> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/getting-started/overview.md). # What is DoControl? Data access visibility and control across your corporate SaaS applications DoControl is a SaaS Security Posture Management (SSPM) solution offering visibility, threat detection, and remediation for sensitive data exposure and insider threats. DoControl secures SaaS data, identities, connected third-party apps, and configurations to ensure comprehensive protection across major SaaS ecosystems, including Google Workspace, Slack, Microsoft 365, Salesforce, and Box. Unlike other SaaS security solutions, DoControl correlates data exposure information and business context with each SaaS identity, ensuring accurate classification of threats and effective insider risk management. Using automated security workflows and end-user interactions, DoControl significantly reduces SaaS data exposure over time, ensuring robust security with minimal effort and no impact on productivity. {% hint style="info" %} This user guide is intended for your organization’s security or IT operation teams. It describes what DoControl does, how to onboard it, how to easily set up DoControl according to your security requirements, and leverage DoControl to maximize data security while minimizing risk. {% endhint %} ## SSPM pillars We’ve got your SaaS security covered. As an SSPM leader, DoControl addresses the 4 major domains of new-generation SaaS security management:
1. [Data access](/docontrol-user-guide/saas-data-monitoring/inventory.md) - In a single pane of glass, DoControl gives you a unified view of all SaaS activity: * DoControl's inventory discovers all your SaaS data, classifies assets by sensitivity and risk level, and remediates exposure by enforcing policies for data sharing, usage, and retention. * DoControl’s machine learning-based classification model sets a sensitivity score for each data asset, and maps the level of exposure for internal, public and external sharing. * DoControl lets you remove permissions on-demand from hundreds of thousands of assets within minutes, and set up granular, pre-built workflows triggered by users' risky actions. 2. [Shadow apps](/docontrol-user-guide/risk-management/threat-model-coverage/shadow-apps.md) - DoControl's Shadow App module provides full visibility into third-party apps and their access permissions, and allows you to: * Detect over-privileged or untrusted connections * Discover all used and unused third-party apps * Classify and assess risk levels of over-permissioned, malicious and dormant apps * Remediate suspicious app activity by suspending users or removing unnecessary apps, either manually or with automated workflows 3. [Misconfigurations](/docontrol-user-guide/risk-management/misconfigurations-premium.md) - Misconfigurations occur when there are errors in the setup of an application or service that can lead to security vulnerabilities. With DoControl's Misconfiguration solution, we continually compare each security check with industry benchmarks and compliance standards before giving a pass/fail score. \ In a single view, you can easily monitor the status of all your compliance checks, and follow remediation steps to minimize risk. 4. [Identities](/docontrol-user-guide/risk-management/identities.md) - Discover and monitor your SaaS identities to protect your organization from identity threats. In a single view, you can easily discover who are your riskiest internal users with access to your organization’s data, and prevent identity-initiated breaches and security incidents. ## Our competitive advantage Companies using DoControl can take SaaS data monitoring and remediation to a higher level of operation and efficacy: * **Manage your SaaS security posture -** Discover your overexposed data, identities, connected apps, and configurations * **Detect and mitigate insider threats -** Eliminate historical data exposure, and prevent sensitive data loss with automated enforcement * **Empower your employees** - Independently remediate risky actions, and increase awareness for secure SaaS collaboration ## DoControl features DoControl leverages several features to provide SaaS data protection while driving your business forward: ### Unified data inventory **Industry problem**: Companies utilizing multiple SaaS applications have no visibility into how data in SaaS applications is stored, accessed, used and shared by users. Permissions are continuously added and changed as employees and collaborators go about their work, and the overall number of assets continually grows as the business scales. Organizations retain large amounts of data that is no longer needed or is rarely used, risking overexposure that can lead to a data leakage or breach. **DoControl solution**: DoControl instantly builds an inventory of SaaS application assets, users and third-party OAuth apps. Data collection is completed within hours, regardless of the organization size. Data can be queried easily, allowing users to get granular on a large scale. **Benefits**: Comprehensive, in-depth visibility into all layers of SaaS application data, including asset, users and third party app connections. ### Shadow app governance **Industry problem**: Employees continuously connect third-party applications to the organizations’ core SaaS environments using the Open Authorization protocol. These connections are created by non-human identities that are often overprivileged, unsanctioned, and unmonitored. Security teams have no visibility or control over third-party shadow apps and the scope of their permissions, introducing significant risk to the organization. **DoControl solution**: DoControl extends its inventory beyond SaaS application assets and users to discover all non-human third-party connections and the extent of their permissions. DoControl enables organizations to remediate risky shadow apps. **Benefits**: A complete view of SaaS security threats, which include not only data exposure and risky user activity, but also over-permissioned third-party apps. ### Context-based alerts **Industry problem**: There's no ability to identify unusual or potentially risky activities related to SaaS application data. Not knowing the risk or extent of risk leaves the organization vulnerable. **DoControl solution**: DoControl identifies inappropriate end-user behavior, such as external sharing of sensitive data, or file downloads by about-to-be terminated employees, and sends notifications to security teams via email or Slack. Alerts can also be streamed into a customer’s existing SIEM or Incident Management tools. DoControl enriches SaaS events with security and business context from EDP, IDP and HRIS, in order to generate accurate alerts based on context. **Benefits**: You get real-time alerts about risky activity related to SaaS application data, so you can be proactive about remediating. Contextual threat detection means only relevant alerts are created; for example, an employee who is about to leave the company downloads multiple files. This eliminates alert fatigue and false positives. ### SaaS data loss prevention **Industry problem**: When personally identifiable information (PII), payment card industry (PCI) and personal health information (PHI) are shared to publicly accessible locations, such as public Slack channels, it remains exposed forever. This increases the risk of data breaches and unauthorized access to sensitive information. Traditional DLP solutions create too many false positives as they look into the content without the necessary context to evaluate risk. **DoControl solution**: DoControl uses natural language processing (NLP) to provide real-time scanning and classification for sensitive data types, including PII, PCI and PHI, across all files stored in SaaS applications. DoControl minimizes false positives by collecting security and business context on each end-user, and providing insight into what presents actual risk versus what is standard business practice; for example, the legal department often shares sensitive files containing PII with trusted 3rd parties. **Benefits**: Your security teams can quickly identify and mitigate sensitive SaaS data exposure, without being overwhelmed by multiple alerts and false positives. ### Security posture dashboard **Industry problem**: Security teams have no true ability to prioritize SaaS security threats based on risk level, and take a risk-based approach to SaaS data security. If not assessed correctly, risk can be inaccurately portrayed, leading to wasted effort in remediation, and lack of urgency in mitigating when risk is falsely underrated. **DoControl solution**: The DoControl Security Posture Dashboard is an operational view of main risks, recent alerts and remediation actions across all the organization's SaaS applications. It provides a quick high-level view of the organization’s SaaS security posture, with the ability to drill down and analyze exposure at depth. **Benefits**: You get an accurate picture of SaaS security threats, enabling you to prioritize efforts correctly and take a risk-based approach, spending time where it truly matters. ### Bulk remediation **Industry problem**: Recurring exposure cleanup takes weeks or months to manually perform in a standard mid-sized organization, particularly when dealing with shared drives that contain a vast number of files and multiple teams with diverse access requirements. Security and IT teams waste time and effort trying to remediate exposure at scale. **DoControl solution**: Manually trigger on-demand remediation actions to apply to your SaaS app inventory, such as removing user access, public sharing settings, or risky shadow apps. DoControl enables one-time remediation actions in bulk on multiple users or assets, allowing for threat mitigation at scale. DoControl can remediate hundreds of thousands of unwanted file permissions and map entire file system hierarchies. **Benefits**: One-time remediation at scale saves your security and IT teams weeks to months of manual work. You can perform historical cleanup of exposure with two simple clicks, streamlining the remediation process, and saving time and effort. ### Automated security workflows **Industry problem**: Security teams struggle to enforce granular security controls and policies across multiple, disparate SaaS applications. It's simply not possible to remain vigilant about all possible areas of exposure and exfiltration avenues by manually responding to alerts. Security teams have no choice but to remediate exposure on a one-off/ periodic basis, leaving the organization exposed for long time periods. **DoControl solution**: Automated, conditional logic workflows enable consistent enforcement and risk remediation across all SaaS applications. Workflows are customizable to specific applications and use cases in accordance with your company’s policy, with no coding required. DoControl offers a comprehensive library of workflow playbooks, providing pre-defined templates for different applications and use cases across a range of threat models. Example workflows include preventing public sharing of sensitive documents, or getting notified when encryption keys are shared. **Benefits**: Get control over SaaS security threats by easily enforcing granular controls and automated remediation actions per application and use case. ### End-user engagement **Industry problem**: Security teams often lack the business context needed to make a decision regarding a potential threat. Even if security teams have information about departments and roles, some cases will require additional context from the business users themselves in order to make an informed decision. Reaching out to users per case with service tickets is time-consuming and not scalable. **DoControl solution**: DoControl’s Slack and Teams bots proactively engage with end-users on behalf of Security and IT teams to identify and mitigate outdated or inappropriate sharing activities. DoControl allows for streamlined sharing approvals through an intuitive conversational UI, inherently making it easier for business users to understand the security issues involved. **Benefits**: Your security teams get the business context needed to make a decision regarding a potential threat, often delegating responsibility to the business users themselves when appropriate. Engaging and empowering business users reduces your organization's exposure over time, educating the business towards a security mindset. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.docontrol.io/docontrol-user-guide/getting-started/overview.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.