CASB
Cloud Access Security Broker: deployed between an enterprise and cloud services to monitor and control the use of cloud services and enforce security policies.
Timeline (last 90 days)
Detection of traditional shadow IT relies mainly on network traffic analysis, CASB (Cloud Access Security Broker), and identity logs, because when employees use these tools there are usually identifiable domain visits, login behavior, and file upload/download actions.
Consumer-grade AI chat tools encapsulate users' text prompts in HTTPS-encrypted traffic, highly similar in traffic characteristics to ordinary web searches or form submissions, causing detection methods based on traffic characteristics and file transfer behavior to fail on a large scale.
Even if an enterprise deploys a CASB, it often can only see that "a certain AI domain was accessed" but cannot parse whether the conversation content contains sensitive data.
CASB (Cloud Access Security Broker) is a mature category in cloud security, deployed between users and cloud services to discover shadow IT, enforce access controls, encrypt sensitive data, and meet compliance requirements.
Pluto Security's approach is similar to the logic by which CASB solves the shadow IT problem, but its target has expanded from SaaS to AI tools and employee-built applications.
The implementation of zero-trust architecture relies on the collaboration of components such as identity providers (IdP, e.g., Okta, Azure AD), endpoint detection and response (EDR) tools, and network access control implemented via SDP or CASB.
All Facts (6)
Detection of traditional shadow IT relies mainly on network traffic analysis, CASB (Cloud Access Security Broker), and identity logs, because when employees use these tools there are usually identifiable domain visits, login behavior, and file upload/download actions.
50%UnverifiedConsumer-grade AI chat tools encapsulate users' text prompts in HTTPS-encrypted traffic, highly similar in traffic characteristics to ordinary web searches or form submissions, causing detection methods based on traffic characteristics and file transfer behavior to fail on a large scale.
50%UnverifiedEven if an enterprise deploys a CASB, it often can only see that "a certain AI domain was accessed" but cannot parse whether the conversation content contains sensitive data.
50%UnverifiedCASB (Cloud Access Security Broker) is a mature category in cloud security, deployed between users and cloud services to discover shadow IT, enforce access controls, encrypt sensitive data, and meet compliance requirements.
50%UnverifiedPluto Security's approach is similar to the logic by which CASB solves the shadow IT problem, but its target has expanded from SaaS to AI tools and employee-built applications.
50%UnverifiedThe implementation of zero-trust architecture relies on the collaboration of components such as identity providers (IdP, e.g., Okta, Azure AD), endpoint detection and response (EDR) tools, and network access control implemented via SDP or CASB.
50%