Solution Brief

Vormetric Data Security for Cloud Provider

Vormetric Data Security Data Security Simplified

Platform for Cloud Providers Transparent

No changes required to business
processes, applications or user
Enabling Cloud Service Providers to Protect What Matters data access
Security and Compliance – as a cloud service provider, you already know that Strong
these are two of the top concerns that customers have when considering a cloud Firewall customer data, protection
service. To reduce risk, and meet exacting compliance requirements, customers from privileged user access as well as
need answers to fundamental questions about the security, access and control of access restrictions for other users
their data: and applications.
• Will my organization’s data be safe?
• Who has access to my data? Easy
• Am I out of compliance with regulatory requirements for data access? – PCI Easy to understand, implement
DSS, Sarbanes-Oxley, HIPAA/HITECH, EU data protection mandates, and PIPA and manage.
to name a few.
Efficient
Vormetric provides a critical component of the solution to this problem – With minimal performance impact
protection for your customer’s data – regardless of the environment and SLAs, user experience and application
deployment model of your cloud. Vormetric Data Security enables you to safely performance remain within commitments.
and securely protect customer data in your cloud environment with appropriate
data security policies, encryption, key management and fine-grained data
access controls.
Vormetric Data Security solutions not only provide the encryption and key
management that secures customer data, but also safeguards that data with
controls that limit access. Only allowed processes and users are able to access
protected data – even cloud administrators will not be able to view customer
data in clear text unless specifically authorized to do so.
“Vormetric has put us
Build value-added, highly secure offerings
in the fantastic position
A proven provider of data security solutions, Vormetric enables your cloud
offering to safely and securely protect your customer’s data with appropriate
of being able to support
security policies and controls. Use these capabilities to distinguish your offerings any encryption deploy-
from the competition, meet extended customer requirements, and offer new ment model and any data,
higher value added services. And if you have secure data center certifications
(such as SAS 70 /SSAE 16), combine Vormetric solutions into your platform for a application and platform
more complete solution. combinations that our
Cloud-ready data security policies and management
clients want to use.”
Vormetric Data Security protects data inside of your cloud operating environment Pete Nicoletti, CCSK, CISA, CISSP,
while establishing security policies and maintaining control through a centralized director of security compliance and
management interface. The solution enables you to control access to the data solutions, Virtustream Inc.
wherever it resides in your cloud environment - even as applications and VMs are
stopped, started or moved.

Protection from data breaches

Encryption of data is a proven protection against the costs of a
Data Breach. If encrypted data is stolen, but the keys that allow
access to it are not, a data breach incident is avoided.
Support for regulatory compliance
Encryption of sensitive data and specific data access controls are
critical components of security standards such as PCI DSS,
HIPAA HITECH, SOX, PIPA and EU Data Protection mandates.
Enhanced security intelligence
Vormetric captures access information and access attempts to
protected data that can be used by Security Intelligence and
Event Management (SIEM) solutions to detect advanced
threats - including HP ArcSight, Splunk, LogRythm and others.
 Solution Brief
Vormetric Data Security for Cloud Provider

No re-architecting or recoding required Capabilities – Vormetric

The solution transparently secures data with encryption and access controls without Data Security Platform
requiring business process, application or database redesign or recoding, and is
transparent to users, applications, and storage because it is inserted above the file File Encryption
system and logical storage volume layers. Extremely low overhead application
transparent encryption across OS’s,
The result is rapid deployment and implementation – Vormetric software agents file systems, volumes and even big
become part of standard images or builds and can be rolled out easily for existing data implementations. Includes access
VMs. Access controls are configured at the Data Security Management physical or control for protected data by process
virtual appliance – either using the web-based user interface or via API or script. and user
Rollouts take days to weeks, not weeks to months.
Database Encryption
Any platform – Any data Heterogeneous, transparent, high
performance database encryption
Vormetric offers a single solution to support all of your customer data security –across all versions of Oracle, SQL
requirements with a single, integrated toolset and management model across OS Server, DB2, Informix, Sybase, and
environments, databases, Infrastructure as a Service (IaaS) offerings, Big Data MySQL
implementations and virtual environments.
Key Management
Products – Vormetric Data Security Platform Securely stores and manages keys
used for Vormetric file and database
• Vormetric Encryption – Secures data for all major platforms including Linux, encryption as well as with Transparent
UNIX, and Windows for physical, virtual, and cloud environments. Vormetric Data Encryption (TDE) for both Oracle
Encryption provides encryption, integrated key management, privileged user and Microsoft SQL Server databases
control through access policies, and security intelligence.
Certificate Management
• Vormetric Key Management – Stores and manages encryption keys for Secure certificate storage, alerts and
Oracle Transparent Data Encryption and Microsoft SQL Server Transparent Data reports that helps organizations over-
Encryption (TDE), as well as providing application-level encryption services. come the challenges of expiring, weak
and unmanaged certificates
• Vormetric Vault – Enables management of certificates, vaulting of encryption
keys, and other security material. It provides a secure repository, reporting, and Data Security Management
alerting on objects requiring renewal. Centralized, scalable, highly available
common management for all Vormetric
• Vormetric Toolkit – Accelerates and automates deployments of Vormetric Data Security Platform capabilities
Data Security in cloud environments requiring data security in elastic and multi- • Simple web-based management UI
tenant environment.
• API and script accessible
• Vormetric OnDemand – A SaaS reference implementation for cloud service • Available as FIPS 140-2 certified
providers and enterprises looking to easily manage their Vormetric investment in management hardware appliance or
as a virtual appliance
multi-tenant and larger environments.
• Separation of duties and roles –
supports tenancy models
About Vormetric • Fine grained process and user access
controls to protected data
Vormetric (@Vormetric) is the industry leader in data security solutions that span
physical, virtual and cloud environments. Data is the new currency and Vormetric • Audit reporting for data access, data
protection infrastructure use
helps enterprise customers and government agencies protect what matters — their
sensitive data — from both internal and external threats. In a world of Advanced • Secure certificate and encryption key
Persistent Threats (APTs), Vormetric’s market-leading privileged user access controls storage, alerts and reports
and security intelligence are invaluable. The company’s scalable solution suite • Security intelligence data for use
protects any file, any database and any application — anywhere it resides — while with SIEM solutions
maintaining application performance and avoiding key management complexity.
Many of the world’s largest and most security-conscious organizations and govern-
ment agencies, including 17 of the Fortune 25, have standardized on Vormetric to
protect their sensitive data and provide them with advanced data security and data
security intelligence.
Vormetric, Inc.
2545 N. 1st Street, San Jose, CA 95131
United States: 888.267.3732
United Kingdom: +44.118.949.7711
Copyright © 2013 Vormetric, Inc. All Rights reserved. Vormetric is a registered trademark of Vormetric, Inc. South Korea: +82.2.2190.3830
All other trademarks are the property of their respective owners. No part of this publican may be reproduced, info@vormetric.com
stored in a retrieval system or transmitted, in any form or bay any means, photocopying, recording or otherwise,
without the prior written consent of Vormetric. www.vormetric.com