Data in transit works quite well and operates in near real-time. However, data at rest scanning operates under separate licensing, and it would be beneficial to examine applications where the location of sensitive data is unknown. Netskope Data Loss Prevention (DLP) could improve data-at-rest scanning capabilities. Regarding DLP-specific improvements, data-at-rest scanning could be enhanced in terms of the applications supported, as coverage is currently limited to a restricted set of enterprise applications. Expanding application coverage would be beneficial. Additionally, data-at-rest scans should be made easier and faster to execute. Most solutions lack Data Security Posture Management (DSPM) functionality, and this capability is not yet mature. A significant limitation is that Netskope Data Loss Prevention (DLP) does not support out-of-the-box data classification. Third-party integrations must be relied upon instead, whereas having built-in data classification support would be advantageous.
