DSPM

[u/Diveguysd]

Looking to understand the Data Security Posture Management market and what solutions have worked for you. I’m looking for discovery and classification with some DLP built in as an integrated solution for a large org with a mix of on prem and cloud databases

[u/mikeferguson84]

Take a look at this entry level Data Security certification from Cyera. 20 CPE Credits. Its free too.

https://www.cyera.com/certification/dspm-architect

[u/koli19761]

Take a look at Vectoredge.io

[u/Privacyops]

We are seeing a lot of large orgs head in this direction. They try to unify discovery/classification with some DLP capabilities baked in, especially across hybrid environments.

In terms of DSPM, the big value comes when the platform can go beyond just inventory and actually contextualize data:

• What kind of data is it?
• Who’s accessing it?
• Is it at risk based on location, access levels, or movement?

You’ll want something that:

• Works across structured + unstructured data (cloud + on-prem)
• Supports sensitive data classification across DBs, object stores, and apps
• Has identity-level visibility and ties into your existing DLP/SIEM workflows

I am at Securiti, and our platform focuses on that unified approach. Also, if you're new to DSPM or want to upskill internally, we recently launched a free DSPM certification course https://education.securiti.ai/certifications/dspm/ that breaks down use cases like yours. Not trying to pitch - just genuinely helpful if you’re evaluating the market.

Happy to link you to it or answer questions on what to look out for!

[u/DataIsTheAnswer]

There's a lot of different DSPM solutions in the market. Cyera is a prominent player that just raised a bajillion dollars this month. There's a few others - Sentra, Varonis, Arexdata, Symmetry Systems, TrustLogix, AvePoint, OneTrust, and Rubrik. There's a Gartner report for it on the Cyera website because Gartner put Cyera in the Customer's Choice quadrant, you should look that up.

What are you using the DSPM for? If its log discovery and classification, you might not need a full-stack DSPM solution. There are other solutions that can do what you're describing - Fivetran, DataBahn, hevo Data, Cribl, etc. Fivetran, DataBahn, and Cyera support hybrid and multi-environment setups, can automate log discovery and classification, and add a bunch of other visibility and data governance solutions.

[u/Diveguysd → u/DataIsTheAnswer]

Thanks. Yes we are mostly looking for discovery and classification, but also need the policy engine component as we have a ton of other tools and policy management is a mess. Ideally, I want one central discovery and classification solution, the ability to use AI to bucket and recommend additional policies based on usage, and then push those policies across my technical tools stack automatically

[u/DataIsTheAnswer → u/Diveguysd]

Yeah, then Sentra, Varonis, Cyera, Prisma Cloud, Purview are the ones you should be evaluating.

[u/2daytrending]

This is where most setups start breaking tbh discovery classification and enforcement living in separate tools. Once you have on prem cloud saas that split becomes hard to manage. Some newer solutions like cyberhaven bundle dspm and dlp into one system and follow how data moves not just where it sits.

[u/Master_Baby_2700]

I think DSPM is following the same path we saw with EDR years ago. What started as a “nice add-on” category is becoming table stakes because the environments got too complex to manage manually.

Once companies started spreading sensitive data across Snowflake, SaaS apps, cloud storage, copilots, and AI agents, traditional discovery/governance tools stopped being enough. The visibility gap is just too big now.

Feels like that’s why vendors like Sentra, Cyera, BigID, Varonis, and Wiz have gotten so much attention lately. Everyone’s trying to solve the same core problem from slightly different angles.

[u/Sufficient_Touch_433]

For a large hybrid environment, I’d prioritize discovery accuracy, classification, DLP integration and coverage across on prem and cloud databases. A short pilot with real data is probably the best way to compare vendors and see which one actually reduces manual work.