What is our primary use case?
My customers are using Protegrity’s Data Protection Platform.
We are using the database protectors for one of our SQL servers and another one for other applications where we are making API calls.
We are not using Protegrity’s Data Protection Platform's encryption feature; we are using only tokenization.
How has it helped my organization?
We are using tokenization in Protegrity’s Data Protection Platform for minimal applications only, replacing sensitive data with randomly generated tokens, which is preventing us from direct exposure of the original sensitive information. We are using it for account numbers, routing numbers, and SSNs.
Users and systems such as the application team are using the tokenized value instead of the sensitive value. This has been very helpful for us, reducing the risk of exposure when sending the value to the bank, so the transit data is also secure.
What is most valuable?
I find the features that allow for tokenization in Protegrity’s Data Protection Platform very valuable, as they make the tokenization process happen very easily. I create the data elements, and it is very user-friendly.
The web interface allows me to create a data element and add that data element to the rule set, and the URL will be created so that the application team can make the API call. It is a hassle-free transaction between the Protegrity appliance and the application, which I love. For applications that cannot use API calls, we are using the protectors, which are also very easy to use and user-friendly.
The ability to implement fine-grained control in Protegrity’s Data Protection Platform is good, and it helps with our data protection processes.
Auditing data access and usage in Protegrity’s Data Protection Platform is very important for meeting compliance requirements. It helps us track who can access sensitive data, when it is accessed, and how it is used.
We maintain an audit server, such as Splunk or other servers, where all the logs have been transferred. Unauthorized access attempts and all logs are captured, which improves accountability and helps us identify security risks.
What needs improvement?
We evaluate the analytics in Protegrity’s Data Protection Platform for identifying data security trends and vulnerabilities, and currently, we are using version 9.1. In this version, we do face a few vulnerabilities, but the bugs cannot be fixed. They asked us to upgrade, but since our applications are on old legacy servers, a few vulnerabilities remain, and we are managing them that way.
Improving Protegrity’s Data Protection Platform can involve several features. There are fields such as keys, signing keys, and member keys that I do not know why they have been used, but they automatically get rotated from the back end. If someone mistakenly does something, it might be hard for them to understand what went wrong. I found four different keys, so it could help to have a more straightforward mechanism. I also feel that they should provide update capabilities for older versions, as even we are using an old version and updates are not done automatically, which poses a challenge.
Regarding Protegrity’s Data Protection Platform's room for improvement, I mentioned automatic key rotation and patch updates. They can improve monitoring for antivirus and real-time security alerts. Automated audit reports are possible, and increasing the visibility of the database dashboard we have would be great if it were more understandable.
For how long have I used the solution?
I have been working with Protegrity’s Data Protection Platform for nearly five years, and I do have experience in handling the Protegrity tool.
How are customer service and support?
I would rate the technical support by Protegrity a ten because they are very proactive. We have a monthly call with them, and even if I send an email without creating a support case, they respond to me. They will also create a support ticket, and if I raise a support ticket, they act quickly based on the priority.
Which solution did I use previously and why did I switch?
Protegrity’s Data Protection Platform is good, and I have not used any other devices or appliances, but so far, in my experience, it is a good tool and user-friendly.
How was the initial setup?
The initial setup of Protegrity’s Data Protection Platform is very easy; they provided us with a guidebook and a runbook that explained each step clearly, making installation very easy.
What's my experience with pricing, setup cost, and licensing?
I am not aware of the pricing of Protegrity’s Data Protection Platform, but I know we asked for an upgrade, and it was quite costly.
What other advice do I have?
My clients purchased Protegrity’s Data Protection Platform directly from the vendor.
I would rate Protegrity’s Data Protection Platform an 8.5 overall.