Data loss start-ups sell out

Rapid consolidation could mean 'baked-in' data leakage features will appear in security products from vendors such as Cisco, Symantec, Trend Micro and McAfee

The rapid consolidation in the anti-data leakage market in the past year is enough to make an IT manager's head spin: This segment of the security sector ballooned to include dozens of start-ups, then even more quickly dwindled down to a few independent companies as larger vendors cherry-picked smaller ones to add data leakage to their own product portfolios.

A rough estimate shows at least US$1.6 billion was spent by vendors acquiring anti-data leakage -- also referred to as data-loss prevention or data-leak prevention -- start-ups over the past year, and that figure only includes the transaction values that were made public.Now that the spending spree is winding down and the acquiring vendors are revamping their product road maps to include these new wares, observers say enterprises can look forward to having the benefits of these security products baked into existing offerings that they're probably already using.

"We found there was a significant hole in the security product suite vendors," says Trent Henry, vice president and research director with Burton Group. "The hole has been information-flow protection and protecting the endpoint, not just network content flow."

As many of the data leak products evolved from protecting information "in motion," or being e-mailed, sent via instant messaging or copied to removable media, but also data "at rest," many large vendors thought it best to buy rather than build these capabilities.

Data leakage assimilation

Turning anti-data leakage into a feature of existing products represents a logical progression, analysts agree. In fact, many existing products are already moving in that direction; e-mail security offerings from companies such as Proofpoint, Secure Computing and Google's Postini already have some basic data-leak-protection functions that can, for example, scan outbound e-mail, instant messaging and Web traffic and flag messages that contain information thought to be sensitive, such as Social Security or credit card numbers.

Going beyond these basic features to add the finely tuned content-inspection and policy-enforcement capabilities of some data-leak-prevention tools to existing security offerings would reduce the number of products operating at an organization's gateway, and offer universal management and policy enforcement to simplify administration.

Knowing what's going out of the corporate network, and being able to stop policy violations, is an important part of what makes anti-data leakage valuable, says one enterprise user.

"You can generate all the polices that you want, but unless you have some kind of monitoring and enforcement mechanism, you don't know if a policy is working or not," says Bob Gorrie, information security project manager at USEC, a supplier of enriched uranium fuel for commercial nuclear power plants based in Bethesda, Md., which uses Vontu products.

Road to integration

Acquirers including Symantec, McAfee, Trend Micro, Cisco, and others are beginning to reveal details of how they'll integrate these new capabilities into their products.

Upon announcing its acquisition of Vontu in November, Symantec executives offered some details on plans to integrate the start-up's line of data-loss prevention products into its own desktop, network and storage products. The two companies earlier this year struck a deal to embed Vontu's detection engine into Symantec's e-mail security gateway software; Symantec says adding Vontu's capabilities to other products including its endpoint security offering is likely.

Adding Vontu's ability to scan data resources across the network to seek out sensitive data would be beneficial additions to Symantec's NetBackUp and Enterprise Vault offerings as well, officials say, to facilitate chores such as responding to e-discovery requests.

Trend Micro's October acquisition of Provilla will result long term in integrating the start-up's anti-data leakage capabilities into the security vendor's desktop and gateway products, officials say, although in the near term Trend Micro will continue to sell Provilla's LeakProof product as a stand-alone offering. The acquirer also spoke of extending LeakProof to mobile platforms.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Cara Garretson

Network World
Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers


This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang


It really doesn’t get more “gaming laptop” than this.

Jack Jeffries


As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr


The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?