Proofpoint announces acquisition of DSPM firm Normalyze

Proofpoint has announced it will acquire Normalyze, a company known for its Data Security Posture Management (DSPM) technology.

With this acquisition, Proofpoint aims to enhance its security platform by incorporating Normalyze's AI-powered DSPM technology, which helps organisations with data discovery, classification, and protection across various environments. The deal is anticipated to be finalised by November 2024, pending customary closing procedures.

The integration of Normalyze's technology into Proofpoint's platform is designed to assist organisations in addressing the complexities of securing data in today's interconnected technological landscape. This environment has grown increasingly intricate with the advent of AI, Databases as a Service, and continuous development practices.

Proofpoint's approach will focus on managing the risks associated with human factors in data security, particularly as quick development cycles sometimes overlook critical governance aspects.

The merger will bolster efforts to prevent data breaches that arise due to mismanaged data and excessive access permissions.

Mayank Choudhary, Executive Vice President and General Manager of Data Security & Compliance at Proofpoint, commented: "Today, data is at risk because of human behaviour. Modern applications are rapidly changing, driven by small teams of developers working independently on microservices and various data sources, leading to an explosion of data."

"These modern applications are highly interconnected, making it hard for security teams to manage the heterogeneous and ever-growing sprawl of their data. By combining Proofpoint's leading human-centric security platform with Normalyze's pioneering DPSM technology, we can provide our customers with comprehensive visibility and control of their data posture so they can further mitigate human risk across their organisation."

Ravi Ithal, Cofounder and Chief Technology Officer of Normalyze, commented on the challenges posed by the rapid development of cloud applications and the widespread use of SaaS applications. "With the rapid proliferation of internally developed cloud applications, and use of SaaS applications procured by teams outside of IT, security teams are faced with the daunting challenge of inconsistent visibility and control of their critical data in the cloud," he said.

"As data has become increasingly difficult to secure, the driving force behind our mission and technology has been to help organisations secure the data they care about, wherever it is. By joining forces with Proofpoint, we can empower organisations to further improve their data security posture, reducing the risk of data breaches caused by human errors and help them to prioritise data loss threats."

The Normalyze DSPM platform offers extensive insights into data, access, and risk, which supports collaborative security efforts between data and security teams. This platform equips organisations with tools to discover and classify data using AI, assess and prioritise risk, and address security and compliance issues efficiently.

Normalyze's DSPM technology stands out due to its in-place scanning and quantified risk analysis capabilities, which aim to deliver rapid onboarding while overcoming security and cost-related challenges. The technology also provides comprehensive on-premises to cloud coverage, with a strong focus on human-centric risk management.