PAGES
← all tools
◆ Data Security & DLP

Cyera

Access Trail for Outlook and NetApp commercial

Cyera is a cloud data security platform that discovers, classifies, and protects sensitive data across cloud environments to reduce risk and ensure compliance.

Summary

Cyera is a commercial data-security platform, run as a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. service, that discovers and classifies sensitive data across cloud, on-prem, and email environments and gives security and privacy teams a live inventory of where that data sits, who can reach it, and how it moves. It scores issues by business context rather than raw counts, and lets teams build automated remediation workflows and delegate data ownership as conditions are met, which puts it in front of data security and privacy owners rather than general SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. staff. Beyond detection it covers privacy operations directly, generating RoPA and DSR fulfillment from live discovery instead of manual surveys, and extends into browser-based Shadow AI monitoring, positioning it as a broader data-security platform rather than a single-purpose scanner. Launched in 2021 and still shipping regularly, with its most recent release 37 days ago.

Cyera is a cloud data security platform that discovers, classifies, and protects sensitive data across cloud environments to reduce risk and ensure compliance.

How Cyera helps

Where does my sensitive data actually live, and who can currently reach it?

continuously discovers and classifies data across cloud, on-prem, and email sources and maps access paths back to identities, showing overly permissive or inherited access at the source rather than listing files in isolation

Which of my open data-risk issues actually matters right now?

scores each finding using business context — data sensitivity, identity access, and exposure conditions — and attaches an AI-generated explanation of why it was rated that way, instead of ranking by raw alert count

What happened to this sensitive file, and who or what touched it?

reconstructs the file's full lifecycle across systems, including moves and transformations made by humans or AI agents, into a single lineage view that turns separate events into one investigation

Is anyone using AI tools to send out data they shouldn't?

monitors browser-based AI prompt submissions in real time, tells corporate from personal accounts, and blocks risky submissions inline before the data leaves the browser

Which of these repeated exposures are a pattern rather than one-off noise?

aggregates recurring exposure events by destination, role, and cause into a trends view so systemic issues surface instead of getting lost in individual alert triage

Can I answer a Data Subject Request without a manual survey?

fulfills access, deletion, and portability requests directly against the continuously updated data inventory, and pre-fills privacy assessments and RoPA from the same live discovery data

all 54 features, with the evidence for each →

Languages

Not documented

Features

54 capabilities across 4 capability groups

Built from Cyera's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Cyera covers 4 of the 8 data discovery and protection capabilities we track.

What Cyera offers you

  • Natural-language query3
  • Administrative audit log1
  • Built-in AI assistant1
  • Outbound webhooks (the product notifies you)1
  • Ticketing integration1
  • Web management console1
Sensitive data discovery 8 features Data discovery and protection since 2025
On-premises database discovery and coverage shipped Extends data discovery and classification capabilities to on-premises Oracle, MongoDB, and YugabyteDB Aeon databases. 7 releases · first seen Feb 2025

Shared capability: Sensitive data discovery

release 7 total

  • New support for Microsoft SQL Server (MSSQL) on-prem database Extending the Ecosystem · Aug 2026 · source · release history
  • New support for IBM Db2 for i on-prem database Extending the Ecosystem · Aug 2026 · source · release history
  • New support for Oracle RAC on-prem database Extending the Ecosystem · Aug 2026 · source · release history
  • New support for MySQL and MariaDB on-prem databases Extending the Ecosystem · Aug 2026 · source · release history
  • Enables discovery and scanning for all YugabyteDB Aeon databases Yugabyte Support · Mar 2025 · source · release history
  • Adds MongoDB On-Prem platform support to extend security coverage beyond cloud environments. Support for MongoDB On-Prem · Feb 2025 · source · release history
AI threat hunting and investigation via DataPort shipped Lets analysts query sensitive data locations, access paths, and exposure risks in natural language, and use AI to accelerate investigations and generate reports from live Cyera intelligence. 6 releases · first seen Mar 2026

Shared capability: Sensitive data discovery

Also counts toward: Natural-language query

release

  • Adds suggested next steps inside Cy investigations, surfacing recommended follow-on actions after each query. Cyera screenshot New in Cy · seen Aug 2026 · source · release history
  • Extends Claude Enterprise integration for AI-driven data security workflows. Latest Integrations - June · seen Jul 2026 · source · release history
  • Supports natural-language querying of sensitive data locations, access paths, exposure risks, and classification insights via DataPort. Cyera MCP · seen Jul 2026 · source · release history
  • Enables AI-driven threat hunting, investigation acceleration, and report generation grounded in live Cyera security intelligence. Cyera MCP · seen Jul 2026 · source · release history
  • Adds event enrichment with classification and identity context to investigations Access Trail for Google Workspace · Jun 2026 · source · release history
  • Enables accelerating investigations, automating threat hunting, and generating reports grounded in real security intelligence through the new integration surface. Cyera MCP · Mar 2026 · source · release history
Incident materiality assessment shipped Uses targeted data scanning and enriched classification to identify exactly what sensitive data was exposed during security incidents for regulatory disclosure decisions. 3 releases · 1 other source · first seen Aug 2026

Shared capability: Sensitive data discovery

release

  • Produces a defensible incident impact view suitable for legal, board, regulator, and disclosure decisions — replacing broad blast-radius assumptions. Incident Materiality Assessment · seen Aug 2026 · source · release history
  • New Incident Materiality Assessment service uses targeted data scanning and enriched classification to identify exactly what sensitive data was exposed, who accessed it, and when during a security incident. Incident Materiality Assessment · seen Aug 2026 · source · release history
  • Adds Incident Materiality Assessment capability using targeted data scanning and enriched classification to identify exposed sensitive data during security incidents. Incident Materiality Assessment · Aug 2026 · source · release history

example

  • Use the new assessment feature to determine the true blast radius of a potential breach for regulatory disclosure decisions. Access Incident Materiality Assessment in the Cyera console to view targeted data scanning results. Incident Materiality Assessment · Aug 2026 · source
ServiceNow ITSM data coverage shipped Scans ServiceNow tickets, attachments, and free-text fields to bring ITSM data under the same discovery and classification governance. 4 releases · first seen Feb 2026

Shared capability: Sensitive data discovery

Also counts toward: Ticketing integration

release

  • Adds ServiceNow ITSM as a supported data source, enabling discovery and classification across tickets, incident records, attachments, and free-text fields. ServiceNow ITSM Coverage · seen Jul 2026 · source · release history
  • Brings ServiceNow under Cyera's DSPM governance, treating it as a managed data store rather than an unmonitored exception. ServiceNow ITSM Coverage · seen Jul 2026 · source · release history
  • Detects exposed PII, plain-text credentials, and regulated data within day-to-day ITSM operational workflows that traditional tools overlook. ServiceNow ITSM Coverage · seen Jul 2026 · source · release history
  • Adds ServiceNow ITSM coverage including scanning of tickets, incident records, attachments, and free text fields for sensitive data. ServiceNow ITSM Coverage · Feb 2026 · source · release history
SaaS security enrichment (Grip Security) shipped Surfaces data exposure signals within SaaS security workflows through integration with Grip Security. 2 releases · first seen May 2026

Shared capability: Sensitive data discovery

release

  • New integration with Grip Security to surface data exposure signals within SaaS security workflows. Recent Integrations · seen Jul 2026 · source · release history
  • Adds Grip Security integration for vulnerability prioritization workflows. Recent Integrations · May 2026 · source · release history
Custom AI agent building via MCP integration shipped Allows MCP-compatible AI tools to connect to Cyera's DataPort so teams can build custom data security agents tailored to their workflows. 2 releases · first seen Mar 2026

Shared capability: Sensitive data discovery

Also counts toward: Natural-language query

release

  • New Cyera MCP integration enables building custom data security agents by connecting MCP-compatible AI tools to Cyera's DataPort. Cyera MCP · seen Jul 2026 · source · release history
  • Adds the ability to connect any MCP-compatible AI tool to Cyera's DataPort for querying sensitive data locations, access paths, exposure risks, and classification insights using natural language. Cyera MCP · Mar 2026 · source · release history
Non-production data monitoring shipped Automatically recognizes non-production environments and alerts when sensitive production data is found there. 1 release · first seen May 2025

Shared capability: Sensitive data discovery

release

  • Automatically recognizes non-production environments and alerts when sensitive production data is found there. Protect Against Sensitive Production Data Sprawl · May 2025 · source · release history
Cloud security workflow enrichment (Upwind) shipped Adds data exposure context to cloud security workflows through integration with Upwind. 1 release

Shared capability: Sensitive data discovery

release

  • New integration with Upwind to enrich cloud security workflows with data exposure context. Recent Integrations · seen Jul 2026 · source · release history
Data loss prevention 7 features Data discovery and protection since 2025
Browser-based AI monitoring and DLP (Browser Shield) shipped Monitors browser-based AI tool usage enterprise-wide, inspects prompts in real time, and blocks risky data submissions before they leave the organisation. 13 releases · 2 other sources · first seen Jun 2026

Shared capability: Data loss prevention

release 13 total

  • Integrates Cyera Agent Guardian with Anthropic's new Claude inference hooks to intercept every prompt sent to Claude Chat, Claude Cowork, Claude Code, and Claude Design — allowing or denying before the model runs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Sep 2026 · source · release history
  • Supports shadow mode (verdicts logged without blocking), percentage-based rollout (inspecting a slice of requests during policy tuning), and role-based exclusions within the inference hook rollout controls. announced · Sep 2026 · source · release history
  • New Policy Creation editor for Browser Shield lets security teams configure and deploy data-leak policies for browser-based AI tools in a single workflow. Browser Shield Policy Creation · seen Jul 2026 · source · release history
  • Policies distinguish managed AI tools from shadow AI destinations, enabling enforcement aligned to how employees actually use AI. Browser Shield Policy Creation · seen Jul 2026 · source · release history
  • New Policy Catalog provides pre-built templates so teams can start from a baseline rather than a blank editor for each new AI surface. Browser Shield Policy Creation · seen Jul 2026 · source · release history
  • Monitors AI prompts in real time before submission, enabling interception of risky inputs before data leaves the browser. Browser Shield · seen Jul 2026 · source · release history

example

  • When a new shadow AI destination is flagged in alerts, use the Browser Shield policy editor to select a provider, apply a template, configure rules, and deploy — without building from scratch. In the Cyera console, go to Browser Shield > Policies, select "Create Policy", choose a provider, pick a template from the Policy Catalog, configure your data classification rules, and click Deploy. Browser Shield Policy Creation · seen Jul 2026 · source
  • Enable Browser Shield visibility and inline blocking through the Cyera console to surface and control Shadow AI usage across your organization. In the Cyera console, navigate to Browser Shield, enable monitoring for browser-based AI tools, configure policies to distinguish corporate vs. Browser Shield · seen Jul 2026 · source
AI-driven DLP automation shipped Leverages AI-native classification to automatically create and fine-tune DLP policies, consolidating tooling and filtering alerts via Omni DLP. 7 releases · first seen Mar 2025

Shared capability: Data loss prevention

release 7 total

  • Returns allow/deny verdicts within Anthropic's five-second default window, grounded in Cyera's pre-classified data inventory including sensitivity, lineage, and ownership. announced · Sep 2026 · source · release history
  • Blocked prompts surface in the Agent Guardian alerts view alongside existing PII data leakage policy violations, with a reason shown to the end user. announced · Sep 2026 · source · release history
  • Integrates Cyera Agent Guardian with Anthropic's new Claude inference hooks to intercept every prompt sent to Claude Chat, Claude Cowork, Claude Code, and Claude Design — allowing or denying before the model runs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Sep 2026 · source · release history
  • Monitors risky tool calls at runtime and blocks unsafe actions before sensitive data is exposed. Cyera screenshot Agent Guardian · seen Aug 2026 · source · release history
  • Introduces Omni DLP, a unified layer for the DLP stack that leverages AI-native data classification to consolidate tooling and filter alerts Cyera Launches Omni DLP · Apr 2025 · source · release history
  • Enables fine-tuned enforcement of DLP policies using DSPM data for smarter protection Bringing DSPM Insights into Cyera DLP · Mar 2025 · source · release history
DLP trends and pattern analysis shipped Aggregates repeated exposure events into patterns so analysts see recurring risks by destination, role, or behavior rather than an unmanageable stream of individual alerts. 7 releases · first seen Mar 2025

Shared capability: Data loss prevention

release 7 total

  • Adds persistent investigation context across DLP alerts, retaining history for users, destinations, organizations, and departments to eliminate repeated triage of recurring patterns. Omni DLP Memories · seen Jul 2026 · source · release history
  • Enables prioritization of recurring risks — such as data repeatedly sent to personal destinations or sharing tied to specific roles — over one-off alert triage. DLP Trends · seen Jul 2026 · source · release history
  • New DLP Trends view aggregates repeated exposure events into patterns, showing what keeps happening, where, and who is involved. DLP Trends · seen Jul 2026 · source · release history
  • Introduces the Memories view to retain investigation context (users, destinations, organizations, departments) for recurring DLP patterns Omni DLP Memories · Jun 2026 · source · release history
  • Adds DLP Trends feature that surfaces repeat patterns of exposure rather than individual alerts DLP Trends · May 2026 · source · release history
  • Adds AI-powered DLP Insights that systematically analyzes DLP alerts to surface critical alerts and broader trends with actionable recommendations AI-Powered DLP Insights · Mar 2025 · source · release history
Claude agent visibility and risk governance shipped Provides real-time visibility into Claude agent usage, dependencies, and data connections, while enforcing classification-anchored guardrails to intercept out-of-policy actions. 3 releases · first seen Oct 2026

Shared capability: Data loss prevention

release

  • Agent Guardian provides continuous, real-time visibility into every Claude agent in use — including sanctioned and shadow agents — covering tools, dependencies, and data connections. announced · Oct 2026 · source · release history
  • Supports guardrails anchored in data classification, governing autonomous Claude agents within approved business boundaries. announced · Oct 2026 · source · release history
  • Enables interception of out-of-policy commands, unapproved database changes, and unauthorized data transfers before they execute inside Claude environments. announced · Oct 2026 · source · release history
Graphical DLP policy visualization shipped Provides a visual interface in Omni DLP to view and understand complex DLP policy rules and conditions. 1 release · first seen Nov 2025

Shared capability: Data loss prevention

release

  • Adds a new graphical view in Omni DLP to visualize policy rules and conditions. DLP Policy Tree · Nov 2025 · source · release history
Browser-level data policy enforcement (Island Enterprise Browser) shipped Extends data policy enforcement to the browser layer through integration with Island Enterprise Browser. 1 release

Shared capability: Data loss prevention

release

  • Adds integration with Island Enterprise Browser for browser-level data policy enforcement. Latest Integrations - June · seen Jul 2026 · source · release history
Network security enforcement integration (Cato Networks) shipped Surfaces data risk context within network security enforcement workflows through integration with Cato Networks. 1 release

Shared capability: Data loss prevention

release

  • Adds integration with Cato Networks for network security enforcement. Latest Integrations - June · seen Jul 2026 · source · release history
Data access governance 5 features Data discovery and protection since 2024
Access Trail and activity monitoring shipped Captures near-real-time activity tied to sensitive data — access, movement, and exposure — and retains up to a year of history to support investigations and audits. 15 releases · first seen Nov 2025

Shared capability: Data access governance

release 15 total

  • Expands Cy natural-language investigation to cover risky alerts, sensitive data exposure, access activity, and data movement patterns in one unified path. Cyera screenshot New in Cy · seen Aug 2026 · source · release history
  • Extends Access Trail coverage to Outlook, enabling audit of message access, attachment access, send activity, deletions, inbox rules, folder permissions, and delegated access. Cyera screenshot Access Trail for Outlook and NetApp · seen Aug 2026 · source · release history
  • Extends Access Trail coverage to NetApp on-prem file shares, enabling audit of sensitive file activity across on-premises storage environments. Access Trail for Outlook and NetApp · seen Aug 2026 · source · release history
  • Extends audit visibility to Outlook and NetApp on-prem file shares for sensitive data activity tracing Access Trail for Outlook and NetApp · Aug 2026 · source · release history
  • Enables optional access revocation directly from Access Trail findings in Google Workspace. Access Trail for Google Workspace · seen Jul 2026 · source · release history
  • Enriches access events with data classification and identity context for deeper investigation. Access Trail for Google Workspace · seen Jul 2026 · source · release history
Identity and access visibility for on-prem file shares shipped Maps Active Directory permissions across on-premises file shares to show who has access to sensitive data, how that access was granted, and where it is excessive. 7 releases · first seen Jul 2024

Shared capability: Data access governance

release 7 total

  • Introduces CyBridge improvements for faster, more reliable on-premises connectivity. Latest Integrations - June · seen Jul 2026 · source · release history
  • Enables teams to see who has access, how permissions were granted, and where sensitive data is overly exposed in on-prem environments. Identity Visibility for On-prem · seen Jul 2026 · source · release history
  • Adds identity visibility for on-prem file shares by mapping Active Directory access across SMB File Shares, NetApp, and Dell PowerScale. Identity Visibility for On-prem · seen Jul 2026 · source · release history
  • Surfaces access paths (rather than individual files) to help teams identify and reduce overly permissive or inherited access at the source. Identity Visibility for On-prem · seen Jul 2026 · source · release history
  • Extends support to SMB File Shares, NetApp, and Dell PowerScale platforms Identity Visibility for On-prem · Feb 2026 · source · release history
  • Adds identity visibility capabilities to on-prem file shares by mapping access directly from Active Directory Identity Visibility for On-prem · Feb 2026 · source · release history
Project-based data scoping and visibility control shipped Enables security teams to define scoped workspaces that limit user visibility to specific data, alerts, and identities within a single tenant. 4 releases · first seen Aug 2026

Shared capability: Data access governance

release

  • Enables scoped API access per project, so integrations and automations only surface data relevant to their assigned scope. Cyera screenshot Projects · seen Aug 2026 · source · release history
  • Preserves organization-wide visibility for global users while restricting project-scoped users to their defined perimeter, supporting safe cross-functional collaboration. Projects · seen Aug 2026 · source · release history
  • Introduces Projects, a new construct that lets security teams define scoped workspaces limiting user visibility to specific data, alerts, and identities within a single Cyera tenant. Projects · seen Aug 2026 · source · release history
  • Projects feature enables security teams to define project scopes to limit user visibility to specific data, alerts, and identities. Projects · Aug 2026 · source · release history
Public access detection and remediation shipped Provides visibility into public sharing across Microsoft 365, S3, and SharePoint/Teams, with automated capability to revoke public access for exposed files. 3 releases · first seen May 2025

Shared capability: Data access governance

release

  • Native remediation of public and organization-wide file sharing across SharePoint, OneDrive, and Teams. Built-In Remediation for Microsoft 365 · Aug 2025 · source · release history
  • Enables instant revocation of public access for flagged files without manual admin workarounds Microsoft 365 Public Access Remediation · May 2025 · source · release history
  • Adds visibility into public sharing across Microsoft 365 files to automatically flag risks Microsoft 365 Public Access Remediation · May 2025 · source · release history
Privileged access management integration (Delinea) shipped Brings data risk context into privileged access management workflows through integration with Delinea. 1 release

Shared capability: Data access governance

release

  • Adds integration with Delinea for privileged access management workflows. Latest Integrations - June · seen Jul 2026 · source · release history
Data lineage 2 features Data discovery and protection since 2026
Data lineage and file propagation tracking shipped Traces how sensitive files move and transform across system boundaries, giving investigators a unified lineage view of data propagation. 3 releases

Shared capability: Data lineage

release

  • Enables reconstruction of file propagation paths even when files cross system boundaries. Data Lineage for Files · seen Jul 2026 · source · release history
  • New Data Lineage for Files capability traces the full lifecycle of sensitive files as they are moved, transformed, and propagated by humans and AI agents across systems. Data Lineage for Files · seen Jul 2026 · source · release history
  • Turns isolated security events into connected investigation context within a single lineage view. Data Lineage for Files · seen Jul 2026 · source · release history
Data lineage context in risk triage (Euno) shipped Incorporates data lineage context into risk triage workflows through integration with Euno. 2 releases · first seen May 2026

Shared capability: Data lineage

release

  • New integration with Euno to incorporate data lineage context into risk triage. Recent Integrations · seen Jul 2026 · source · release history
  • Adds Euno integration for risk prioritization. Recent Integrations · May 2026 · source · release history
Other / not yet classified 32 features Features we have not matched to a capability yet. A suggested match is marked.
Data discovery and classification shipped suggested Automatically discovers and classifies sensitive data across cloud and on-prem sources, keeping a continuously updated inventory. 15 releases · first seen Sep 2024

Suggested capability: Sensitive data discovery. This is our guess, not confirmed.

release 15 total

  • Adds support for MySQL, MariaDB, Oracle RAC, MSSQL, and IBM Db2 for i, enabling discovery, classification, and governance of sensitive data in on-prem enterprise databases. Extending the Ecosystem · seen Aug 2026 · source · release history
  • New continuous data discovery and enriched classification engine grounds privacy operations in real-time inventory of personal data locations and usage. Cyera Privacy · seen Jul 2026 · source · release history
  • Introduces Topic Exploration, which aggregates multiple technical data classifications into business-aligned topics that map to how organizations think about their data. Topic Exploration · seen Jul 2026 · source · release history
  • Adds Hyper-V platform support for the on-prem connector, delivered as a downloadable VM image to enable fast and flexible on-premise data security deployment. Cyera Now Supports Hyper-V for On-Prem Deployments · May 2025 · source · release history
  • Adds YugabyteDB platform support for automated discovery and sensitive data scanning Cyera Now Supports Yugabyte · Mar 2025 · source · release history
  • Enables discovery and scanning for all YugabyteDB Aeon databases Yugabyte Support · Mar 2025 · source · release history
Remediation Center for data owners shipped Gives data owners a dedicated workspace to triage and resolve data security issues assigned to them independently of the security team. 6 releases · 2 other sources · first seen Jun 2026

release

  • New Remediation Center workspace gives data owners a dedicated interface to triage and resolve data security issues assigned to them. Remediation Center · seen Jul 2026 · source · release history
  • Consolidated notifications keep data owners informed of new assignments without manual coordination from security teams. Remediation Center · seen Jul 2026 · source · release history
  • Supports secure data owner access via SSO or OTP, enabling participation without requiring full platform credentials. Remediation Center · seen Jul 2026 · source · release history
  • Event logs provide an audit trail of remediation activity, including what was closed and when. Remediation Center · seen Jul 2026 · source · release history
  • Adds a To Do vs. Completed workflow so remediation progress is clearly tracked and measurable. Remediation Center · seen Jul 2026 · source · release history
  • Introduces the Remediation Center — a dedicated workspace giving data owners a clear To Do vs. Completed workflow, consolidated notifications, event logs for audit, and secure access via SSO or OTP. Remediation Center · Jun 2026 · source · release history

example

  • Route a data exposure issue to a data owner so they can act on it directly in the Remediation Center without security team involvement. In the Cyera console, open a finding and assign it to a data owner. Remediation Center · seen Jul 2026 · source
  • Allow data owners to triage assigned security issues in a dedicated workspace with audit trails. In the Cyera console, navigate to Remediation Center to access your assigned tasks and workflow. Remediation Center · Jun 2026 · source
Slack integration for data security alerts shipped Sends actionable data security alerts with context and suggested next steps directly into Slack where data owners and teams already work. 7 releases · 1 other source · first seen May 2025

Also counts toward: Outbound webhooks (the product notifies you)

release 7 total

  • New Slack integration sends actionable data security alerts with context and next steps directly to data owners in Slack. Slack Integration · seen Jul 2026 · source · release history
  • Integrates with Slack to deliver actionable alerts with context and next steps for remediation. Slack Integration · Dec 2025 · source · release history
  • Adds Custom Actions for Remediation, enabling teams to trigger remediation directly in the Cyera platform and integrate with existing workflows. Custom Actions · Sep 2025 · source · release history
  • Introduces the Integration Marketplace, a single interface for setting up, managing, and connecting security tools with bi-directional data flows. All-New Integration Marketplace · Aug 2025 · source · release history
  • Adds Public Access Remediation for S3 to automatically identify exposed files and remove public access. Public Access Remediation for S3 · May 2025 · source · release history
  • Automatically identifies exposed sensitive files in S3 buckets and removes public access. Automated S3 Remediation · May 2025 · source · release history

example

  • Route data security alerts to the relevant Slack channel or owner so issues are surfaced and acted on where teams already work. In the Cyera console, go to Integrations > Slack and connect your Slack workspace to enable alert delivery to data owners. Slack Integration · seen Jul 2026 · source
Automation Center and remediation workflows shipped Lets teams define and run repeatable remediation workflows with conditional logic, parallel data-owner delegation, and automated ownership assignment. 7 releases · first seen Sep 2025

release 7 total

  • New Automation Center module enables teams to define, scope, and execute repeatable data security remediation workflows across the Cyera platform. Automation Center · seen Jul 2026 · source · release history
  • Enables policy creation, automation, and remediation workflows to be driven by business context rather than raw data labels. Topic Exploration · seen Jul 2026 · source · release history
  • Supports automated delegation of data ownership directly from workflow definitions. Automation Center · seen Jul 2026 · source · release history
  • Enables parallel remediation workflows so data owners can act without routing through security teams. Slack Integration · seen Jul 2026 · source · release history
  • Enables condition-based enforcement of security controls without manual coordination, scaling consistently as environments grow. Automation Center · seen Jul 2026 · source · release history
  • Enables optional access revocation as part of the investigation workflow Access Trail for Google Workspace · Jun 2026 · source · release history
Privacy risk and compliance management shipped Automates data mapping, RoPA generation, and DPIA pre-filling from live discovery findings, and supports consent management for GDPR and CCPA. 6 releases · first seen Dec 2025

release

  • Introduces privacy assessments pre-filled with actual data discovery findings, reducing manual effort in DPIA and similar workflows. Cyera Privacy · seen Jul 2026 · source · release history
  • Supports consent management across GDPR, CCPA, and additional privacy frameworks from a single platform. Cyera Privacy · seen Jul 2026 · source · release history
  • New centralized privacy risk management surface consolidates privacy risks identified across the data estate. Cyera Privacy · seen Jul 2026 · source · release history
  • Adds automated data mapping and Records of Processing Activities (RoPA) built from live data context rather than manual surveys. Cyera Privacy · seen Jul 2026 · source · release history
  • Provides a shared view of compliance posture with real-time updates to keep evidence current Map Risks to Regulatory Controls · Dec 2025 · source · release history
  • Introduces capability to continuously map risks and configurations to regulatory frameworks (GDPR, SOC 2, PCI-DSS, HIPAA, NIST) Map Risks to Regulatory Controls · Dec 2025 · source · release history
Microsoft Agent 365 integration for AI agent risk governance shipped suggested Pushes Cyera policy-driven risk events into Microsoft Agent 365's Risk Service so that agent data security posture signals — including configurations, capabilities, access paths to sensitive data, and policy drift — appear alongside Microsoft Purview, Defender, and Entra signals in the Microsoft 365 Admin Center Agent Registry. 5 releases · first seen Oct 2026

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • Integrates Cyera Agent Guardian with Microsoft Agent 365, pushing policy-driven risk events to the Agent 365 Risk Service via Microsoft's API in near real time, authenticated through Microsoft Entra ID using OAuth 2.0 client credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Oct 2026 · source · release history
  • Maps Cyera policy severity to the Agent 365 third-party risk schema fields riskLevel (low/medium/high), riskEvidence (policy name and description), and status (driven by Issue status), so findings appear directly in the Agent Registry page of the Microsoft 365 Admin Center. announced · Oct 2026 · source · release history
  • Delivers agent data security posture signals — including agent configurations, capabilities, connected tools, access paths to sensitive data, and drift from policy — alongside Microsoft Purview, Microsoft Defender, and Microsoft Entra risk signals in a single view. announced · Oct 2026 · source · release history
  • Builds a live inventory of sanctioned and unsanctioned AI agents, mapping their models, tools, identities, and data connections. Cyera screenshot Agent Guardian · seen Aug 2026 · source · release history
  • Identifies which agents introduce real risk by analyzing the resources and data connections behind each agent. Agent Guardian · seen Aug 2026 · source · release history
Non-human identity remediation enrichment (Clutch) shipped suggested Brings data risk context into non-human identity remediation workflows through integration with Clutch. 5 releases · first seen May 2026

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • Adds non-human identity (NHI) management to the Cyera platform via the acquisition of Oasis Security, enabling continuous, policy-driven control over which workloads and AI agents can access which systems, in what context, and for how long.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Sep 2026 · source · release history
  • Adds non-human identity (NHI) management to the Cyera platform via the acquisition of Oasis Security, enabling continuous, policy-driven control over which workloads and AI agents can access which systems, in what context, and for how long.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ announced · Sep 2026 · source · release history
  • New integration with Clutch to bring data risk context into non-human identity remediation workflows. Recent Integrations · seen Jul 2026 · source · release history
  • Adds Clutch integration for triage and remediation workflows. Recent Integrations · May 2026 · source · release history
  • Adds Upwind integration for non-human identity risk context. Recent Integrations · May 2026 · source · release history
AI-powered severity scoring shipped Scores each data security issue using sensitivity, identity access, and exposure context, and provides an AI-generated explanation to help teams decide how urgently to act. 5 releases · first seen May 2025

release

  • New AI-Powered Severity engine scores issues using business context including data sensitivity, identity access, and exposure conditions to prioritize what truly matters. AI-powered Issue Severity · seen Jul 2026 · source · release history
  • Provides AI-generated explanations for each severity rating to accelerate confident remediation decisions. AI-powered Issue Severity · seen Jul 2026 · source · release history
  • Enables prioritization of high-impact issues for compliance based on the new risk-mapping model Map Risks to Regulatory Controls · Dec 2025 · source · release history
  • Automatically recognizes non-production environments and alerts when sensitive production data is found there. Protect Against Sensitive Production Data Sprawl · May 2025 · source · release history
  • Adds visibility into public sharing across Microsoft 365 files to automatically flag risks Microsoft 365 Public Access Remediation · May 2025 · source · release history
Expanded ecosystem integrations (Mave, Mate, Shift Security) shipped Adds integrations with Mave Security, Mate Security, and Shift Security to broaden Cyera's coverage across the cyber toolchain. 4 releases · first seen Jun 2026

release

  • Adds integration with Mave Security for expanded ecosystem coverage. Latest Integrations - June · seen Jul 2026 · source · release history
  • Adds integration with Mate Security for expanded ecosystem coverage. Latest Integrations - June · seen Jul 2026 · source · release history
  • Adds integration with Shift Security for expanded ecosystem coverage. Latest Integrations - June · seen Jul 2026 · source · release history
  • Adds support for eight new ecosystem partnerships: Abnormal Security, Cohesity, Cato Networks, Island Enterprise Browser, Delinea, Mave Security, Mate Security, and Shift Security. Latest Integrations - June · Jun 2026 · source · release history
Direct email notification and engagement shipped Enables sending targeted, branded email notifications directly from issue pages to data owners to accelerate remediation workflows. 4 releases · first seen Feb 2025

release

  • Adds Custom Actions for Remediation, enabling teams to trigger remediation directly in the Cyera platform and integrate with existing workflows. Custom Actions · Sep 2025 · source · release history
  • Enables security teams to send in-app email notifications directly from an issue page within the Cyera platform, removing the need to manually contact data owners. Direct Send Emails · Feb 2025 · source · release history
  • Enables sending in-app email notifications to data owners directly from a Cyera issue page Accelerated Data Risk Remediation · Feb 2025 · source · release history
  • Adds Direct Send Emails capability for accelerated data risk remediation workflows. Direct Send Emails · Feb 2025 · source · release history
Business-context topic mapping shipped suggested Groups technical classifications into business-friendly topics so that non-security stakeholders can understand what data is at risk and why it matters. 3 releases · first seen Jun 2026

Suggested capability: Sensitive data classification. This is our guess, not confirmed.

release

  • Introduces Topic Exploration, which aggregates multiple technical data classifications into business-aligned topics that map to how organizations think about their data. Topic Exploration · seen Jul 2026 · source · release history
  • Allows security and data teams to prioritize and communicate data risk in terms that business leaders understand. Topic Exploration · seen Jul 2026 · source · release history
  • Extends the existing Claude Enterprise integration. Latest Integrations - June · Jun 2026 · source · release history
Data retention policy enforcement shipped Detects files that have exceeded defined retention periods and flags sensitive data no longer in active use to reduce audit scope and storage risk. 3 releases · first seen May 2026

release

  • New Data Retention Policies capability detects files that have exceeded a defined retention period using file age signals combined with Cyera's classification context. Data Retention Policies · seen Jul 2026 · source · release history
  • Identifies sensitive data no longer in active use, enabling teams to reduce audit scope and breach impact without manual review at scale. Data Retention Policies · seen Jul 2026 · source · release history
  • Adds Data Retention Policies surface to define policies using file age signals combined with classification context for precise scoping. Data Retention Policies · May 2026 · source · release history
Continuous compliance posture mapping shipped Continuously maps risks and configurations to regulatory frameworks (GDPR, SOC 2, PCI-DSS, HIPAA, NIST) with real-time evidence updates. 3 releases · first seen Dec 2025

release

  • Provides a shared view of compliance posture with real-time updates to keep evidence current Map Risks to Regulatory Controls · Dec 2025 · source · release history
  • Enables prioritization of high-impact issues for compliance based on the new risk-mapping model Map Risks to Regulatory Controls · Dec 2025 · source · release history
  • Introduces capability to continuously map risks and configurations to regulatory frameworks (GDPR, SOC 2, PCI-DSS, HIPAA, NIST) Map Risks to Regulatory Controls · Dec 2025 · source · release history
Exchange Online and email data coverage shipped suggested Discovers and classifies sensitive data inside Exchange Online mailboxes, email bodies, and attachments. 3 releases

Suggested capability: Sensitive data discovery. This is our guess, not confirmed.

release

  • Supports Exchange Online as a new data source, enabling discovery and classification of mailbox content, email bodies, and attachments. Exchange Online Coverage · seen Jul 2026 · source · release history
  • Reveals regulated and sensitive data spread across historical email communications to support cleanup and retention enforcement. Exchange Online Coverage · seen Jul 2026 · source · release history
  • Provides visibility into how sensitive attachments move through email and whether email is used beyond its intended governance scope. Exchange Online Coverage · seen Jul 2026 · source · release history
Automation memory management shipped Provides a management view of stored automation entries so analysts can review and delete them to keep workflows predictable and auditable. 2 releases · first seen Jun 2026

release

  • New dedicated Memories view lets analysts review and delete stored entries to keep automation predictable and auditable. Omni DLP Memories · seen Jul 2026 · source · release history
  • Allows analysts to review and delete Memories entries to maintain predictable automation behavior Omni DLP Memories · Jun 2026 · source · release history
AWS Security Hub integration shipped Surfaces Cyera data risk context alongside cloud security posture findings inside AWS Security Hub. 2 releases · first seen May 2026

release

  • New integration with AWS Security Hub to surface Cyera data risk context alongside cloud security posture findings. Recent Integrations · seen Jul 2026 · source · release history
  • Adds AWS Security Hub integration to extend deep data and risk context into cloud security posture workflows. Recent Integrations · May 2026 · source · release history
Data catalog enrichment (Atlan) shipped suggested Extends data risk and sensitivity context into data catalog workflows through integration with Atlan. 2 releases · first seen May 2026

Suggested capability: Data lineage. This is our guess, not confirmed.

release

  • New integration with Atlan to extend data risk and sensitivity context into data catalog workflows. Recent Integrations · seen Jul 2026 · source · release history
  • Adds Atlan integration for data catalog and lineage context. Recent Integrations · May 2026 · source · release history
Microsoft Purview and M365 label visibility shipped Surfaces existing Microsoft Purview retention labels applied to M365 files to support audit and compliance assessment. 2 releases · first seen May 2026

release

  • Adds visibility into existing Microsoft Purview retention labels applied to M365 files, supporting audit readiness and compliance assessment for Microsoft customers. Data Retention Policies · seen Jul 2026 · source · release history
  • Adds visibility into existing Microsoft Purview retention labels applied to M365 files for auditing and readiness assessment. Data Retention Policies · May 2026 · source · release history
Data Subject Request (DSR) automation shipped Fulfills data subject access, deletion, and portability requests automatically against a continuously updated inventory. 2 releases · first seen Sep 2025

release

  • Adds Data Subject Request (DSR) automation to fulfill access, deletion, and portability requests against a continuously updated data inventory. Cyera Privacy · seen Jul 2026 · source · release history
  • Adds Data Subject Rights (DSR) Automation to simplify privacy compliance and accelerate request fulfillment from weeks to minutes. Introducing Data Subject Rights Automation · Sep 2025 · source · release history
Risk visualization and prioritization shipped suggested Highlights high-concentration risk areas via Top 10 Risk Objects and identifies offending identities to direct investigation efforts. 2 releases · first seen Jun 2025

Suggested capability: Data access governance. This is our guess, not confirmed.

Also counts toward: Web management console

release

  • Adds Top 10 Risk Objects view to highlight where risk is most concentrated Policy Analytics · Jun 2025 · source · release history
  • Adds the Offending Identities tab to the Cyera console UI to display which specific users triggered data sharing issues. Offending Identities · Jun 2025 · source · release history
Integrated DSR fulfillment shipped Unifies intake, verification, data discovery, and audit logging into a single automated workflow for fulfilling Data Subject Requests. 1 release · first seen Sep 2025

Also counts toward: Administrative audit log

release

  • Unifies intake, verification, data discovery, fulfillment, and audit logging into a single automated workflow. Introducing Data Subject Rights Automation · Sep 2025 · source · release history
Custom user classification shipped suggested Allows security teams to apply age-based custom classifications (e.g., Children, Teens, Adults) to users for targeted data handling. 1 release · first seen Aug 2025

Suggested capability: Sensitive data classification. This is our guess, not confirmed.

release

  • Age-based classification allows security teams to automatically tag users as Children, Young Teens, Older Teens, or Adults. Age-Based Data Subject Context · Aug 2025 · source · release history
Omni AI Conversational Assistant shipped Enables natural language querying of security data to return prioritized answers with direct links to remediation actions. 1 release · first seen Aug 2025

Also counts toward: Built-in AI assistant, Natural-language query

release

  • Adds Omni AI Conversational Assistant enabling natural language questions to return prioritized answers with direct links to remediation actions Omni AI Conversational Assistant · Aug 2025 · source · release history
Licensing center shipped Provides a centralized view of active usage, capacity limits, and growth metrics for renewal planning. 1 release · first seen Jun 2025

release

  • Adds the Licensing Center UI section to display active usage, capacity nearing limits, and growth room for renewal planning The Licensing Center · Jun 2025 · source · release history
Remediation ROI tracking shipped Identifies remediation actions that drive the greatest impact, helping teams prioritize high-value security activities. 1 release · first seen Jun 2025

release

  • Adds Remediation ROI features to identify actions driving the greatest impact Policy Analytics · Jun 2025 · source · release history
AI-driven security investigation enrichment (Reco AI) shipped Adds data risk context to AI-driven security investigations through integration with Reco AI. 1 release

release

  • New integration with Reco AI to add data risk context to AI-driven security investigations. Recent Integrations · seen Jul 2026 · source · release history
Data protection and backup coverage (Cohesity) shipped Extends data risk and sensitivity context into data protection and backup workflows through integration with Cohesity. 1 release

release

  • Adds integration with Cohesity for data protection and backup coverage. Latest Integrations - June · seen Jul 2026 · source · release history
Email and collaboration threat response (Abnormal Security) shipped Integrates with Abnormal Security to support response to email and collaboration-based threats. 1 release

release

  • Adds integration with Abnormal Security for email and collaboration threat response. Latest Integrations - June · seen Jul 2026 · source · release history
Remediation workflow enrichment (imPAC) shipped Extends data risk context into remediation workflows through integration with imPAC. 1 release

release

  • New integration with imPAC to extend data risk context into remediation workflows. Recent Integrations · seen Jul 2026 · source · release history
Risk severity trend analysis with data context shipped Incorporates Cyera's data context to adjust and enrich severity scores within risk trend analysis workflows. 1 release

release

  • Incorporates Cyera's data context to elevate provider severity scores within trend analysis. DLP Trends · seen Jul 2026 · source · release history
Saved prompts for investigation workflows shipped Allows teams to store and reuse proven natural-language investigation workflows across DSPM and DLP. 1 release

release

  • Adds Saved Prompts so teams can store and reuse proven natural-language investigation workflows across DSPM and DLP. Cyera screenshot New in Cy · seen Aug 2026 · source · release history
Vulnerability prioritization enrichment (Zafran) shipped suggested Enriches vulnerability prioritization decisions with data exposure context through integration with Zafran. 1 release

Suggested capability: Sensitive data discovery. This is our guess, not confirmed.

release

  • New integration with Zafran to enrich vulnerability prioritization with data exposure data. Recent Integrations · seen Jul 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Screenshots

From the release notes, newest first. Click one to see it full size.

Access Trail for Outlook and NetApp seen Aug 18, 2026

Agent Guardian seen Aug 18, 2026

New in Cy seen Aug 18, 2026

Projects seen Aug 18, 2026

Access Trail for Google Workspace seen Jul 15, 2026

Browser Shield Policy Creation seen Jul 15, 2026

Omni DLP Memories seen Jul 15, 2026

Remediation Center seen Jul 15, 2026

AI-powered Issue Severity seen Jul 13, 2026

Access Trail seen Jul 13, 2026

Automation Center seen Jul 13, 2026

Browser Shield seen Jul 13, 2026

Cyera MCP seen Jul 13, 2026

Cyera Privacy seen Jul 13, 2026

DLP Trends seen Jul 13, 2026

Data Lineage for Files seen Jul 13, 2026

Data Retention Policies seen Jul 13, 2026

Exchange Online Coverage seen Jul 13, 2026

Identity Visibility for On-prem seen Jul 13, 2026

Recent Integrations seen Jul 13, 2026

ServiceNow ITSM Coverage seen Jul 13, 2026

Topic Exploration seen Jul 13, 2026

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Cyera, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Cyera puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

cyera.com, every change

Cyera's home page and 29 more pages as they looked each month from April 2024 to October 2026: 37 renders, 4 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Coverage

Missing something? Tell us

What Cyera connects to, runs on and detects, read from its release notes and docs. So far: 1 new compliance framework, 1 new supported platform.

Show

2 changes, tracked since Oct 23, 2026.

  • Oct 262026

    new FedRAMP Class D (formerly FedRAMP High) Certification

    With NIST SP 800-53 Revision 5

    Cyera is Certified at FedRAMP Class D, formerly FedRAMP High. Class D is what the market has known for a decade as FedRAMP High, the highest bar of the FedRAMP program, renamed this year under FedRAMP's Consolidated Rules for 2026.

    Source ↗

  • Oct 232026

    new Multilingual (non-English) entity extraction support, starting with French

    This blog post covers how Cyera extended its unstructured data entity extraction pipeline to handle non-English languages in production.

    Source ↗

How we count

Read from 2 of 91 release notes and docs updates we hold for Cyera. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Cyera's life, so an old integration can show a recent first-seen date.

Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.

Releases

Coverage in all entries

91 entries

  1. October 20264
  2. September 20262
  3. August 202610
  4. July 202620
  5. June 20265
  6. May 20263
  7. March 20261
  8. February 20263
  9. December 20252
  10. November 20253
  11. September 20253
  12. August 20254
  13. June 20254
  14. May 20256
  15. April 20251
  16. March 20255
  17. February 20256
  18. December 20245
  19. October 20241
  20. September 20242
  21. July 20241
    Coverage in all entries

    91 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →