Proofpoint to acquire Normalyze, enhancing AI-powered DSPM

Proofpoint has announced a definitive agreement to acquire Normalyze, a company specialising in Data Security Posture Management (DSPM), with the transaction anticipated to conclude in November 2024.

The acquisition is set to enhance Proofpoint's security platform with Normalyze's AI-powered DSPM technology, which is designed to help organisations discover, classify, and protect data efficiently across various environments including SaaS, PaaS, public and multi-cloud, on-premises, and hybrid models. This move addresses human-centric risks in data security, as explained by the company.

In light of recent technological advancements, the human factor in data security has become essential. The rapid adoption of AI platforms, Databases as a Service (DBaaS), and Continuous Integration/Continuous Development (CI/CD) has complicated data environments, often leading to security oversight.

Mayank Choudhary, Executive Vice President and General Manager of Data Security & Compliance at Proofpoint, commented, "Today, data is at risk because of human behavior. Modern applications are rapidly changing, driven by small teams of developers working independently on microservices and various data sources, leading to an explosion of data. These modern applications are highly interconnected, making it hard for security teams to manage the heterogeneous and ever-growing sprawl of their data."

Research from Enterprise Strategy Group indicates that a significant number of businesses lack awareness of where their sensitive data resides, presenting challenges in data visibility and control.

Ravi Ithal, Cofounder and Chief Technology Officer of Normalyze, stated, "With the rapid proliferation of internally developed cloud applications, and use of SaaS applications procured by teams outside of IT, security teams are faced with the daunting challenge of inconsistent visibility and control of their critical data in the cloud."

He added, "By joining forces with Proofpoint, we can empower organizations to further improve their data security posture, reducing the risk of data breaches caused by human errors and help them to prioritize data loss threats."

Normalyze's DSPM platform is touted to secure complex data landscapes through AI-powered discoveries and risk assessments, offering insights that aid in security governance and compliance. The company uses its One-Pass Scanner for in-place scanning of data to maintain IT control and compliance with data protection regulations. The DataValuator feature assigns monetary value to data, suggesting remediation strategies integrated with service management notifications.

This integration with Proofpoint aims to streamline and enhance the security and governance strategies of data and security teams across diverse operational environments. Normalyze's solutions, known for their extensive coverage and human-centric risk mitigation focus, will become part of Proofpoint's offerings once the acquisition is finalised.