Sold by: Varonis
Deployed on AWS
Free Trial
Vendor Insights
AWS Free Tier
Varonis automatically discovers sensitive data in SaaS repositories, identifies where data is exposed, helps reduce risk by rightsizing privileges, and monitors data for suspicious activity to prevent cyberattacks from taking hold.
4.5
Overview
Stop Data Breaches Automatically. With AI-powered automation, continuously discover and classify critical data, remove exposures, and stop threats in real-time.
Varonis offers security teams a single control point to monitor and protect their SaaS, IaaS, and on-prem environments, including structured and unstructured sensitive data.
Varonis identifies and surfaces where sensitive data lives across your environments and shows you where it's exposed. Varonis helps you reduce risk by understanding and rightsizing privileges, finding and fixing misconfigurations and security gaps, and monitoring for suspicious or inappropriate behavior across SaaS and IaaS platforms.
Automated DSPM for AWS, Box, M365, Google, Salesforce, GitHub, Okta, Zoom, Jira, and Slack.
More than 7,000 enterprises worldwide trust Varonis to keep their data safe.
Varonis tackles hundreds of use cases, making it the ultimate platform to stop data breaches and ensure compliance.
Data classification - Find and classify sensitive data across structured and unstructured data, including PII, PCI, and secrets, across all data stores, including saas, IaaS, and on-prem environments.
Permissions analysis: Easily understand effective permissions to reduce data exposure and compliance gaps, such as ex-contractors and guest users who still have unnecessary access.
Threat detection & response: Monitor data activity and alert on data exfiltration attempts by insiders and malicious actors.
Least privilege automation Safely eliminates data exposure from sharing links, stale permissions, and group memberships.
Automated posture management: Find and fix misconfigurations, org-wide settings problems, and other critical security gaps.
Core use cases:
-Sensitive data discovery and classification -Compliance management -Least privilege automation -Insider risk management -Ransomware prevention -Data security posture management (DSPM) -SaaS security posture management (SSPM) -Cloud security posture management (CSPM) -Proactive incident response
GETTING STARTED
All Varonis products are free to try and come with an engineer-led data risk assessment. The platform can be deployed in minutes and populates insights instantly, giving you a comprehensive look at your data security posture and actionable steps to reduce data exposure.
Request a risk assessment: https://info.varonis.com/en/demo-test-drive . For custom order configuration & volume pricing, please contact aws@varonis.com
Highlights
- Unrivaled visibility into SaaS and IaaS platforms - Varonis applies consistent and highly accurate classification policies across your SaaS and IaaS platforms to identify where sensitive data lives in your environments. Varonis maps and normalizes granular permissions across platforms into a simple CRUDS model - pairing with sensitivity results to show you who has access and where data is exposed org-wide, publicly, and externally.
- Enhanced data security posture management (DSPM) - Surface critical org-wide configuration gaps across your SaaS and IaaS platforms, and fix them with a simple click of a button. Use Varonis' customizable DSPM dashboards to continuously visualize and assess your data security posture and track progress over time. See where there are unnecessary pathways to data and monitor changes to risk over time so you can reduce threats to your sensitive data as your SaaS and IaaS environments evolve.
- Near real-time threat detection - Monitor activity across your SaaS and IaaS platforms to detect suspicious or risky activity to protect your critical data from malicious actors with notifications on abnormal activity, unauthorized access, and risky misconfigurations. Use our highly detailed alerts to jumpstart your investigation and drill down into our granular audit trail of activity to perform cross-cloud forensic investigations.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
Security credentials achieved
(2)
ISO27001
PCIDSS
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free according to the free trial terms set by the vendor.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Varonis for AWS/S3/RDS IaaS | DSPM coverage for AWS, S3, EC2 and RDS | $750.00 |
Varonis for Box | DSPM coverage for Box | $310.00 |
Varonis for Salesforce | DSPM coverage for Salesforce | $310.00 |
Varonis for Slack | DSPM coverage for Slack | $310.00 |
Varonis for Google Drive | DSPM coverage for Google | $310.00 |
Varonis for Okta | DSPM coverage for Okta | $310.00 |
Varonis for Jira | DSPM coverage for Jira | $310.00 |
Varonis for Github | DSPM coverage for Github | $310.00 |
Varonis for Zoom | DSPM coverage for Zoom | $310.00 |
Varonis for M365 | DSPM coverage for M365 | $400.00 |
Dimensions summary
You buy each dimension separately, all priced by units. Most dimensions add data security posture management (DSPM) coverage for one platform, such as file storage, cloud infrastructure, or a specific SaaS application. You pick only the platforms you need and pay per unit for each. One dimension connects the product to any structured database. Three separate Interceptor dimensions cover email threats, browser threats, or both together, letting you choose the channels you want to protect. Pricing scales as you add units and as you select more platforms or protection areas.
Top-of-mind questions for buyers
Each covered dimension is priced by units, and you buy them per platform. A unit typically maps to a scoped item within that platform, such as an account, user, or data volume. The marketplace listing does not spell out the exact per-platform unit, so confirm the specific unit definition with the vendor.
You can buy Interceptor for Email, Interceptor for Browser, or the combined Email and Browser dimension. Email protection filters phishing and business email compromise in inboxes. Browser protection blocks malicious sites across web channels. The combined dimension covers both. You pick only the channels you want and pay per unit.
Each platform dimension bills independently and appears as its own line. Your total adds together the units you buy for every dimension you select. Adding more platforms raises cost by the units in each new dimension. Cost within a dimension rises as you increase its unit count.
www.varonis.com+2
Helpful?
Vendor refund policy
Please contact aws@varonis.com
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
We offer premium support for customers with business hours support coverage through global phone contacts, email, and our worldwide community forum.
https://www.varonis.com/support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Varonis
By Obsidian Security, Inc.
![[restricted]Netskope - Public Cloud Security](https://d7umqicpi7263.cloudfront.net/img/product/56e6752a-32e2-4e4e-8d0e-67bb1be5f59c.png)
By Netskope
Top
10
In Data Security and Governance, Legal & Compliance
Top
10
In Data Security and Governance
Top
100
In Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Sensitive Data Discovery and Classification
Automatically identifies and classifies sensitive data including PII, PCI, and secrets across structured and unstructured data stores in SaaS, IaaS, and on-premises environments using AI-powered automation.
Permissions Analysis and Least Privilege Automation
Maps and normalizes granular permissions across platforms into a CRUDS model to identify excessive access, eliminate stale permissions, and automatically reduce data exposure from sharing links and group memberships.
Data Security Posture Management
Continuously discovers and surfaces critical configuration gaps across SaaS and IaaS platforms with customizable dashboards to visualize security posture, track progress over time, and identify unnecessary data access pathways.
Real-Time Threat Detection and Monitoring
Monitors data activity across SaaS and IaaS environments to detect suspicious behavior, unauthorized access attempts, and data exfiltration by insiders and malicious actors with granular audit trail capabilities.
Multi-Platform Coverage
Provides automated data security and posture management across AWS, Box, Microsoft 365, Google, Salesforce, GitHub, Okta, Zoom, Jira, and Slack platforms from a single control point.
Identity Threat Detection
Active threat detection and neutralization for SaaS identities with spearphishing blocking and incident response capabilities
Third-Party Integration Risk Management
Discovery and governance of third-party integrations across SaaS applications with risk assessment and mitigation
Data Movement Governance
Monitoring and control of data movement between SaaS applications with visibility into data flows
Application Posture Management
Automated compliance enforcement, privilege reduction, and configuration drift prevention across SaaS platforms
Unified SaaS Security Platform
Integrated platform combining identity security, data governance, and application posture management in a single modular solution
Cloud Access Security Broker
Unified cloud access security broker (CASB) functionality providing visibility and control over access to managed and unmanaged cloud services with conditional, granular policy enforcement.
Secure Web Gateway
Next generation secure web gateway (SWG) capabilities delivering comprehensive threat protection for cloud and web services with context-aware access control.
Data Loss Prevention
Data-at-rest and data-in-motion inspection with DLP violation detection, malware scanning in cloud storage, and capabilities to block, quarantine, encrypt, or apply legal holds to prevent data loss and exposure.
Cloud Infrastructure Monitoring
Continuous security assessment monitoring of cloud infrastructure for risky misconfigurations including data exposure, with visibility into unsanctioned IaaS accounts and detection of unmanaged cloud infrastructure access.
Compliance and Remediation Automation
Pre-defined compliance profiles aligned with industry standards such as CIS, PCI, and NIST, with advanced RBAC, scheduled reports, alert notifications, exception handling, automated remediation, and REST API accessibility.
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
-
-
-
-
No security profile
No security profile
Standard contract
No
No
Customer reviews
Manufacturing
Deep Data Visibility and Automated Risk Prioritization Across On-Prem and Cloud
Reviewed on Jul 13, 2026
Review provided by G2
What do you like best about the product?
What I like best about the Varonis Data Security Platform is its ability to provide deep visibility into where sensitive data resides, who has access to it, and how that data is being used across both on-premises and cloud environments. The automated data classification, permissions analysis, and risk prioritization significantly reduce the manual effort required to identify overexposed data and remediate security risks.
What do you dislike about the product?
The biggest drawback is that the platform has a steep learning curve, especially during the initial deployment and tuning phase. Because Varonis provides a large amount of security and permissions data, it can take time to understand the dashboards, prioritize findings, and fine-tune alerts to reduce noise. Initial scans and indexing may also require significant time and infrastructure resources in large environments. While the platform is powerful, some advanced features require additional licensing, which can increase overall costs. Reporting and customization could also be more intuitive for users who are not security specialists.
What problems is the product solving and how is that benefiting you?
Varonis Data Security Platform has helped us identify and reduce data exposure by providing visibility into where sensitive data is stored, who has access to it, and how that data is being accessed. It has simplified the process of identifying excessive permissions, stale data, and potential insider or external threats through continuous monitoring and behavioral analytics. The automated data classification and risk-based recommendations have reduced the time spent on manual audits and remediation, while improving our overall security posture.
Jason W.
Rich Audit Detail and MDR Support for Strong, Regulated-Security Posture
Reviewed on Jul 08, 2026
Review provided by G2
What do you like best about the product?
We use the Varonis platform extensively for ICFR reporting for our customers. We have also leveraged it on a number of occasions to perform security investigations because it offers rich detail regarding file moves and deletions. We have also used the SaaS MDR services which have identified and help remediate security concerns.
What do you dislike about the product?
Depending on which vertical your company is in and how large, sometimes the cost of the platform can be a concern. Overall the benefit does outweigh the cost, especially when you work in a regulated space that requires a staunch security posture.
What problems is the product solving and how is that benefiting you?
MDDR services are a nice compliment to your SOC, whether outsourced or on prem. Detailed file moves, sensitivity labeling and alerting is absolutely necessary for ICFR reporting.
Computer Software
Varonis Data Security Platform, powerful visibility, but steep costs and a tough onboarding curve
Reviewed on Jun 29, 2026
Review provided by G2
What do you like best about the product?
What stands out most about the Varonis Data Security Platform is its unified approach to data visibility and behavioral analytics. It seamlessly maps identities and access across complex hybrid environments—AWS, SaaS, and on‑premises—while automatically classifying sensitive data and establishing a baseline for normal behavior. Its AI continuously calculates and reduces the "blast radius" of over‑permissioned files, enabling abnormal activity to be detected in real time. It also scales smoothly across petabytes of data through incremental scanning, avoiding performance bottlenecks and high infrastructure costs.
What do you dislike about the product?
While Varonis is incredibly powerful for data visibility, its biggest drawback is its pricing and steep total cost of ownership (ROI), which can heavily strain budgets for mid-sized organizations. Because the platform is highly modular, the costs quickly stack up as you add coverage for different SaaS apps, cloud providers, and automated remediation features. Additionally, the UI/UX and onboarding present a sharp learning curve; configuring policies, clean-up rules, and data classification labels requires dedicated, specialized administrative overhead just to prevent an influx of false-positive alerts. Finally, while its incremental scanning is optimized, deploying its on-premises collectors or orchestrating massive initial scans across legacy environments can cause temporary performance friction and demand substantial infrastructure resources.
What problems is the product solving and how is that benefiting you?
Varonis addresses the critical problem of unstructured data sprawl and identity over-privilege across complex cloud, SaaS, and hybrid environments. By automatically mapping where sensitive data resides and who has access to it, it continuously removes excessive permissions to enforce a strict least-privilege model. The main benefit is that it significantly reduces your environment's "blast radius"—preventing a single compromised account or internal AI tool from accessing or leaking confidential files. Furthermore, because its behavioral analytics establish a baseline of normal activity and alert on anomalies in real time, it shifts your team from manual, reactive log-hunting to automated, self-healing data defense.
Max S.
Very Useful Data Classification Engine
Reviewed on Jun 16, 2026
Review provided by G2
What do you like best about the product?
Data classification engine is very useful
What do you dislike about the product?
Sometimes support can be slow with MDDR responses
What problems is the product solving and how is that benefiting you?
We are able to quickly label our data
Verified User in Staffing and Recruiting
24/7 Peace of Mind with MDDR and Extensive Logs
Reviewed on Jun 16, 2026
Review provided by G2
What do you like best about the product?
MDDR gives us piece of mind 24/7 and the extensive logs
What do you dislike about the product?
Occasionally we have to submit feature requests
What problems is the product solving and how is that benefiting you?
Allowing us to see in depth logs on all our user and data activity