risk. Find more information at Netskope SSPM or contact us directly.

author image
Eetu Korhonen
Eetu Korhonen is a Security Researcher on Netskope's Security Posture Management team.
author image
Dan Frey
Dan Frey is the Product Marketing Director for Netskope Cloud Security products including CSPM, SSPM, CASB API, and CASB Inline.