Trustwave acquires data loss prevention vendor Vericept

By Neil Roiter, Senior Technology Editor, Information Security magazine 10 Sep 2009 | SearchSecurity.com

Security Wire Daily News Digg This!     StumbleUpon     Del.icio.us

SearchSecurity.com: To get security news and tips delivered to your inbox, click here to sign up for our free newsletter.

Trustwave has acquired Vericept Corp., one of the leading independent companies in the rapidly consolidating data loss prevention (DLP) market.

Trustwave is a provider of managed security services and compliance management solutions, with a focus on PCI DSS compliance. While the PCI standard does not specify the use of DLP technology, it is very useful in supporting several requirements. DLP helps companies segment the parts of the network that handle cardholder data andand monitor access. DLP can be used to demonstrate compliance across multiple regulations, such as HIPAA, and for detecting potential data breaches.

"Trustwave will embed DLP in itscore business of PCI compliance and managed services," said Paul Proctor, research vice president, security and risk, for Stamford, Conn.-based Gartner Inc. "That will do well there as a differeniator for Trustwave. But as far as them [Vericept] being a force in the enterprise DLP market and a general competitive player, I think that's pretty much over."

Related DLP news: Is DLP coming of age? Reconnex hopes to ease path: Firms have grappled with DLP, but after a hard experience, ING's Andre Gold tells why it may be ready for prime time. CA acquires Orchestria for DLP: CA announced in January that it planned to sell Orchestria's data loss prevention (DLP) technology along side its identity and access management software. Finjan adds DLP, content caching to Web security gateway: The Web security vendor says its DLP capabilities won't compete with major vendors in the market, but will appeal to enterprises in a tight economy.

Vericept's suite of DLP products provides data discovery and data classification, and monitors content on the endpoint and across multiple network egress points and channels, including email, webmail, IM, FTP, HTTP and HTTPS traffic.

Vericept's Content Analysis Engine analyzes content against policy, helps detect and classify structured and unstructured content, as well as text extraction of any file type. This technology extends to data-in-motion to address Web 2.0 threats by identifying the use of applications such as blogs, social networking sites and webmail to accurately identify and control sensitive data.

"We're very excited to offer our customers a leading DLP solution that can manage sensitive data, scale to meet expanding business requirements and maintain high performance as business continues in real time," said Robert J. McCullen, chairman and CEO of Trustwave Corp.

The DLP market has seen extensive consolidation in the last three years: CA Inc. acquired Orchestria Corp. earlier this year; McAfee Inc. acquired Onigma Ltd. and Reconnex Corp.; Symantec bought Vontu; RSA Security Inc. (EMC) acquired Tablus Inc.; Trend Micro Inc. purchased Provilla Inc.; Raytheon Co. bought Oakley Networks Inc.; Websense Inc. bought PortAuthority Technologies.

SearchSecurity radio:

Remaining independent vendors include Verdasys Inc., Code Green, Fidelis Security Systems Inc., Workshare Inc., Palisades Data Systems and GTB Technologies Inc.

Gartner's Proctor said that although Trustwave says it will continue to market Vericept as a competitive DLP product, Gartner is advising large enterprise clients to explore other options for full enterprise DLP deployments.

"In the other acquisitions, companies are making a play for the enterprise DLP market," he said. "That's not what's going on here."

Tags: Data Analysis and Classification,  Data Loss Prevention,  Database Security Management,  Enterprise Data Governance,  VIEW ALL TAGS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Data Analysis and Classification Creating an enterprise data protection framework Analyst DLP study finds maturity, ranks top DLP vendors PCI DSS compliance requirements: Ensuring data integrity Data has become too distributed to secure, Forrester says Compliance in the cloud Database monitoring, encryption vital in tight economy, Forrester says Best practices for log data retention Data classification best practices: Techniques, methods and projects HIPAA changes force healthcare to improve data flow Can read/write access policies be put on a SAN server? Data Analysis and Classification Research Data Loss Prevention Health Net healthcare data breach affects1.5 million Layoffs prompt insider threat fears, cybersecurity survey finds Breach prevention: How to keep track of data and applications Trend Micro to address DLP after analyst report criticizes strategy How to secure USB ports on Windows machines DLP technology challenges security costs Defining DLP Analyst DLP study finds maturity, ranks top DLP vendors Data protection tips for corporate compliance leaders Best Data Loss Prevention Products Database Security Management Content-aware IAM: Uniting user access and data rights Why should we place data files on a separate partition than the OS? How to prevent operating system cloning with AES 256-bit encryption Are there guidelines to create a HIPAA-compliant data center?

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary