Cloud Storage Security Launches DataDefender™ — A Novel DSPM Platform for AI-Assisted Data Classification and Cloud Storage Protection
Cyber Security / Foundational Security | 4 min read
Cloud Storage Security, an innovative start-up focused on securing data in the cloud — and the creator of Antivirus for Amazon S3, currently the #1 most subscribed container listing in AWS Marketplace — has announced the immediate availability of DataDefender™, its new Data Security Posture Management (DSPM) platform focused on data stored in the cloud. DataDefender delivers highly accurate AI-assisted classification of cloud-stored data to identify and locate the most sensitive data, and provides continuous, real-time monitoring of all activities associated with data access to prevent unintended data exposure. The platform is agentless, deployable in under one hour via a single CloudFormation template, and scales across thousands of storage resources and hundreds of AWS accounts without infrastructure overhead.
"DataDefender accurately identifies and classifies data stored in the cloud, and alerts cloud engineers and security professionals where that data exists, including in cloud storage assets configured with public access. Data leaks generally occur either because sensitive data unknowingly resides in publicly accessible storage resources, or because of innocent misconfigurations and security holes related to access control. Serious data breaches may also result from malicious and intentional behaviour by bad actors. All of these risks are monitored and significantly mitigated with DataDefender."
— Aaron Newman, Chief Executive Officer, Cloud Storage Security
The Problem DataDefender Solves: Visibility Into What's at Risk
As cloud storage continues to scale, security teams struggle to answer basic questions about their data without digging through logs. What data exists? Who has accessed it? Is sensitive data exposed? These answers are often unavailable until something goes wrong. The three common attack vectors DataDefender is built to address are: public access misconfigurations — storage resources set with public access where sensitive data inadvertently becomes accessible; insider sabotage — deliberate acts by internal personnel with broad systems access; and external breaches — ransomware, data exfiltration, and bad actor attacks targeting cloud storage. DataDefender uses proprietary AI-based multi-stage attack detection and threat signatures to find misconfigurations and raise visibility to more than 10,000 potential paths for data compromise — covering both live cloud data stores and archived storage repositories.
Five Capabilities, AI-Assisted Classification, and Compliance Coverage
DataDefender is organised across five capabilities: inventory (enumerate cloud storage resources across accounts, regions, and services — S3, EBS, EFS, FSx, Glacier); classification (AI-assisted sensitive data identification minimising false negatives and false positives); activity monitoring (continuous real-time visibility into who accesses what, when, and how — detecting anomalies, exfiltration attempts, ransomware indicators, and insider threats); threat detection (proprietary multi-stage AI attack detection across 10,000+ compromise paths); and configuration checks (90+ automated security best-practice evaluations surfacing misconfigurations and risk severity). AI-assisted classification supports industry standards including PII, HIPAA, and GDPR; custom templates for finance and healthcare; and proprietary customer configurations. DataDefender also supports compliance tracking and audit requirements for SOC2 and PCI DSS. Initially deployed on AWS, the company plans to expand to Microsoft Azure, Google Cloud, and popular code repositories including GitHub.
Key Takeaways
- • Cloud Storage Security has launched DataDefender™ — a DSPM platform providing AI-assisted cloud data classification, continuous real-time activity monitoring, threat detection, and configuration security checks. Immediately available; agentless; deployable in under one hour via a single CloudFormation template; scales across thousands of storage resources and hundreds of AWS accounts. Free trial available.
- • Three attack vectors addressed: public access misconfigurations (sensitive data in publicly accessible storage); insider sabotage (broad-access internal personnel deliberate acts); external breaches (ransomware, exfiltration, bad actors). DataDefender raises visibility to 10,000+ potential data compromise paths using proprietary AI-based multi-stage attack detection — covering both live cloud data stores and archived repositories.
- • Five capabilities: inventory (S3, EBS, EFS, FSx, Glacier across accounts and regions); AI-assisted classification (minimising false negatives leaving sensitive data unidentified and false positives creating misleading alerts); activity monitoring (continuous real-time who/what/when/how — anomaly detection, exfiltration, ransomware, insider threats); threat detection (multi-stage AI attack detection); configuration checks (90+ automated security best-practice evaluations).
- • Classification and compliance support: industry standards (PII, HIPAA, GDPR); custom templates (finance, healthcare); proprietary customer configurations; compliance tracking and audit requirements for SOC2 and PCI DSS. Initially AWS-focused (S3, EBS, EFS, FSx); expansion to Microsoft Azure, Google Cloud, and GitHub planned.
- • Company context: Cloud Storage Security also operates Casmer Labs — a dedicated threat intelligence and research division focused on cloud storage security, providing free threat intelligence, security education, and trend reports. The company previously created Antivirus for Amazon S3 (#1 most subscribed container in AWS Marketplace) and won three 2024 Cybersecurity Excellence Award categories: Cloud Native Data Security, AWS Cloud Security, and Antivirus.