| Box |  | - Get full inventory visibility - Capture data about users and assets located in all folders across your organization
- Trigger alerts - Get real-time event notifications for anomalous activity, such as, external or public sharing of sensitive files, 4th party sharing, extensive file downloads, former employees downloading or sharing assets, sharing assets with or by a malicious domain
- Remediate past exposure - Leverage on-demand bulk remediation, such as remove shared links, remove external collaborators
Remediate future exposure - Define automated security workflows with these remediation actions: - Remove a collaborator - You can remove collaborator access from a Box file for one or more collaborators. When an asset exists in a parent folder, collaborator access is removed from all assets in the folder.
- Remove shared links - You can remove shared links from an asset in Box.
- Add a collaborator - After DoControl automatically removes a collaborator, you can restore the collaborator after confirmation.
You can also set up smarter workflows, for example, to be notified when encryption key files are uploaded.
|
| CrowdStrike Falcon |  | - Prevent future malware attacks via automated workflows - Delete malware immediately from your organization’s Google Drive before it propagates
|
| Dropbox |  | |
| GitHub |  | - Get full inventory visibility - Discover your data exposure for new applications, repos, and users within GitHub, including publicly visible assets
- Trigger alerts - Get real-time event notifications for anomalous activity and file overexposure, such as, extensive public burst sharing
- Mitigate future data exposure - Leverage automated workflows to reduce unnecessary exposure. For example, you can notify the security team when someone makes a GitHub repository public, or notify when GitHub apps are installed
- Manage SPM misconfigurations - See how your GitHub security settings measure up to compliance standards, avoid security vulnerabilities, and remediate if necessary
|
| Google Workspace |  | - Discover your data exposure - View all assets, users, shared drives, personal drives (My Drive), permissions, and shadow apps in a single view
- Discover SaaS identities - Detect and monitor your risky internal users to protect your organization from identity threats
- Manage SPM misconfigurations - See how your Google Workspace security settings measure up to compliance standards, avoid security vulnerabilities, and remediate if necessary
- Get real-time alerts - Trigger alerts based on file overexposure and get real-time event notifications for anomalous activity, such as, external or public sharing of sensitive files, 4th party sharing, sharing sensitive files with private and personal emails, extensive file downloads, former employees downloading or sharing assets, sharing assets with or by a malicious domain
- Remediate past exposure using on-demand bulk remediation - Use remediation actions to change owner, remove external collaborators, remove org-wide and public sharing, remove permissions, remove external collaborators
- Remediate future data exposure via automated workflows - Prevent external sharing, remove external collaborators, prevent external and public PII sharing, prevent sharing sensitive content externally (regex), remove sharing links, remove web publishing, prevent sharing with private and personal email accounts, revoke 4th party sharing, remove cross-team collaboration, change asset owner, delete file, prevent malware propagation, notify on downloading and uploading files, notify on ransomware and encryption key uploads, etc
- Detect sensitive data - Utilize cloud-native NLP to scan sensitive data types in your Google Drive, and delete if necessary
- Leverage customized Google labels - Run workflows according to Google labels applied to your organization's Google Drive files, and add existing labels to Google Drive assets
- Detect shadow apps - With the premium Shadow App module, remove user tokens or risky 3rd party apps
- Prevent malware propagation - Reveal malicious files discovered by CrowdStrike, and delete malware from the Google Drive cloud
|
HRIS: BambooHR
Deel
HiBob
SAP SuccessFactors
Workday | 
   | - Get full inventory visibility - View all HRIS users, departments and groups, including terminated and about-to-leave employees. Filter all Google assets shared with a specific HR group.
- Get visibility into assets exposed to HR groups - In a single glance, view your organizational posture to see: how many Google assets are accessible by former employees? How many employees share with their personal emails?
- Trigger alerts - Get real-time notifications when anomalous behavior occurs, such as when former or about-to-leave employees access, download or expose assets
- Get user metadata - Run a query to get user metadata for specific events.
- Set up security workflows to remediate future data exposure - Define workflows to handle a specific department in your organization, and prevent leaving employees from downloading or externally sharing documents
- Discover SaaS identities - Detect and monitor your risky internal users to protect your organization from identity threats
|
| Jira Software |  | - Get event visibility - View all near real-time events for Jira issues and their entities, such as issue created/updated, and comment created/updated.
- Remediate future data exposure - Leverage automated security workflows, such as notify if PII is detected in Jira issues and entities, delete encryption files from Jira issues, delete issues or entities
|
| Microsoft Entra ID (Azure AD) |  | - Role-based security controls - Create and enforce security controls and sharing capabilities based on individuals, groups, or domains
- Asset management - Expose every internal and external user within your organization's SaaS estate
- Business-context extraction - Extract the business-context of user events and activities within your environment to see who has access and to what
- Data aggregation - Aggregate and expose critical data about specific groups within Entra ID for IT and security teams to make smarter decisions and reduce security risk
- Remediate past exposure - Remediate in bulk to remove a specific Entra ID app and prevent data overexposure
- Future-proofed workflows - Implement secure workflows based on individuals, groups, or domains to mitigate the risk of data overexposure and exfiltration.
|
| Okta |  | - Get inventory visibility - Identify all assets that are exposed by a specific group
- Remediate future data exposure - Leverage automated security workflows, such as remove a terminated employee's personal email from all Google assets shared with him/her, or prevent sharing by an employee who belongs to a specific group
- Discover SaaS identities - Detect and monitor your risky internal users to protect your organization from identity threats
|
| OneDrive, SharePoint |   | - Get full inventory visibility - Discover your data exposure for all assets, internal and external users, external domains and exposed sites in a single view
- Trigger alerts based on file overexposure - Get real-time event notifications for anomalous activity: external or public sharing of sensitive files, 4th party sharing, extensive file downloads, former employees downloading or sharing assets, sharing assets with or by a malicious domain
- Remediate past data exposure - Leverage on-demand bulk remediation: remove public and organization sharing links, remove external collaborators
- Remediate future data exposure - Leverage automated security workflows: Prevent external sharing, remove collaborator, remove sharing links, prevent ethical wall violations, prevent sharing with private and personal email accounts, revoke 4th party sharing, notify on ransomware and encryption key uploads
|
| Salesforce |  | - Get real-time event notifications - DoControl's event monitoring capabilities are based on the Salesforce Event Monitoring add-on. Note this is a DoControl Premium module.
- Remediate future data exposure - Leverage automated workflows to prevent future exposure in Salesforce, such as detect login from disabled accounts, detect suspicious login attempts, and notify when sensitive reports are exported by terminated employees
|
| Slack |  | Public channel monitoring and remediation - Get full inventory visibility for all assets shared by users in public channels
- Monitor PII and sensitive file and canvas sharing in public channels (internal and external)
- Delete files that contain PII or sensitive information directly from Slack
- Monitor real-time events, and capture data about users and assets in public channels
- Trigger alerts based on file overexposure and get real-time event notifications for anomalous activity, such as, encryption key sharing and uploading to public channels
- Remediate past exposure using on-demand bulk remediation: Delete Slack files
- Remediate future data exposure via automated workflows: Notify and prevent encryption key sharing, prevent PII sharing in external channels, auto-delete files in external channels, notify on public file sharing or file sharing in a specific channel, notify when a specific user uploads files, notify when an external user joins a private channel, etc
Messages and notifications - As part of workflows, receive interactive and dynamic Slack messages for approvals and decisions
- Get Slack notifications for alerts generated by DoControl
|
| Slack Enterprise | | Data loss prevention - Monitor file and message sharing for sensitive data in all conversation types across the grid, in both private and public channels.
- Remediate future data exposure via automated workflows: Prevent PII in Slack Enterprise shared channels by quarantining and then deleting files or messages, detect sensitive patterns in internal and shared channels, detect sensitive patterns in direct messages, prevent PII in direct messages and internal channels.
- Prevent data sharing with external organizations, and auto-delete files in private channels
- Remediate potential data loss by isolating files or messages in quarantine for further analysis, and then either deleting or restoring them
Audit log tracking - Verify that users are logging in from a legitimate location or IP address, track these audit events in workflows, and notify if geographic violations occur
- Track audit logs across all workspaces in your Slack Enterprise Grid, and receive near real-time notifications for anomalous audit log events
- Proactively monitor for potential security issues or malicious access attempts via workflows, for example, notify when unapproved apps are installed in Slack Enterprise
Messages and notifications - As part of workflows, receive interactive and dynamic Slack messages for approvals and decisions
- Get Slack notifications for alerts generated by DoControl
|
| Teams |  | - Get full inventory visibility - Discover external and internal users, including user metadata and roles
- Trigger alerts based on file overexposure - Get real-time event notifications for anomalous activity in Teams, such as external or public sharing of sensitive files
- Remediate future data exposure - Leverage automated security workflows to prevent future exposure, such as: Notify when external users are added to internal Teams channels, prevent public sharing of sensitive files via private Teams chat, and prevent sharing of sensitive OneDrive files via private chat in Teams
|
| Zoom |  | |
