Cyera Cloud Data Security Platform

I worked as a data security intern, and I used Cyera  for monitoring our data security policies. Cyera  has an inbuilt set of policies implemented towards data security, especially cohering with Data Security  Posture Management (DSPM). The tool helps find sensitive data across different cloud environments and services.

Cyera provided excellent data analytics charts showing how many devices were compromised and how much data could be leaked if certain rules were not adhered to. It explained vulnerability situations for devices within Cyera, helping us manage and apply restrictions efficiently. The tool included a pie graph and different systems to categorize data, such as data in the cloud or platform-related data and connected devices.

There is room for improvement in making Cyera more user-friendly. Some parts were difficult to navigate, especially for those new to the IT industry. Cyera could be more intuitive, and the UI could be more appealing and easier to read. Additionally, promoting the concept of Cyera to a wider audience, including schools and universities, could increase awareness.

I used it six months back at that company.

I didn't face any issues with bugs or breakdowns. It worked well for the research I had to do on DSPM.

Cyera performed well, highlighting important principles and simplifying rules that might seem basic. The tool made it clear to avoid actions like using random USB devices, ensuring adherence to common safety practices.

The support team was reachable, although there were some delays in delivering requests. The team did a decent job despite having multiple clients.

Neutral

The initial setup involved requesting access through the private employee portal. Once access was granted by my manager or team, Cyera automatically integrated into my computer. I didn't need to be involved in the setup.

I also used Netskope  to get device details of company devices, and ServiceNow  for IT Service Management .

I advise doing research on Cyera before trying to use it. It's not an application you can learn instantly, so understanding its purpose and how it's used is important. Overall, I would rate Cyera an eight out of ten, considering my skills and experience.

Private Cloud

What do you like best about the product?

I was using two different DLP products for years and was never able to understand where all my critical data was. My team spent their time chasing false positives all day. Cyera was able to very quickly determine where my data was, who had access to it, and how I could protect it.

What do you dislike about the product?

At the time that I implemented Cyera, they did not support on premise data, and some of my data was still on premise. They have since released on premise capabilities, but it was a challenge when we first implemented.

What problems is the product solving and how is that benefiting you?

Data is the new oil. Cyber criminals are after it. So protecting my data is key. Cyera shows me where my critical data is, who has acces to it, and how to protect it.

We are primarily using it for data security posture management (DSPM) and cloud security posture management (CSPM).

It is a data discovery and classification tool. We can classify the data based on its sensitivity on a day-to-day basis across the organization's data repository, which is huge with more than 10 petabytes. It is an ongoing task. It is something that needs to be done in the background every day. We have to analyze the data to scan the data. We have to classify the data and see who has access to it and what is the sensitivity level.

It helped to discover where the data was lying around. It helped us to classify the data that we have across the globe. It gave us all the privacy violations or protection issues with respect to the data. It aided us in our data protection capabilities.

The data discovery, data classification, and CSPM features are most valuable.

Its deployment is straightforward and easy.

They are doing pretty well. I do not know if they need to improve anything. They have to expand to on-prem, which they will be doing soon. As a startup company, there is a long way for them to go in terms of scalability.

I have been using Cyera for more than two and a half years.

It is a stable product.

Being a startup and being in the maturing stage, I would rate it an eight out of ten in terms of scalability.

It is used on a need basis. We do not have an exact number of users using Cyera.

I have spoken to their support and even their CEO a couple of times. Their customer service is great.

There are many SIEM and security tools in the market. An organization of big size, like ours, relies on multiple security tools. There is nothing that we have replaced with Cyera. We have other tools as well. There is a necessity to protect cloud data, so we are using a couple of tools. Cyera is one of them. In the last year, they got 100 million in seed funding, so this is the future of cloud security. There has been great buzz in the market, so we thought of trying it. We started with them about two and a half years ago. We started with them when they were a startup company. It is great to work with a team like that.

It is a cloud platform. It does not support on-prem yet, but they are going to do that in the future. It is deployed on Azure, Amazon, OneDrive, O365, and other clouds.

It is an agentless deployment, so it is extremely simple and easy. The deployment takes minutes.

We cannot analyze the ROI on cybersecurity tools in terms of numbers. If you are not paying hefty fines, there is savings for you, so you get a good return on investment.

Compared to the competitors, they are very reasonable.

To those evaluating this solution, I would advise doing a proper assessment of your organization in terms of what your cloud data is residing on. You first need to assess if you need any cloud data-specific tool. After you have done that assessment, you need to see your pocket weight in terms of how much you are willing to spend on a particular solution. Based on that, you need to shortlist a vendor.

I would rate Cyera an eight out of ten at this time. They are still a startup company, and they still have a long way to go.

Initially, it was to get an idea of where sensitive data was, but now, the way I've been using it is to supplement our CNET where we have a view list. So, when I get the findings there, I'll go look in Cyera and make sure that there's no sensitive data, and if there is, that'll help me build a better story when I go to get it remediated by the stakeholders.

We're using its latest version. It's deployed on Azure and AWS.

It has been an added benefit for me in dealing with vulnerabilities and other risks.

I like how they model the data. They find data in different places that we didn't know, and they can give us a good idea if it's sensitive or not. They understand whether or not something is in the right region because, with the cloud posture management tool, we could see certain things in the infrastructure, but the way they dig into the data is what we like.

Anytime I ask them for something that they don't have, they're always willing to go in and start building it. They're pretty fast. It's what I like, and they take feedback well. Ultimately, they just need to add a few things in the UI from an enterprise perspective, but outside of that, they've put in integrations. They work with us and help us where we're stuck on things. They keep building out new functionality. I like it. They're starting with this posture management tool, but they're scanning out and looking at other data sources and other ways to protect the data. They just released a detection and response feature. I really like what they're doing.

They need to add a few things in the UI from an enterprise perspective. It's more along the lines of being able to self-service, have integrations, build alerts, and things like that. Outside of that, they work with us on the API and getting alerts into our SIEM and things like that. There's always a way to do something, and they're always available, which is nice.

I'd like to add support for Box and maybe some open support for additional data store companies, Elastic searches, and things like that. There could be some more integrations, but when that happens, we ask the question, and they start working on it.

I've been using this solution for a few months.

I don't think I've ever had an issue with it going down. In terms of bugs or issues, it has never been anything too crazy. It has been very minor. If anything, it was just like a feature enhancement.

It's primarily our team that's using it. We also extend access to some devs or infrastructure engineers for added context, but it's primarily used by the security team. We have five or six people on the team.

It's scalable. I haven't seen it having an issue with scaling, especially because there are no agents, and there's no infrastructure. You have to roll it on your end. It's all permissions, and it's all cloud-based, so everything just works.

It's used daily. I go in there and look for things. Sometimes, I'll get an alert, and I just go back into it to check what kind of data is in that data store. It gets a lot of use. We've automated alerts around it.

We have a direct Slack channel with them, and we work with their solutions engineers or architects. We get very good support from them. I'd rate them a ten out of ten because they're very helpful. They take good feedback. They're great to work with.

Positive

We weren't using any similar solution in this space. We had whatever was included with Microsoft. It was Microsoft Purview, but it was pretty messy. There's just so much going on there.

We went with Cyera because they were very good at building a relationship with us. When we talked to them, they were talking about integrations with different vendors. The main thing that we were looking for was an integration to understand sensitive data in MongoDB Atlas, which is the cloud version of MongoDB. No one else is really looking at that. From a DSPM perspective, it was nice to have something that was agentless, easy to set up, and something that could eventually integrate with our other tools. So, the main thing was the ease of deployment, the agentless solution, and the fact that we could get all data storage in here for the scanning of sensitive data.

It's easy, as long as you have access. That's what we really like about agentless solutions. You give it permission, and it just goes and scans around.

It took minutes. It's very fast. The only thing that takes a long time is if you have large data stores. In that case, it would take a while to scan and model the data, but for some of the smaller data storage, we started seeing results pretty quickly. The deployment itself takes minutes.

It was implemented in-house.

I haven't seen any other quotes from other companies, but products like these are not cheap. They come at a price.

I don't know how much exactly it costs, but I know that it's a yearly thing. It's something that will cost money for any company because they're storing all this information. They're doing all this machine learning, and there are a lot of services on their backend that they got to pay for. I'm sure it gets translated back to the customers unless you have everything completely on-prem. If you're not doing much in the cloud, then I could see how it'd be cheaper, but if you have anything that's cloud-hosted and does all the work for you, there's going to be a cost associated with it.

The licensing has been pretty straightforward. The pricing was on a per gig or per terabyte basis, and then everything was included in it including support. Their support has been good.

I'd definitely recommend it, but you should always look at a few things and see what's good for your environment. That's because some people might have a few different data sources. They might not use a cloud, CSP, or a certain vendor. From what we've experienced, it has been nothing but good.

I'd rate it a nine out of ten because I feel some of the things that we need aren't there yet, such as the Box integration and some of the UI features. Outside of that, they make up for it by keeping an open dialogue and fixing it. I really like dealing with this company.

Public Cloud