Data Security Platforms

Short Summary

Data security’s traditional assumptions—knowing where sensitive data resides, which systems control access, and who is accessing it—no longer hold because data is constantly copied across analytics platforms, lakehouses, tests, clouds, and third parties, and is accessed as often by APIs, automated workflows, and AI-driven systems as by humans. This drift correlates with measurable impact: a global average breach cost of $4.99 million, widespread lack of encryption, and frequent AI-related breaches tied to missing AI access controls. Most enterprises already own many point tools (discovery, encryption, masking, tokenization, monitoring, DSPM), but fragmented policy models yield a tool inventory rather than a coherent architecture.

Data Security Platforms (DSPs) aim to unify discovery, classification, protection, access governance, monitoring, and compliance under a single control model, moving enforcement to the data layer so centralized policy follows data access everywhere. Buyer needs are shaped by enforcement overtaking visibility, governance of non-human principals with privileged-user rigor, crypto-agility becoming mandatory, and regulatory divergence forcing residency and sovereignty into design. Market signals show an unsettled category: 21 vendors assessed vs. 13 previously, with varied origins and uneven maturity.

Across platforms, discovery and classification are no longer differentiators, while DSPM is necessary but insufficient—posture scoring is common, but AI store coverage and automated remediation lag. Data-layer enforcement exists but varies; protection still leans toward masking over cryptography, and advanced data-in-use cryptography is rare. Non-human access governance is a major gap, as are crypto-inventory, disruption-free crypto migration, and credible post-quantum implementations. Generative AI is now embedded in products (including RAG and agentic features), but AI-control claims require proof through pilots. Deployment remains mixed (SaaS, hybrid, self-managed) because enforcement must stay near data and sovereignty constraints often prohibit vendor-operated control planes.

Interesting Facts

• The global average cost of a data breach is $4.99 million.
• 53% of breached organizations do not encrypt sensitive data at rest and in motion.
• 10% of breached organizations do not know whether sensitive data is encrypted.
• Around one third of breached organizations protect sensitive data in both states (at rest and in motion).
• One in five organizations reports an AI-related breach.
• Among organizations reporting an AI-related breach, 92% had no proper AI access controls in place.
• Data discovery and classification are automated in 95% of the 21 assessed platforms.
• 86% of assessed platforms support customer-defined data types.
• 81% of assessed platforms work agentlessly against cloud-native stores.
• 81% of assessed platforms can block suspicious access in real time.

Notable Quotes

• “None of them holds anymore.”
• “It is now accessed as routinely by services, APIs, automated workflows, and systems driven by Artificial Intelligence (AI) as it is by people.”
• “Data Security Platforms move the control point to the data layer, so that centrally defined policy applies wherever data is accessed: enforcement has to follow the data.”
• “DSPM is the first layer of such a model rather than a substitute for it, since posture assessment tells you the building is on fire without handing you a hose.”
• “Enforcement has replaced visibility as the primary requirement.”
• “Cryptographic change has become a scheduled obligation.”
• “Regulatory divergence has turned from a reporting exercise into a design constraint.”
• “Integration is where the platform claim is tested…”
• “Ignore the labels on the data sheet, write down the capabilities you need, and map products against that list…”
• “Buyers should not limit their shortlist to the overall leaders, because a leaner solution that addresses a specific problem may serve better than a suite that will be only partially deployed.”