DLP

Technology that detects and blocks unauthorized movement of sensitive data.

DLP comprises tools and policies that identify, monitor, and block sensitive information from leaving an organization through channels such as email, web uploads, or removable media. It relies on classification and pattern matching, for example detecting card numbers or tagged documents, to enforce handling rules. Coverage spans data in motion, at rest, and in use across endpoints, networks, and cloud. A frequent challenge is tuning to reduce false positives while still catching genuine exfiltration attempts.