Cloud access security brokers (CASBs) provide a central location for policy and governance across multiple cloud services — for users and devices — and granular visibility into and control over user activities and sensitive data, according to Gartner.
The Gartner Magic Quadrant for CASBs in 2018 contained 13 companies. But here are the Top 10 (note: sorted alphabetically) along with MSSP Alert's look at associated partner program strategies for 2018 -- and the implications for 2019.
1. Bitglass: The company's cloud security solutions deliver zero-day, agentless, data and threat protection for any app, any device, anywhere, Bitglass asserts. Bitglass is backed by Tier 1 investors and was founded in 2013 by a team of industry veterans with a proven track record of innovation and execution. MSSP Alert Says: The company's partner program includes big-name integrators, and multiple SIEM integrations that may attract interest from MSSPs.
2. Ciphercloud: The company's focus involves end-to-end protection for data resident in the cloud. Large global enterprises and government institutions in over 25 countries leverage CipherCloud, the company asserts. MSSP Alert Says: Alas, it's impossible to find partner program information on Ciphercloud's website. The company launched an encryption partner program back in 2012, but links to that page are now dead. Alas, that doesn't bode well for MSSPs seeking information from the company.
3. Cisco Systems Cloudlock: The company's Cloudlock is an API-based Cloud Access Security Broker (CASB). Cloudlock secures customer identities, data, and apps, Cisco claims. MSSP Alert says: Cloudlock apparently is part of Cisco's larger Umbrella security push. And Umbrella has been a very channel- and MSP-friendly platform.
4. Forcepoint: The company's Forcepoint CASB provides cloud app security with visibility and control over sanctioned and unsanctioned cloud apps to enable their safe and productive use, Forcepoint asserts. MSSP Alert Says: Forcepoint has an MSSP Partner Program -- one of the few CASB company that specifically promotes MSSP relationships on its website. The company provides a technology platform, professional services and training to help MSSPs succeed with the platform.
5. McAfee MVISION Cloud: Formerly Skyhigh Networks, MVISION Cloud provides three major CASB capabilities, McAfee claims: (1) Customers gain visibility into data, context, and user behavior across all cloud services, users, and devices; (2) customers can apply persistent protection to sensitive information wherever it goes inside or outside the cloud; and (3) customers can take real-time actions deep within cloud services to correct policy violations and stop security threats. MSSP Alert says: McAfee acquired Skyhigh in November 2017. The McAfee CASB solution is deployed in over 600 enterprises, including 40 percent of Fortune 500, McAfee's website indicates as of November 2018. McAfee has a partner program, but MVISION partner opportunities aren't promoted all that well on the company's website.
6. Microsoft Cloud App Security: The CASB solution gives customers visibility into cloud apps and services; analytics to identify and combat cyberthreats; and enables customers to control how their data travels, Microsoft asserts. MSSP Alert Says: The company announced multiple CASB updates during the Ignite conference in September 2018. Cloud App Security is available from partners as part of the Enterprise Mobility + Security E5 or as a standalone service. Cloud App Security is available at $3.50 per user per month estimated retail price -- though pricing varies by program, region and agreement type.
7. Netskope: The company's patented Cloud XD technology can quickly target and control activities across thousands of cloud services and millions of websites, Netskope claims. MSSP Alert says: Netskope raised $168.7 million in Series F funding in November 2018. The company's total funding to date is $400.1 million. Netskope hasn't said much about its partner program in the past year -- but details are easy to find here.
8. Oracle CASB: The Oracle CASB Cloud Service features threat detection, predictive analytics, automated incident response and security configuration management, the company claims. MSSP Alert says: Oracle's channel program (Oracle PartnerNetwork Specialized -- aka OPN Specialized) certainly has thousands of members. But Oracle seems to be making a direct sales pitch with CASB.
9. Proofpoint CASB: The company's CASB helps customer to secure applications such as Microsoft Office 365, Google G Suite and Box, just to name a few. Details about a free 30-day trial are here. MSSP Alert says: Proofpoint works with a range of channel partners. But the company's repeated failure to answer our basic editorial questions in mid-2018 gives us pause...
10. Symantec CloudSOC: The platform allows organizations to gain visibility into shadow IT, apply governance over cloud data, protect against threats, and more easily ensure compliance, Symantec asserts. MSSP Alert Says: Symantec has an extensive partner program. Some resellers never forgave the company for channel conflict issues that popped up around 2008. Current CEO Greg Clark never mentioned the "channel" during a November 2018 earnings call, though he did briefly mention the company's "renewed energy on partnerships" during that call.