IBM® Guardium® Discover and Classify software discovers and classifies sensitive data across on-premises and cloud environments. It is part of the IBM Guardium family of data security products.
Robust data protection begins by knowing where your sensitive data resides. IBM Guardium Discover and Classify discovers known and unknown sensitive data on premises and in the cloud—whether structured or unstructured, in motion or at rest.
IBM Guardium Discover and Classify network-based analytics, compliance-ready capabilities and ease of deployment make it a powerful complement to IBM Guardium for improving your data security posture management.
accuracy in unstructured (flat files) data.
accuracy in structured (database) data.
Enhance your existing security tools with precise sensitive data intelligence to prioritize effective actions.
Find and map previously unknown data—at rest or in motion—in the cloud or on premises.
Use scale-up architecture that supports loads of any size irrespective of data source type or location.
Apply automated controls for sensitive data according to business context and risk factors.
Achieve higher accuracy and minimize false positives and negatives in data classification.
Reduce the time and effort needed to discover and classify data in a complex environment.
Discover repositories and metadata automatically through continuous scanning.
Identify and classify sensitive data—continuously and automatically.
Use one product to discover all types of data, irrespective of storage types or the location.
Use AI and machine learning (ML) to train the system to identify which files contain sensitive data.
IBM Guardium Discover and Classify helps you achieve accurate and efficient DSAR management, offering a range of features to automate and streamline the entire DSAR process while ensuring compliance with global privacy regulations.
IBM Guardium Discover and Classify boosts the security and compliance of Virtual Storage Access Method (VSAM) datasets by unlocking the power of contextual AI for mainframe VSAM data discovery and classification.
Make the most out of your data protection tools by applying the right protection methods to the right data. IBM Guardium Discover and Classify takes the mystery and error out of manual data discovery and categorization through continuous network scanning, providing quantitative data context to best inform your data protection controls.
IBM Guardium Discover and Classify enriches your SIEM and SOAR tools by providing deep business context into data that has been compromised. This data-rich information, including the location and sensitive level of specific data, is critical to help you know what data is exposed or misplaced, plan breach policies and prioritize response activities down to the data asset level.
IBM Guardium Discover and Classify helps to minimize your attack surface by categorizing and eliminating data that has been duplicated, is unused or is no longer critical to protect. It takes inventory of sensitive data throughout the ecosystem and uses tagging capabilities to classify risk assessments and generate context around data assets. By only keeping necessary sensitive data and getting rid of old or useless records and files, you can better address compliance and reporting requirements.
IBM Guardium Discover and Classify works to reduce the manual effort often required by Data Loss Prevention (DLP) tools by extending DLP capabilities. It provides continuous, automatic discovery, analysis and lineage for more accurate policy enforcement and business context around data.
Managed virtual servers (MVS) are used for structured data discovery and Terabyte (TB) is used for unstructured data discovery. Pricing varies based on number of data sources and configuration of your environment.
We count the number of individual database servers to determine the number of MVS, irrespective of the amount of database schema or data sources on this server.
The amount of uncompressed data on a repository, on a cloud or on premises.