Suggestions
Adam Gavish
Co-Founder & CEO @ DoControl
Adam Gavish is a dynamic professional with a diverse background in product management, software engineering, and network security. Currently serving as the Co-Founder and CEO of DoControl, a SaaS Security startup supported by Crowdstrike, he focuses on offering innovative solutions for SaaS applications data security. With 15+ years of experience, Adam has a proven track record of success in leading technology companies like Google and Amazon, as well as contributing to the growth of startups within the tech industry.
Highlights
It is an honor, privilege, and gratitude to announce that I will be speaking at CrowdStrike Fal.Con 2024 in Las Vegas next week!
Yaron Knochen and I will explore how data enrichments can be used to provide unparalleled context and avoid alerts fatigue when determining ongoing risks in your organization - across critical IaaS and SaaS environments.
Please sign up to our speaking session with this link: https://lnkd.in/e3gW8ibM
See you there! ♤ ♧ ♡ ♢
DoControl #saassecurity #datasecurity #enterprisesecurity #falcon2024 #dataprotection
Excited to share that DoControl was recognized in the 2024 Gartner® Emerging Tech: SaaS Ecosystem Security Products Transform SaaS Security! Wow, that's a long title.
One of the main recommendations by Gartner is to develop a product strategy beyond posture management to improve SaaS detection engineering and rapid response due to increasing SaaS scope. This means that uncovering SaaS misconfigurations is just not enough in your SaaS Security strategy.
Various critical threat models originate from malicious internal users' activity, account takeover attacks, out-of-band 3rd party collaborators, and high-privilege OAuth tokens. These risks require deeper integrations with SaaS APIs not only to uncover them, but to also fix them:
• Insider Risk Management - departing employees stealing your data, detecting in a timely manner with robust context can prevent unauthorized data access and intellectual property theft.
• 3rd party risk management - former employees, vendors, and even your vendors’ vendors have unauthorized or outdated access to your corporate data. Any random ATO attack can expose it all.
• SaaS API risk management - employees sign up to random 3rd party services granted high-privilege permissions for no business justification. All kinds of inactive tokens remain open forever.
• Internal ethical walls - sensitive data are more exposed than ever to all employees through sharing links as well as CoPilot / GenAI search services.
• Data Access Reviews - Sharepoint sites, PowerBI workspaces, Google Sites, Slack channels, Zoom Recording, and all kinds of SaaS data locations remain available and exposed for no business justification. Performing access reviews regularly can be automated and context-based to help data location owners make decisions with confidence (keep/archive/etc).
• Remediation & Automation - any of the above require granular, contextualized, and scalable security workflows that can actually FIX problems not just point at them. Enterprise security teams don’t have the time, context, or business relationships to fix SaaS security issues at the speed of.. SaaS.
• Downstream SOC integrations - high-risk SaaS Security risks should be pushed to your SIEM/SOAR/SOC with the full context (who, when, what, why, impact, remediation path, etc) very similar to how you’d push CNAPP alerts.
If you’re still reading and interested in learning more, DM!
Try our Free Risk Assessment to quantify your Google Workspace data exposure, insider threats, misconfigurations, and risky OAuth apps: https://lnkd.in/dK3PPVbw
