DATA LOSS
PREVENTION
Safetica ONE Product Overview
Securing your data while
increasing operational
efficiency
Safetica ONE is the only mature data security solution designed for scalability and needs of SMB
and enterprises. Get your valuable data under control with great time to value. Go beyond data
loss prevention with holistic behavior analysisto detect insider threats even earlier and respond
even before they turn into incidents.Leverage insights into company workspace, digital assets,
and operations to optimize costs.
People and data are the fuel for modern The average cost of a data breach is
companies. When sensitive data is lost or $3.86 million.*
stolen, a company’s reputation, competitive
60% of small companies go out of business
advantage, and profitability all suffer.
within 6 months of a major data breach.**
*2020 Cost of Data Breach Report, Ponemon Institute; ** National Cyber Security Alliance, October 2012
Every organization can secure its data
Internal security has never been easier. We help you protect your data, guide your people and support business
compliance. Safetica ONE prevents data breaches and makes data protection regulations easy to comply with by
securing your business from human error or malicious behavior.
EXPERT DATA SECURITY SHORT TIME-TO-VALUE SEAMLESS INTEGRATION
We cover all areas of internal Security should never come at Only a seamlessly integrated
data risk and protect valuable the expense of productivity. security solution can work
data against human error and Safetica ONE doesn’t create extra efficiently. Together with our
malicious intent. hassle for employees or the IT technology partners, we protect
department. Its time-to-value is data on all devices, all major
unbeatable. operating systems, and in the
cloud.
Key Data Security scenarios
DATA FLOW DISCOVERY AND RISK DATA PROTECTION & EMPLOYEE
DETECTION GUIDANCE
Safetica audits and records any attempt to intentionally Anyone can make a mistake which could put your business
or unintentionally leak the data, no matter where the at risk. With Safetica ONE, you can analyze insider risks,
sensitive information is stored, or who has accessed it. detect threats, and mitigate them swiftly. Notifications
Safetica’s risk analysis helps you detect and investigate about how to treat sensitive data can help raise awareness
how your data could be leaked or stolen. around data security and educate employees.
REGULATORY COMPLIANCE WORKSPACE & BEHAVIOR ANALYSIS
Safetica ONE helps you detect and prevent regulatory Workspace and user behavior analysis provides an
violations and investigate incidents to comply with extra level of detail to detect internal risks. Also, by
regulations and data protection standards like GDPR, understanding how your employees work, print, and
HIPAA, SOX, PCI-DSS, GLBA, ISO/IEC 27001, or CCPA. use expensive hardware and software licenses, you can
optimize your costs and increase operational efficiency.
Product tiers
SAFETICA ONE
PROTECTS YOUR
• personal data
• strategic company documents
Safetica ONE Safetica ONE Safetica ONE
• customer databases Discovery Protection Enterprise
• payment-related data, such as
credit card numbers
• intellectual-property – Safetica UEBA
Modules
industrial designs, trade
secrets, and know-how
• contracts Safetica Mobile
Reference Architecture
The physical or virtual server runs All actions are recorded and security Sensitive data is protected
a database with endpoint activity policies are applied on desktops, throughout all channels.
and security records. The Safetica laptops and other remote or even
Management Console enables offline mobile devices (smartphones
admins to manage security policies MDM only) with a Safetica Client.
and display the collected information.
Data channels covered
Safetica keeps data protected across a multitude of channels and platforms,
ensuring your data is secure wherever it resides or flows.
File sharing and social media Email Internet
Send WeTransfer Twitter Facebook Webmail | POP3 / IMAP HTTP FTP FTPS P2P
Anywhere | SMTP HTTPS
Cloud Removable
storage
OneDrive | Dropbox USB | Memory cards
Google DriveBox External drives
SharePoint Optical discs
Microsoft 365 Media
Exchange Online CD, DVD, Printers
SharePoint Online Blu-ray
Instant messaging Connections Operations
Teams Skype Slack Bluetooth Firewire Copy and Paste Screen
Drag and Drop capture
Discovery Key Benefits
Safetica ONE Discovery audits and classifies all data flows in your organization. It identifies
sensitive information and security risks using content inspection with optical character
recognition (OCR). Get a quick overview of what is happening in your workspace in real time.
Better understand all internal activities, processes and data risks to enhance your data security
and internal efficiency.
Get insight into data security Audit and classify your sensitive data Get instant notifications and
incidents and regulatory compliance flows in any channel or activity to actionable management reports with
violations to be able to respond and find out where your data is at risk of easy-to-read risk level evaluation
mitigate their impacts loss or theft and incident overview
Discover and remove unwanted Easy-to-deploy solution with one- Objectively analyze user activities in
or unnecessary software, cloud click integration with Microsoft 365 your environment and determine if
services, or hardware/peripherals respects established processes and company equipment and network
provides first reports within days are used properly
Key highlights
Identify how company data is used and where it is
stored and sent, no matter where it resides or flows.
Windows and macOS support
One-click integration with Microsoft 365
File content inspection and classification
Easy to upgrade to the full-featured data
security platform
Runs on bare metal or virtualized on-prem, Safetica Management Console for Safetica ONE Discovery
hosted, VM hosted in cloud provides deep insights into all recorded file operations with
different views for easy interpretation.
Protection Key Benefits
Safetica ONE Protection identifies risks, educates your employees, and prevents people’s
mistakes and malicious acts to protect your data. Combination of data analytics, data
classification, and data loss prevention (DLP) with insider threat protection creates a secure
environment while maintaining efficient business operations.
Have full control over Get regular security Use Safetica Zones for Create Shadow Copy
sensitive data flows and reports and real-time simplified high-level data of leaking data to keep
internal risks based on incident notifications security forensic evidence for
behavior analysis & content further investigation
inspection
SET CLEAR POLICIES FOR ALL USERS AND EMPOWER EMPLOYEES TO WORK WITH
DATA CHANNELS SENSITIVE DATA
Set up security policies for specific groups or individuals. Display educational notifications to employees when
Select the desired workflow with configurable actions there’s a risk of policy violation to let them know or
from silent auditing, through user notifications to strict decide. Enforce specific processes to protect the most
blocking. valuable data.
DETECT POTENTIAL THREATS AND GET ALL DEVICES UNDER CONTROL,
ANALYZE INTERNAL RISKS ONLINE AND OFFLINE
Respond to threats even before a major incident Restrict the use of portable peripherals or unauthorized
happens thanks to early discovery of behavior media. Control corporate mobile devices and keep track
anomalies and data flow risks in your organization. of data that leaves Microsoft 365. Safetica remains fully
Safetica ONE uses advanced content classification and active regardless of network connection. All collected
OCR for sensitive data detection in image files and records are synchronized when connection is restored.
scanned PDF documents.
Key highlights
Based on content inspection, internal risk analysis,
and clear policies set up for all data channels, Safetica
ONE Protection can recognize when somebody
makes a mistake or takes chances with your sensitive
data. Depending on which mode Safetica ONE is
operating in, it can either block the risky activity,
notify the admin, or remind the employee about the
organization’s security guidelines.
Safetica Management Console enables detailed but easy
configuration of DLP policies, data categories, or reports.
Detailed Features List I
Compatible with Safetica ONE Safetica ONE Safetica ONE
Windows, macOS, Microsoft 365, Android, iOS Discovery Protection Enterprise
Security Audit
Data-flow security audit
Security audit of data-flow in all channels, including external devices,
web upload, email, instant messaging, print, and cloud drives.
Office 365 file and email audit
Audit of file operations and outgoing email communication in Office
365.
Regulatory compliance audit
Discover violations of most common regulations, such as PCI-DSS,
GDPR, or HIPAA in all regional variations.
Workspace security audit
Audit usage of company devices, applications, networks, and print.
Discover unused or misused resources to maintain workspace, ensure
retention, and reduce costs.
Content inspection
Classify sensitive files and emails by powerful content inspection with
predefined templates or custom rules and dictionaries.
Detection of suspicious activities
React fast thanks to real-time detection of suspicious activities and
immediate email alerts.
Endpoint Data Protection
Email and network protection
Data protection for email, web upload, instant messaging, and
network shares.
Devices and print protection
Manage data-flow to external devices and protect sensitive data
against forbidden printing on local, network, or virtual printers.
Remote work protection
Avoid data leaks on remote endpoints or remote desktop connections.
Support a wide range of remote access solutions.
Advanced data classification
Use advanced technologies to detect and label sensitive data based
on origin, workflow context, or file type. Take advantage of metadata
detection to use 3rd party classifications. Allow users to classify files
themselves.
Different remediation policies
React flexibly to detected incidents to empower and educate your
employees. Incidents can be logged, blocked, or justified/blocked with
override.
Incident Shadow Copy
Keep forensic evidence for incidents by creating shadow copies of
leaking data. Shadow copies are fully encrypted and can be kept on
local computers with a retention policy.
Detailed Features List II
Compatible with Safetica ONE Safetica ONE Safetica ONE
Windows, macOS, Microsoft 365, Android, iOS Discovery Protection Enterprise
Endpoint Data Protection
Workspace control
Define your secured workspace and reduce perimeter by application
and website control. Avoid undesirable behavior in your company and
reduce the cost of security management.
Safetica Zones
Easy management of safe data perimeter with unique Safetica Zones,
which significantly reduce the number of data protection policies.
BitLocker encryption management
Centralized management of local drives and external devices with
BitLocker encryption.
Cloud Data Protection
Endpoint cloud sync protection
Data protection for cloud drives on endpoints, e.g., OneDrive, Google
Drive, Dropbox, Box, etc.
Endpoint Microsoft 365 protection
Data protection for Microsoft 365 and SharePoint from endpoints.
Prevent sharing or uploading data you want to keep away from the
cloud.
Azure Information Protection
Detection of data classifications from Microsoft Azure Information
Protection, even in encrypted form.
Exchange Online Protection
Unify email policies across endpoints and cloud email. Manage and
filter outgoing data from endpoints and Exchange Online.
Enterprise Features
Notifications branding
End-user notification custom branding (logo).
Workflow control
Application policies and expert policy settings for aligning endpoint
workflow with company processes.
Multi-domain support
Multiple domain enterprise support for Active Directory.
Security Automation
SIEM integration
Automated reporting of incidents to SIEM solutions (Splunk, QRadar,
LogRhythm, ArcSight, etc.).
FortiGate integration
Automated security integration with FortiGate network appliances to
create a robust endpoint-to-network security solution.
Reporting API
API for reporting Safetica data to analytics and visualization services.
Tech Specs and Requirements
SERVER MACOS CLIENT
• 2.4 GHz quad-core processor • 2.4 GHz quad-core processor, 2 GB RAM and more
• 8 GB RAM and more • 10 GB of available disk space
• 100 GB of available disk space • macOS 10.10 and higher (for full DLP feature set
recommend 10.15 and higher)
• A shared or dedicated server, support of virtual
machines and cloud hosting
• Requires connection to server with MS SQL 2012 and MOBILE CLIENT
higher or Azure SQL • Android: min. Android 6+ and Google Play Services
• MS Windows Server 2012 and higher • iOS: min. iOS 10+
DATABASE
SUPPORTED CLOUD PROVIDERS
• MS SQL Server 2012 and higher, or MS SQL Express
• Microsoft Azure, Microsoft 365
2016 and higher, or Azure SQL.
• MS SQL Express is part of a universal installer and
recommended for up to 200 protected endpoints. SELECTED CERTIFICATIONS
• 200 GB of available disk space (optimally 500 GB or • ISO 9001 & ISO/IEC 27001
more, depending on the range of collected data).
• Member of Cybersecurity Tech Accord
• A shared or dedicated server, support of virtual
• Microsoft Gold Partner
machines and cloud hosting. It can be hosted with
Safetica server together. • Member of ESET Technology Alliance
• Member of the Fortinet Technology Alliance
WINDOWS CLIENT
• 2.4 GHz dual-core processor, 2 GB RAM and more
• 10 GB of available disk space
• MS Windows 7, 8.1, 10 (32-bit [x86] or 64-bit [x64])
• MSI installation package
• .NET 4.7.2 and higher
Safetica is a Czech software company that ESET Technology Alliance aims to better protect
provides Data Loss Prevention and Insider businesses with a range of complementary
Threat Protection solutions to organizations IT security solutions. We provide customers
of all shapes and sizes. Here at Safetica, we with a better option when staying protected
believe everyone deserves to know that their in the ever-changing security environment by
data is safe. combining our proven and trusted technology
with other best-of-breed products.