Varonis

No entries match these filters. Clear filters

1. updated seen Nov 4, 2026 · issue 130

   Varonis adds a Collibra data catalog integration to surface sensitive data classification and security context alongside governance metadata⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢
2. changelog Oct 31, 2026 · issue 126

   Varonis adds an Entity ID Lookup API, CSV export, Collibra integration, and offline EDM hashing across its October 2026 release⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Use the new Entity ID Lookup API to translate physical folder paths into entity IDs required by Search and Export APIs, with support for exact path resolution, bulk lookups, path discovery, and subtree resolution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Export data in CSV format directly from the Export API in addition to AVROAVROA row-oriented data serialization format maintained by Apache, using JSON-defined schemas bundled with the data so tools can read it without out-of-band schema management., simplifying analysis in spreadsheet and reporting tools without requiring file conversion.
   • Apply Exact Data Match (EDM) classification to tabular files using the same policies across tabular and non-tabular data, and prepare EDM source data offline by hashing files on disconnected systems and uploading only the hashed package from a connected environment.
   • Monitor and manage Microsoft Main links within SharePoint Online and OneDrive, extending analytics and policy workflow coverage to supported Main link types.
   • Create, edit, test, and manage classification patterns directly in the Varonis Web Interface, now integrated with classification policies and settings.

   +2 more show less

   • Organize multiple data sources into named, reusable collections that can be applied across analytics, dashboards, and policies.
   • Clone existing data protection automations to reuse configurations instead of rebuilding them from scratch.
   • Use the new Entity ID Lookup API to translate physical folder paths into entity IDs required by Search and Export APIs, with support for exact path resolution, bulk lookups, path discovery, and subtree resolution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Organize multiple data sources into named, reusable collections that can be applied across analytics, dashboards, and policies.
   • Clone existing data protection automations to reuse configurations instead of rebuilding them from scratch.

   4 more in Everything

3. Strengthen data and AI governance with Varonis + Collier Oct 21, 2026 · issue 125

   Varonis adds a Collibra integration that enriches catalog assets with sensitive data classification, security context, ownership, lineage, and policy information.

   • New integration Collibra data catalog integration
4. announced Oct 20, 2026 · issue 116

   Varonis now integrates with Collibra, enriching Collibra catalog assets with continuously updated sensitive data classifications for governance and AI use cases.

   • New integrationAdds a Varonis integration with Collibra that sends sensitive data classifications — including PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations., PHIPHIProtected Health Information: individually identifiable health data regulated under the US HIPAA law, whose strict handling requirements drive cyber tools to audit, mask, or restrict access to it., financial information, credentials, secrets, and regulated data — directly into the Collibra data catalog.

   1 detail in Everything

5. Securely connect Azure managed databases with Managed Identity Oct 19, 2026 · issue 125

   Varonis adds Azure Managed Identity authentication for connecting Azure SQL Server, PostgreSQL, and MySQL managed databases⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

6. Create new automations with cloning Oct 19, 2026 · issue 119

   Varonis lets you clone existing data protection automations to speed up consistent policy deployment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   When you need to roll out a consistent automation policy across multiple environments without manually recreating each configuration.
   📍In the Varonis console, navigate to your existing data protection automation, select Clone, adjust environment-specific settings on the copy, then save and deploy.
7. Expand Exact Data match coverage and prepare source data offline Oct 19, 2026 · issue 119

   Varonis extends Exact Data Match classification to tabular files and supports offline source data preparation for air-gapped environments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Extends Exact Data Match (EDM) classification to tabular files, enabling the same policies to apply across both tabular and non-tabular data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Supports offline EDM source data preparation by hashing files on disconnected systems and uploading only the hashed package from a connected environment, keeping source data within restricted networks.

   2 details in Everything

8. Export API results in CSV format Oct 19, 2026 · issue 119

   Varonis Export API now supports native CSV output in addition to AVROAVROA row-oriented data serialization format maintained by Apache, using JSON-defined schemas bundled with the data so tools can read it without out-of-band schema management., eliminating conversion steps for spreadsheet and reporting workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds CSV format support to the Export API, enabling direct CSV output alongside the existing AVRO format.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

9. Manage classification patterns from a single workspace Oct 19, 2026 · issue 119

   Varonis adds in-app classification pattern management — create, edit, and test patterns directly in the Web Interface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds a unified classification pattern workspace in the Varonis Web Interface for creating, editing, testing, and managing patterns without switching tools.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

10. Monitor Microsoft Main links in SharePoint and OneDrive Oct 19, 2026 · issue 119
    • Updated integration SharePoint Online and OneDrive Main links monitoring
11. Organize data sources into reusable collections Oct 19, 2026 · issue 119

    Varonis adds named data source collections for reuse across analytics, dashboards, and policies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

12. Resolve data entity IDs directly from folder paths Oct 19, 2026 · issue 119

    Varonis adds Entity ID Lookup API to translate folder paths into entity IDs for Search and Export API workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

13. changelog Oct 16, 2026 · issue 110

    Varonis adds AI classification scope controls, Databricks data masking automation, Snowflake DB sizing, and configurable collector scan ratios.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Limit AI classification to only the Snowflake accounts and services that need it, keeping costs and processing scope aligned with compliance requirements.
    📍In Varonis, go to Settings › AI Classification, select Scope Controls, choose the specific services and accounts to include, then save the scoped configuration.
    Automate masking of sensitive columns in Databricks directly from a Varonis policy without leaving the platform.
    📍In Varonis, open the relevant data policy, select the Databricks columns to mask, and enable masking via the policy automation workflow — Varonis syncs the masking state and tags columns as masked.
    Prioritize faster initial scan completion in a newly onboarded environment with large data volumes by shifting collector capacity away from incremental scans.
    📍In Varonis collector settings, adjust the scan ratio to allocate more capacity to initial discovery (e.g. 80/20 initial vs. incremental) rather than the default 50/50 balanced allocation.
    • Supports migration of existing Salesforce integrations to Salesforce's External Client App framework, preserving existing configurations.

    1 more in Everything

14. AI classification scope controls Oct 7, 2026 · issue 109

    Varonis adds scope controls to limit LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-based classification to designated services and accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds scoped configuration for LLM-based classification, letting you select specific services and accounts for AI processing across structured, semi-structured, and unstructured classification workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

15. Apply Data Concentration to database classification Oct 4, 2026 · issue 109

    Varonis applies Data Concentration to database tables, grouping by schema and classifying up to 10 representative tables per group.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

16. Automate sensitive data masking in Databricks Oct 4, 2026 · issue 109

    Varonis adds automated Databricks column-level data masking, with centralized coverage visibility and policy-driven remediation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds automated Databricks column-level data masking, enabling masking to be enabled or disabled directly from Varonis policy automation workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Provides a centralized view of Databricks masking coverage by synchronizing each column's effective masking state and tagging columns as masked or unmasked.

    2 details in Everything

17. Improved database capacity planning and reporting Oct 4, 2026 · issue 109

    Varonis adds CSV export of scoped database instance sizes in bytes, MB, and GB for capacity planning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

18. Track Snowflake database sizes for capacity planning and reporting Oct 4, 2026 · issue 109
    • Updated integration Snowflake database size metadata in Varonis Investigation views
19. changelog Sep 25, 2026 · issue 085

    Varonis: Deploy the Varonis Private Cloud Data Collector to AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. using TerraformTerraformAn open-source infrastructure-as-code tool by HashiCorp that provisions cloud and on-premises resources through declarative configuration files, letting cyber tools automate and version-control their deployment environments., enabling infrastructure-as-code management of collector environments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Configure Private Cloud Data Collectors to use AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault for customer-managed secret storage.
    • Configure Snowflake integrations that use AWS PrivateLinkAWS PrivateLinkAn AWS networking feature that exposes a service over a private VPC endpoint rather than the public internet, letting tools move data between accounts or to AWS services without traffic ever leaving Amazon's backbone. or Azure Private LinkPrivate LinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. directly from the Varonis integration wizard, with self-service endpoint URL generation and connectivity validation.
    • Monitor GitHub Enterprise Cloud via a GitHub App with least-privilege permissions and enterprise-wide coverage.
    • Analyze historical versions of Confluence pages for sensitive content, with automatic tagging of pages that contain sensitive data in prior versions.
    • Track access to Jira issues, comments, attachments, and worklogs to identify overexposed or broadly accessible resources.

    +1 more show less

    • Choose between a Prioritized Scan for faster results or a standard queued rescan when scheduling on-demand scans.
    • Configure Private Cloud Data Collectors to use AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault for customer-managed secret storage.
    • Monitor GitHub Enterprise Cloud via a GitHub App with least-privilege permissions and enterprise-wide coverage.
    • Analyze historical versions of Confluence pages for sensitive content, with automatic tagging of pages that contain sensitive data in prior versions.
    • Track access to Jira issues, comments, attachments, and worklogs to identify overexposed or broadly accessible resources.

    2 more in Everything

20. changelog Sep 24, 2026 · issue 084

    Varonis adds Data Lifecycle Management, TerraformTerraformAn open-source infrastructure-as-code tool by HashiCorp that provisions cloud and on-premises resources through declarative configuration files, letting cyber tools automate and version-control their deployment environments.-based collector deployment, Confluence history scanning, Jira permissions analysis, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Route all Private Cloud Data Collector credentials through your existing HashiCorp Vault instead of storing them in Varonis, to centralize access control and meet compliance requirements.
    📍In the Varonis console, go to Settings › Data Collectors, select your Private Cloud Data Collector, choose Secret Manager, and select HashiCorp Vault. Enter your Vault endpoint and authentication details to complete the configuration.
    Connect Varonis to a Snowflake environment routed over AWS PrivateLinkAWS PrivateLinkAn AWS networking feature that exposes a service over a private VPC endpoint rather than the public internet, letting tools move data between accounts or to AWS services without traffic ever leaving Amazon's backbone. without leaving the Varonis UI, validating connectivity before the integration goes live.
    📍In the Varonis console, go to Integrations › Add Integration › Snowflake, select AWS PrivateLink as the connection type, allow the wizard to generate the endpoint URL, and click Validate before saving.
    • Introduces Data Lifecycle Management (DLM) to automatically identify, prioritize, and quarantine redundant, obsolete, and trivial (ROT) data across connected data sources using classification, permissions mapping, and activity analysis.

    1 detail in Everything

21. changelog Sep 16, 2026 · issue 076
    └──▷ HOW TO FIND IT
    Accelerate an account investigation by reviewing activity trends and raw event logs together without pivoting between views.
    📍In the Varonis web interface, open the Account Pane for the account under investigation and select the Activity tab to view combined activity trends and detailed event logs with drill-down filtering.
22. Prioritize collector capacity based on scanning needs Sep 16, 2026 · issue 109

    Varonis adds configurable scan ratios to balance collector capacity between initial discovery and incremental scans.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

23. Simplify deployment of container repositories Sep 16, 2026 · issue 109

    Varonis lets you configure private container repositories directly in the collector deployment UI, auto-populating the generated Helm chart.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

24. changelog Sep 15, 2026 · issue 075

    Varonis adds non-human Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. sign-in monitoring, SharePoint sensitivity-label filtering, and unified web-based administration⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Quickly triage unusual account behavior during an incident by reviewing activity trends and raw event logs without pivoting between screens.
    📍In the Varonis web interface, open the Account Pane for the account under investigation, select the Activity tab, use the interactive filters to isolate the relevant time window, and drill down into event log entries showing the spike.
    • Enables creating and updating dictionaries directly from the Varonis web interface, consolidating dictionaries, EDM classifiers, and classification policies into a single workflow without switching to the Management Console.
    • Enables creating, viewing, and managing Varonis users and roles directly from the web interface, removing the need to use the Management Console for user management.

    2 more in Everything

25. announced Sep 15, 2026 · issue 078

    Varonis: Adds a unified ROT dashboard showing total redundant, obsolete, and trivial (ROT) data volume across all connected platforms, filterable by platform, classification category, sensitivity, data source, file type, and owner.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢
    • Introduces out-of-the-box, fully configurable lifecycle policies for duplicates, staleness, and retention that automatically move violating data to a secure, reversible quarantine.
    • Adds retention enforcement that maps classification categories to legal windows — financial and PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. data over seven years, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. and GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. data over two years, PHIPHIProtected Health Information: individually identifiable health data regulated under the US HIPAA law, whose strict handling requirements drive cyber tools to audit, mask, or restrict access to it. over six years, and education data over five years — and quarantines data that exceeds those windows.
    • Surfaces duplicate group detail views showing which copy is the original, which is most recent, where copies live across platforms, and whether they are sensitive, overexposed, or past retention.
    • Enables cost-savings prioritization in the ROT dashboard, surfacing storage spend and compliance risk exposure to guide cleanup efforts.

    4 details in Everything

26. Cut storage costs, improve AI outputs, and reduce risk with Data Lifecycle Management Sep 15, 2026 · issue 077

    Varonis launches Data Lifecycle Management to automatically find, prioritize, and quarantine ROT data across enterprise data sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    ⤢ ⤢ ⤢
    • Introduces Data Lifecycle Management (DLM), a new capability that automatically identifies, prioritizes, and quarantines redundant, obsolete, and trivial (ROT) data across connected data sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Combines data classification, permissions mapping, and activity analysis to surface stale, duplicate, overexposed, and expired data for remediation.

    2 details in Everything

27. Bring your own secret manager Sep 9, 2026 · issue 082

    Varonis Private Cloud Data Collectors now support AWS Secrets Manager, Azure Key Vault, and HashiCorp Vault for credential storage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

28. Customize on-demand scan prioritization Sep 7, 2026 · issue 082

    Varonis adds flexible on-demand scan prioritization, letting you choose between a Prioritized Scan and a standard queued rescan.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

29. Investigate Confluence page history Sep 7, 2026 · issue 082

    Varonis now scans Confluence page history to surface sensitive data in older revisions and tag them for investigation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Enables analysis of historical versions of Confluence pages to detect sensitive content, with automatic tagging of affected pages to support investigation and remediation workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

30. Varonis updates: 2026-09-07 Sep 7, 2026 · release notes

    Varonis adds Confluence page history investigation and on-demand scan prioritization controls.

    • Analyze historical versions of Confluence pages to uncover sensitive content across page history
    • Select either a Prioritized Scan for faster access to updated results or a standard queued rescan when immediate execution is not required

    2 details in Everything

31. Deploy Private Cloud Data Collectors with Terraform Sep 2, 2026 · issue 082

    Varonis Private Cloud Data Collector can now be deployed to AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. using TerraformTerraformAn open-source infrastructure-as-code tool by HashiCorp that provisions cloud and on-premises resources through declarative configuration files, letting cyber tools automate and version-control their deployment environments..⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

32. Deploy Private Cloud Data Collectors with Terraform​‌ Sep 2, 2026 · release notes

    Varonis adds Terraform support for deploying Private Cloud Data Collectors to AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS.

33. changelog Aug 31, 2026 · issue 060

    Varonis adds AWS Org-scoped scans, unified Atlassian integration, scheduled scan pauses, and faster Snowflake monitoring

    ⤢
    └──▷ HOW TO FIND IT
    Export a filtered list of connected service accounts to CSV for auditing large environments from the Connected Services page.
    📍In the Varonis console, go to Connected Services › Connected Service Accounts, apply your advanced filter criteria (e.g. by service type or last-seen date), then select Export › CSV to download the filtered results.
    Align scan pauses to business hours and maintenance windows across time zones by configuring per-day pause schedules.
    📍In the Varonis console, go to Settings › Scan Management › Scan Pauses, select a day of the week, set the pause window start and end times, and choose the applicable time zone. Repeat for each day as needed.
    Scope a classification scan to an entire AWS Organization to avoid maintaining per-account inclusion lists.
    📍In the Varonis console, go to Settings › Scan Scopes, create or edit a scope rule, and enter your AWS Organization ID as the target to include or exclude that Organization from classification scanning.
    • Adds CSV export of filtered connected service accounts directly from the Connected Services page, with advanced filter criteria support.
    • Adds scheduling of scan pauses by day of the week and time zone to align maintenance windows across distributed environments.
    • Adds Data Classes as a building block for classification policies, automatically mapping related patterns and locale-specific criteria to reduce complexity and false positives.
    • Adds AWS Organization ID as a scan scope rule target, allowing entire AWS Organizations to be included or excluded without maintaining per-account lists.
    • Adds a unified Atlassian integration that onboards Jira and Confluence together with shared identity, eliminating duplicate users.

    +4 more show less

    • Adds email notifications when automation actions enter a pending state requiring review in Action Center.
    • Adds data coverage reporting across scan scopes, including historical trends and breakdown by cloud provider and service.
    • Adds visibility into why a Snowflake resource is labeled Shared Internally or Shared Externally, showing originating shares and associated accounts.
    • Reduces Snowflake masking policy and tag change visibility latency to within 24 hours instead of waiting for the next scheduled sync.

    9 details in Everything

34. Identify overexposed Jira content Aug 31, 2026 · issue 082

    Varonis adds Jira content visibility — track and analyze permissions on issues, comments, attachments, and worklogs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Tracks access to Jira content types — issues, comments, attachments, and worklogs — to surface who can access specific data and how that access is granted.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Analyzes effective permissions across Jira to identify overexposed or broadly accessible resources.

    2 details in Everything

35. Monitor GitHub Enterprise Cloud via GitHub App Aug 31, 2026 · issue 082

    Varonis can now monitor GitHub Enterprise Cloud via a GitHub App with least-privilege permissions and enterprise-wide coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

36. Configure Snowflake PrivateLink connections directly in Varonis Aug 30, 2026 · issue 082

    Varonis now supports self-service Snowflake PrivateLinkPrivateLinkAn AWS networking feature that exposes a service over a private endpoint inside a VPC, so traffic never traverses the public internet, giving cyber tools a way to integrate with cloud services without opening public routes. configuration via the integration wizard for AWS and Azure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

37. Filter and analyze SharePoint sites but sensitivity label Aug 23, 2026 · issue 075

    Varonis adds sensitivity label filtering for SharePoint Online sites to support security and compliance investigations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

38. Identify links generated by Data Lifecycle Automation Aug 23, 2026 · issue 075

    Varonis Data Lifecycle Automation now supports custom link prefixes for easier auditing and administration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

39. Investigate account activity from a single view Aug 23, 2026 · issue 075

    Varonis adds a dedicated Activity tab to the Account Pane for unified account investigation with filtering and drill-down.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    When an alert fires on a user account, open the Account Pane and navigate to the Activity tab to see event trends and drill into specific events without leaving the pane.
    📍In the Varonis console, locate the account in question and open the Account Pane › Activity tab. Use the interactive filters to narrow by time range or event type, then drill down into spikes to review detailed event logs.
40. Manage Varonis users and roles from the web interface Aug 23, 2026 · issue 075

    Varonis users and roles can now be created and managed directly from the web interface, replacing the Management Console.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

41. Manage dictionaries directly in the Varonis web interface Aug 23, 2026 · issue 075

    Varonis lets you create and update dictionaries directly in the web UI, alongside EDM classifiers and classification policies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds dictionary creation and editing directly in the Varonis web interface, eliminating the need to switch to the Management Console for dictionary management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

42. Manage permissions and groups directly from Analytics page Aug 23, 2026 · issue 075

    Varonis lets you manage permissions, groups, folder protection, and memberships directly from the Analytics page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

43. Monitor non-human sign-ins in Entra ID Aug 23, 2026 · issue 075

    Varonis adds visibility into service principal and AI agent sign-ins in Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. for identity-based attack detection.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Monitors and surfaces authentication events for service principals and AI agents in Entra ID, enabling investigation of non-human identitynon-human identityA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. sign-ins that were previously invisible.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

44. Varonis updates: 2026-08-23 Aug 23, 2026 · release notes

    Varonis 2026-08-23 adds in-interface dictionary/user management, SharePoint sensitivity label filtering, and non-human Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. monitoring

    • Add dictionaries management to the Varonis web interface for creating and updating without switching contexts
    • Add filter capability for SharePoint sites based on their assigned sensitivity_label
    • Add support for monitoring Entra ID non-human sign-ins (service principals, AI agents)
    • Add custom prefix configuration for links generated by Data Lifecycle Automation
    • Add users and roles management to the Varonis web interface

    +2 more show less

    • Add Activity tab to the Account Pane for investigating account behavior
    • Add permissions and groups management directly from the Analytics page

    7 details in Everything

45. Schedule scan pauses by day and time zone Aug 19, 2026 · issue 057

    Varonis now supports per-day scan pause schedules with time zone selection for distributed environments.

    ⤢
46. Simplify classification policies with Data Classes Aug 19, 2026 · issue 057

    Varonis introduces Data Classes to simplify classification policy building by auto-mapping related criteria and locale-specific patterns.

    ⤢
    • Adds Data Classes as a new way to build classification policies, grouping related patterns and dictionaries automatically instead of requiring individual selection, reducing policy complexity and false positives.

    1 detail in Everything

47. Varonis updates: 2026-08-19 Aug 19, 2026 · release notes

    Varonis 2026-08-19 introduces time-zone-aware scan pause scheduling and a new Data Classes abstraction for classification policies, enhancing operational control and policy simplicity.

    • Schedule scan pauses by day and time zone
    • Simplify classification policies with Data Classes

    2 details in Everything

48. Scope classification scans by AWS Organization Aug 17, 2026 · issue 057

    Varonis lets you scope classification scans by AWS Organization ID, eliminating per-account inclusion/exclusion lists.

    ⤢
    • Adds AWS Organization ID support to scan scope rules, letting you include or exclude entire AWS Organizations without maintaining individual account lists.

    1 detail in Everything

49. Get notified when automation actions require attention Aug 16, 2026 · issue 057

    Varonis adds email notifications for automation actions that enter a pending state and require review in Action Center.

    ⤢
50. Monitor Snowflake masking policy and tag changes faster Aug 16, 2026 · issue 057

    Varonis now surfaces Snowflake masking policy and tag changes within 24 hours instead of waiting for the next scheduled sync.

    ⤢
    • Snowflake masking policy and tag updates are now visible within 24 hours, replacing the previous scheduled-sync delay, so compliance teams can validate data protection controls more quickly.

    1 detail in Everything

51. See how and why Snowflake resources are being shared Aug 16, 2026 · issue 057

    Varonis now shows originating shares and associated accounts explaining why Snowflake resources are labeled Shared Internally or Shared Externally.

    ⤢
    └──▷ HOW TO FIND IT
    Investigate why a Snowflake resource is exposed externally by reviewing its originating shares and linked accounts directly in Varonis.
    📍In the Varonis dashboard, navigate to a Snowflake resource labeled Shared Externally, then open its sharing details to view the originating shares and associated accounts driving that classification.
52. Varonis updates: 2026-08-16 Aug 16, 2026 · release notes

    Varonis adds Snowflake share investigation views, automation action notifications, and faster masking policy monitoring.

    • Adds ability to view originating shares and associated accounts for Snowflake resources labeled Shared Internally or Shared Externally
    • Adds configurable email notifications for automation actions that enter a pending state in Action Center
    • Reduces visibility latency for Snowflake masking policy and tag changes from scheduled sync intervals to within 24 hours

    3 details in Everything

53. Understand data coverage across scan scopes Aug 10, 2026 · issue 057

    Varonis adds built-in data coverage reporting with trend analysis across cloud scan scopes and providers.

    ⤢
    • New built-in reporting view shows current and historical data coverage across configured scan scopes, broken down by cloud provider and service.
    • Trend analysis enables tracking of coverage changes over time and validating scan scope configuration.
    • Coverage distribution view surfaces how monitored data is spread across cloud environments.

    3 details in Everything

54. changelog Aug 9, 2026 · issue 040

    Varonis Atlas adds Agent IBAC to detect intent drift and block rogue AI agent activity in real time.

    ⤢

    ⤢
    • Introduces Agent Intent-Based Access Control (IBAC) in Varonis Atlas to monitor AI agents for intent drift — validating that an agent's reasoning, tool usetool useA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions., and data access align with its original instructions, and alerting on or blocking deviations.
    • Enables automatic identity quarantine when an agent crosses policy boundaries, blocking all subsequent actions for a defined window.
    • Provides a complete cross-session audit trail for every agent interaction so security teams can confirm agent behavior in real time.
    • Supports agents and AI tools already in use, including Claude Code, Cursor, GitHub Copilot, and Microsoft Copilot Studio, with no replacement of existing tooling required.

    4 details in Everything

55. Unify Jira and Confluence onboarding with a single Atlassian integration Aug 9, 2026 · issue 057

    Varonis unifies Jira and Confluence onboarding under a single Atlassian integration with shared identity management.

    ⤢
    • Adds a unified Atlassian integration that connects both Jira and Confluence through a single onboarding flow, consolidating identities and eliminating duplicate users across Atlassian services.

    1 detail in Everything

56. announced Aug 7, 2026 · issue 058

    Varonis Atlas integrates with Claude Inference Hooks for real-time inline prompt inspection and allow/deny enforcement before Claude sees the request.

    ⤢ ⤢ ⤢
    • Adds integration with Claude Inference Hooks so Atlas sits in the request path, receiving the full conversation transcript from Anthropic and returning an allow-or-deny verdict before inference runs — denied prompts never reach Claude.
    • Inspects prompt content and attachments in real time against customizable policies including PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. exposure, malicious URL detection, and prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools..
    • Extends consistent policy enforcement across the full Claude enterprise suite: Claude Chat, Claude Design, Claude Enterprise, Claude Platform, Claude Cowork, and Claude Code.
    • Creates a complete audit trail of every prompt, response, and tool execution alongside the actions Atlas took, surfaced via the Inference Hooks integration for governance and compliance teams.

    4 details in Everything

57. Varonis updates: 2026-08-07 Aug 7, 2026 · release notes

    Varonis Atlas adds Claude inference hooks, Gemini investigation, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Registries/Dashboard, and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. AI assessment capabilities

    • Supports Claude inference hooks for inline policy evaluation across Claude Chat, Code, Cowork, and Design.
    • Provides a new onboarding script to automate Microsoft Copilot Studio environment setup.
    • Includes prompt and response activity from enterprise Gemini deployments in AI Investigation.
    • Supports direct ingestion of external activity through Azure-hosted data planes.
    • Introduces MCP Registries for governing approved MCP connections across projects and agents.

    +10 more show less

    • Adds the MCP GatewayMCP GatewayA server that sits between MCP clients and one or more Model Context Protocol backends, routing tool calls and aggregating context sources so a single endpoint exposes many AI-agent integrations at once. Dashboard for centralized visibility into MCP traffic and tool activity.
    • Displays MCP-related security findings directly on applicable resource pages.
    • Allows configuration of a dedicated evaluator LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. for session policies.
    • Adds descriptive session names to AI Investigation.
    • Provides new event table filters in AI Investigation to narrow results by actor.
    • Enables automatic rerunning of previously failed Red Team tests.
    • Simplifies AI Compliance management through a redesigned unified framework and evidence workflow.
    • Supports OWASP AI Testing Guide assessments for agentic behavior, embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. manipulation, model/data poisoning, and supply-chain tampering.
    • Combines approved purpose and observed security posture in Agent resource reviews.
    • Extends Atlas Claude Cowork plugin support to Windows.

    15 details in Everything

58. Detect agent intent drift and rogue activity with Agent IBAC seen Aug 4, 2026 · issue 035

    Varonis Atlas adds Agent IBAC to detect AI agent intent drift and quarantine rogue agent identities in real time.

    ⤢ ⤢ ⤢ ⤢
    • New Agent Intent-Based Access Control (IBAC) in Varonis Atlas validates that an AI agent's reasoning, tool usetool useA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions., and data access stay consistent with its original instructions — alerting on or blocking out-of-policy actions.
    • Intent drift detection monitors every agent action across sessions and provides a complete audit trail for every agent interaction.
    • When an agent crosses policy boundaries, Atlas can quarantine the agent's identity and block all subsequent actions for a defined window.

    3 details in Everything

59. announced Aug 3, 2026 · issue 058

    Varonis Atlas adds Agent Intent-Based Access Control (IBAC) to detect, block, and quarantine AI agents that drift from their intended instructions.

    ⤢ ⤢ ⤢ ⤢
    • New Agent Intent-Based Access Control (IBAC) capability in Varonis Atlas compares an AI agent's received instruction against its reasoning, tool calls, and data access in real time — alerting, blocking, modifying, logging, or routing actions to a human for approval when drift is detected.
    • Intent drift detection runs at three tunable sensitivity levels — lenient, balanced (default), and strict — to match enforcement aggressiveness to data sensitivity.
    • Full-session evaluation tracks every prompt, response, and tool call across a conversation session (keyed by conversation ID) to catch gradual or multi-turn drift, including jailbreak attempts spread across individually benign prompts.
    • Teams can write their own session policies in plain language and configure how many events must accumulate before evaluation runs.
    • Quarantine blocks the identity behind a violating session for a customer-configured window (from minutes to a full day), with an admin console showing all quarantined identities and controls to lift, extend, or make quarantine permanent.

    +1 more show less

    • A complete audit trail records every prompt, model response, tool execution, intent assessment, and guardrail action, surfaced via a conversation view and an expanded execution view showing underlying tool calls.

    6 details in Everything

60. Filter and export connected service accounts more efficiently Aug 3, 2026 · issue 057

    Varonis adds advanced filtering and CSV export for connected service accounts directly from the Connected Services page.

    ⤢
    └──▷ HOW TO FIND IT
    When auditing connected service accounts at scale, filter by advanced criteria and export the results to CSV for offline review or reporting.
    📍In the Varonis console, go to Connected Services › apply your advanced filter criteria › select Export to CSV.
    • Enables export of filtered connected service account results to CSV from the Connected Services page.
    • Adds advanced criteria filtering for connected service accounts on the Connected Services page.

    2 details in Everything

61. Varonis updates: 2026-08-03 Aug 3, 2026 · release notes

    Varonis Atlas adds Agent IBAC for AI agent access control and CSV export for service accounts.

    • Adds Agent Intent-Based Access Control (IBAC) to detect rogue AI agent activity
    • Adds CSV export capability from the Connected Services page

    2 details in Everything

62. changelog seen Aug 1, 2026 · issue 032

    Varonis adds Search & Export APIs, IP-based tenant lockdown, VAST multi-tenant visibility, and expanded AI agent governance in Atlas.

    • New Search API provides programmatic access to Varonis data — events, identities, resources, permissions, memberships, and alerted events — to support investigations, workflow automation, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents./SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. integrations.
    • Label lifecycle controls let administrators automatically remove or preserve Varonis-applied Microsoft Purview labels when the triggering conditions no longer apply.
    • Automatic label downgrade prevention compares existing Microsoft Purview labels against Varonis recommendations and only applies changes that result in stronger protection.
    • Segment information can now be included in Syslog messages, event publishing workflows, and MDDR escalation emails to improve alert routing and downstream correlation.
    • AI Investigation Sessions gain an Intent Timeline offering a chronological view of user intent, agent behavior, and tool activity within a session.

    +2 more show less

    • Atlas runtime monitoring and governance extended to Devin CLI, Devin Desktop, Google Antigravity, Kiro, and OpenAI Codex coding agents.
    • AWS Bedrock activity can now be ingested into Atlas for AI usage visibility, auditability, and runtime policy enforcement.

    7 details in Everything

63. Block unauthorized tenant access seen Jul 31, 2026 · issue 031

    Varonis SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. tenants can now restrict UI logins and API requests to approved IP addresses only.

64. Discover open shares across CIFS environments seen Jul 31, 2026 · issue 031

    Varonis adds Automatic Share Detection to find open shares across monitored and unmonitored CIFS environments.

65. Enhanced alert routing and MDDR escalations seen Jul 31, 2026 · issue 031

    Varonis adds segment information to Syslog messages, event publishing workflows, and MDDR escalation emails for richer alert routing.

    • Includes segment information in Syslog messages to improve alert routing and correlation in downstream SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. and SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. tools.
    • Adds segment context to event publishing workflows for richer automation across security operations pipelines.
    • Surfaces segment data in MDDR escalation emails to provide analysts with clearer origin context during incident response.

    3 details in Everything

66. Export Events and Audit data at scale seen Jul 31, 2026 · issue 031

    Varonis adds Export API to extract events and audit logs at scale for reporting, compliance, and SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. ingestion.

    • New Export API enables bulk extraction of events and audit logs as downloadable exports for compliance reporting and long-term analysis.

    1 detail in Everything

67. Gain more control over label lifecycles seen Jul 31, 2026 · issue 031

    Varonis admins can now configure automatic removal or retention of labels when triggering conditions no longer apply.

    • New label lifecycle controls let administrators choose to automatically remove Varonis-applied labels when their triggering conditions are no longer met, or preserve them for compliance continuity.

    1 detail in Everything

68. Preserve higher priority Microsoft Purview labels automatically seen Jul 31, 2026 · issue 031

    Varonis now automatically preserves higher-priority Microsoft Purview labels to prevent accidental downgrades.

    • Adds automatic protection against Microsoft Purview label downgrades: Varonis now compares an existing label to its recommended label and only applies a change when it results in stronger protection, honoring manually applied or third-party labels.

    1 detail in Everything

69. Secure Multi-Tenant VAST Environments with Greater Visibility seen Jul 31, 2026 · issue 031

    Varonis adds tenant-level visibility and monitoring for multi-tenant VAST Data environments.

    • Supports tenant-level visibility and monitoring for multi-tenant VAST Data environments, including tenant-specific activity, access patterns, and events.
    • Enables consistent security controls across shared VAST infrastructure while maintaining strong tenant separation.

    2 details in Everything

70. Classify tools by capability seen Jul 29, 2026 · issue 029

    Varonis Atlas can now classify tools by functional capability for improved policy evaluation and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. risk visibility.

71. Connect GitHub using least-privilege access seen Jul 29, 2026 · issue 029

    Varonis Atlas supports connecting GitHub via a read-only GitHub App for least-privilege repository discovery.

72. Discover AI resources in TypeScript repositories seen Jul 29, 2026 · issue 029

    Varonis Atlas now scans TypeScript repositories to discover and inventory AI resources and artifacts.

73. Discover Salesforce Agentforce resources through Hosted Services seen Jul 29, 2026 · issue 029

    Varonis Atlas now discovers Salesforce Agentforce AI agents and configurations via Hosted Services.

74. Expanded support for monitoring and governing coding agents seen Jul 29, 2026 · issue 029

    Varonis Atlas adds runtime monitoring and governance for Devin CLI, Devin Desktop, Google Antigravity, Kiro, and OpenAI Codex coding agents.

    • Adds Atlas runtime monitoring and governance support for Devin CLI, Devin Desktop, Google Antigravity, Kiro, and OpenAI Codex coding agents.
    • Enables logging, review, and evaluation of coding agent activity via Atlas runtime policies.

    2 details in Everything

75. Identify Agents, Tools, and MCPs faster seen Jul 29, 2026 · issue 029

    Varonis Inventory adds dedicated views for AI agents, tools, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. resources.

76. Ingest and monitor AWS Bedrock activity seen Jul 29, 2026 · issue 029

    Varonis Atlas now ingests AWS Bedrock activity for AI usage visibility, investigation, and runtime policy enforcement.

77. Manage Claude-hosted agents in Atlas seen Jul 29, 2026 · issue 029

    Varonis Atlas now surfaces Claude Managed Agent as a supported hosted service resource for inventory and governance.

78. Sync Copilot and ChatGPT Enterprise activity with Varonis DSPM seen Jul 29, 2026 · issue 029

    Varonis DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. now ingests Microsoft Copilot and ChatGPT Enterprise prompt activity for correlation with sensitive data context.

    • Syncs Microsoft Copilot prompt activity with Varonis DSPM to correlate AI interactions with sensitive data context and policy enforcement.
    • Syncs ChatGPT Enterprise prompt activity with Varonis DSPM to improve investigation workflows and sensitive data visibility.

    2 details in Everything

79. Trace user intent and agent activity over time seen Jul 29, 2026 · issue 029

    Varonis AI Investigation Sessions gain an Intent Timeline for chronological tracing of user intent and agent activity.

    • Adds Intent Timeline to AI Investigation Sessions, giving investigators a chronological view of user intent, agent behavior, and tool activity throughout a session.
    • Enables tracing of activity leading up to and following a runtime policy trigger to understand causation in AI agent workflows.

    2 details in Everything

80. Varonis updates: 2026-07-27 Jul 27, 2026 · release notes

    Varonis adds Search API, Export API, IP allowlisting for tenants, and improved label lifecycle management

    • Adds programmatic access to events, identities, resources, permissions, memberships, and alerted events via the new Search API
    • Enables extraction of events and audit logs through a new Export API for reporting and long-term analysis
    • Allows restriction of UI logins and API requests to approved IP addresses for tenant access control
    • Supports tenant-level visibility and monitoring in multi-tenant VAST Data environments
    • Enables automatic detection of open shares across monitored and unmonitored CIFS environments

    +1 more show less

    • Allows administrators to configure whether Varonis-applied labels are automatically removed or preserved when conditions no longer apply

    6 details in Everything

81. Investigate files inside archives Jul 26, 2026 · release notes

    Varonis now allows analysts to drill into files within archives via the side panel.

    • Adds ability to investigate individual files within archived resources via the resource side panel with file-level classification results

    1 detail in Everything

82. View Snowflake Trust Center risks in the Varonis Risks dashboard Jul 19, 2026 · release notes

    Varonis Risks dashboard now displays Snowflake Trust Center risks for posture, configuration, and data-centric assessments.

83. Secure Claude Code and Claude Cowork with Varonis Atlas seen Jul 15, 2026 · issue 015

    Varonis Atlas adds native coverage for Claude Code and Claude Cowork with runtime guardrails and AI activity monitoring.

    ⤢
    • Adds direct integration with Claude Code and Claude Cowork, extending Atlas coverage across the full Anthropic enterprise Claude suite.
    • Enables runtime guardrails that can block, modify, or alert on risky AI behavior in real time.
    • New AI activity monitoring detects exposure of sensitive data, credentials, API keys, and regulated information with user, project, resource, and token-usage context.
    • Provides visibility into agent artifacts — skills, memory files, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. configurations — to surface persistent instructions and detect manipulation attempts.
    • Delivers a complete inventory of agents, tools, and supporting resources across Claude Code, Claude Cowork, Claude Enterprise, and Claude Platform.

    5 details in Everything

84. Discover sensitive Salesforce objects with AI-powered monitoring recommendations  Jul 15, 2026 · release notes

    Varonis adds AI-powered monitoring recommendations for sensitive Salesforce objects.

    • Introduces Varonis AI classification to identify the most appropriate object monitoring scope across all objects in an integrated Salesforce account

    1 detail in Everything

85. Secure Claude Code and Claude Cowork with Varonis Atlas Jul 14, 2026 · release notes

    Varonis Atlas now supports direct integration with Anthropic's Claude Code and Claude Cowork for runtime guardrails and monitoring.

86. Access request shortcut in Windows Explorer seen Jul 13, 2026 · issue 014

    Varonis adds a Windows Explorer right-click shortcut so users can request file access without IT intervention.

    └──▷ HOW TO FIND IT
    Grant end-users a self-service access request flow from within Windows Explorer to reduce IT helpdesk tickets.
    📍In Windows Explorer, right-click a file or folder you lack access to, then select the Varonis access request option from the context menu to submit a request.
    • New right-click context menu in Windows Explorer lets users request access to files and folders directly, without copying paths or contacting IT.

    1 detail in Everything

87. Centralized MDDR escalation management seen Jul 13, 2026 · issue 014

    Varonis MDDR dashboard gains a direct link to Varonis Community for centralized escalation contact management.

    └──▷ HOW TO FIND IT
    Reach escalation contact management without leaving the MDDR dashboard — navigate directly from the new link instead of hunting through Community separately.
    📍In the Varonis Web Interface, go to the MDDR dashboard and click the Varonis Community referral link to manage escalation contacts.
88. Configurable rescan behavior for classification policies seen Jul 13, 2026 · issue 014

    Varonis now lets admins choose between incremental and full rescans when editing classification policies.

    └──▷ HOW TO FIND IT
    When updating a sensitive-data classification policy in a large environment, choose incremental mode to avoid a costly full rescan and limit impact to only new and modified files.
    📍In the Varonis console, navigate to your classification policy, make the desired edits, and when prompted select 'Apply to new and modified files only' or Full rescan of all files.
    • Adds configurable rescan behavior for classification policies: apply edits to new/modified files only, or trigger a full rescan of all files.

    1 detail in Everything

89. Exclude groups from request-based access workflows seen Jul 13, 2026 · issue 014

    Varonis lets admins exclude groups from request-based access workflows via the DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. API.

90. Group permission updates in near real-time seen Jul 13, 2026 · issue 014

    Varonis now propagates group-based permission changes in near real-time, eliminating access management delays.

    • Delivers group-based permission updates in near real-time, reducing lag when modifying access group memberships or entitlements.

    1 detail in Everything

91. Localized timestamps for Data Access Governance requests seen Jul 13, 2026 · issue 014

    Varonis Data Access Governance request timestamps now display in the customer's local time zone.

92. NFS support for Hitachi NAS seen Jul 13, 2026 · issue 014

    Varonis adds NFS monitoring for Hitachi NAS, covering activity auditing, permissions tracking, and data classification.

    • Supports NFS monitoring for Hitachi NAS data sources, enabling file and folder activity auditing.
    • Tracks permissions and ownership changes on Hitachi NAS over NFS.
    • Enables data classification and labeling for Hitachi NAS NFS content.

    3 details in Everything

93. Prioritized folder rescanning seen Jul 13, 2026 · issue 014

    Varonis adds on-demand prioritized folder rescanning to accelerate classification validation in critical areas.

    └──▷ HOW TO FIND IT
    After updating a sensitive-data policy, trigger an immediate rescan of the folders most likely to be affected rather than waiting for the next scheduled full scan.
    📍In the Varonis console, navigate to the folder(s) you want to prioritize, trigger an on-demand scan, and set the scan priority order to place those folders first.
    • Enables on-demand folder rescans with user-defined priority order, so high-value or policy-sensitive folders return updated classification results first.

    1 detail in Everything

94. Review and enforce automatic governance rules seen Jul 13, 2026 · issue 014

    Varonis DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. API now exposes automatic governance rules for governed groups, enabling programmatic visibility and on/off control.

    └──▷ TRY IT
    Query the DAG API to audit which automatic governance rules are active on a governed group before enforcing a policy change.
    copy

    $ curl -X GET https://<varonis-host>/api/dag/v1/governed-groups/<group-id>/automatic-rules \
      -H 'Authorization: Bearer <token>' \
      -H 'Content-Type: application/json'

    Disable an automatic governance rule on a governed group during a planned access review window.
    copy

    $ curl -X PATCH https://<varonis-host>/api/dag/v1/governed-groups/<group-id>/automatic-rules/<rule-id> \
      -H 'Authorization: Bearer <token>' \
      -H 'Content-Type: application/json' \
      -d '{"enabled": false}'

    • New DAG API endpoints provide full visibility into automatic governance rules configured on governed groups.
    • Enables programmatic enforcement: turn automatic governance rules on or off on demand via the DAG API.

    2 details in Everything

95. Secure Cursor with Varonis Atlas seen Jul 13, 2026 · issue 014

    Varonis Atlas now secures Cursor AI coding agents with real-time policy enforcement, session logging, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. skill inspection.

    • Adds direct integration with Cursor, the AI-native coding tool, providing real-time visibility into agent intent, data sensitivity, access patterns, and token usage.
    • Enables runtime policies to block, modify, or alert on risky agent actions before they impact sensitive data.
    • Introduces detailed session logging capturing prompts, tool usage, and executed actions for incident investigation and response.
    • Extends visibility to Cursor configurations and artifacts across runtime environments and source repositories including GitHub and Bitbucket.
    • Detects malicious MCP skills that attempt to manipulate agents, exfiltrate data, or introduce unsafe actions.

    5 details in Everything

96. Varonis updates: 2026-07-13 Jul 13, 2026 · release notes

    Varonis Atlas adds AI Intent Timeline, AWS Bedrock ingestion, Strands framework scanning, and Copilot Studio/Agentforce policies

    • Adds Intent Timeline to AI Investigation Sessions for chronological view of user intent and agent behavior
    • Adds runtime monitoring support for Devin CLI, Devin Desktop, Google Antigravity, Kiro, and OpenAI Codex coding agents
    • Adds AWS Bedrock activity ingestion into Atlas for visibility and policy enforcement
    • Adds synchronization of Microsoft Copilot and ChatGPT Enterprise prompt activity with Varonis DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores.
    • Adds dedicated Inventory views for agents, tools, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. resources

    +18 more show less

    • Adds capability-based classification for tools to improve policy evaluation
    • Adds discovery of Salesforce Agentforce resources through Hosted Services configuration
    • Adds GitHub connection via read-only GitHub App for repository discovery
    • Adds TypeScript support to Repository code scanning for AI resource discovery
    • Adds support for Claude Managed Agent as a hosted service resource in inventory
    • Adds evaluation of tool calls against prohibited capability categories in runtime policies
    • Adds dedicated investigation experience for MCP-related findings
    • Adds image-based test inputs to Red Team assessments for multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. pentesting
    • Adds new AI SPM policies for Copilot Studio environments
    • Adds new AI SPM policies to detect malicious or risky AI skills
    • Adds enhanced authorization, quarantine, and resource-level block rules to AI Usage Policies
    • Adds Python and PowerShell deployment scripts for existing coding agent integrations
    • Adds optional user attribution support to Claude Code runtime hooks
    • Expands Databricks discovery to include native AWS Databricks environments and Azure Databricks Agent discovery
    • Adds Strands framework support to agentic code scanning
    • Adds combined AWS runtime discovery with code scanning of associated runtime artifacts for AgentCore
    • Adds AI-powered documentation search within Atlas
    • Adds export functionality for offline review of supported documentation

    23 details in Everything

97. Varonis updates: 2026-07-08 Jul 8, 2026 · release notes

    Varonis Atlas adds Cursor AI agent monitoring and Salesforce ECA certificate-based authentication

    • Adds visibility into Cursor AI agent activity (intent, sensitivity, access, token usage) with runtime policies to block or alert on risky actions.
    • Adds support for Salesforce External Client Apps (ECA) with certificate-based authentication and AppExchange deployment.

    2 details in Everything

98. Varonis updates: 2026-07-05 Jul 5, 2026 · release notes

    Adds Confluence activity monitoring and whitelist-based access restriction capabilities.

    • Provides visibility into Confluence user activity including page views, edits, content creation, and attachment interactions.
    • Enables restricting access to exposed Confluence pages by replacing existing permissions with a defined whitelist of users and groups.

    2 details in Everything

99. Varonis updates: 2026-06-16 Jun 16, 2026 · release notes

    Varonis adds prioritized folder rescanning, Hitachi NFS support, Windows Explorer access requests, and multi-select data source filters to the DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. API.

    • on_demand_rescan allows admins to trigger scans on specific folders with priority ordering, accelerating validation of policy changes.
    • New NFS data source type for Hitachi NAS enables file/folder activity auditing and permissions tracking for Hitachi NFS volumes.
    • Right-click context menu in Windows Explorer now offers a direct Request Access shortcut, removing the need to copy paths or contact IT manually.
    • Data source filters across dashboards, analytics, and policy pages now support multi-selection of up to 1,000 sources with preview and deselection capabilities.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Classification records are now called classification hits in the web interface; classification rules are renamed to classification policies.
    • !Data source types Windows and Unix are renamed to Windows Server and Unix Server respectively.
100. Varonis updates: 2026-06-08 Jun 8, 2026 · release notes

     Varonis adds Salesforce ECA support, AWS EBSEBSAmazon's block-storage service for EC2 instances, providing persistent network-attached volumes that survive instance restarts and can be snapshotted, giving cyber tools durable, scalable disk without managing physical drives. multi-select scopes, Snowflake nested logic, and active role display.

     • Adds Salesforce External Client Apps (ECA) integration, replacing the previous Connected App authorization method
     • Enables multi-select and advanced filtering in AWS EBS scan scope templates via enhanced template configuration
     • Supports nested logical conditions in scan scope templates for Snowflake and databases

     3 details in Everything

101. Varonis updates: 2026-06-02 Jun 2, 2026 · release notes

     Varonis adds keyless GCP auth via WIFWIFWorkload Identity Federation is a Google Cloud mechanism that lets external workloads authenticate to Google APIs using short-lived tokens from a trusted identity provider, eliminating the need to manage long-lived service account keys., regional collectors, and cloud secret manager integrations.

     • Adds support for AWS Secrets Manager, Azure Key Vault, and Google Cloud Secret Manager as credential sources for database integrations
     • Adds the ability to assign cloud collectors by region for GCP
     • Adds support for Workload Identity Federation (WIF) for keyless GCP authentication
     • Adds integration with CyberArk for database credential retrieval and automatic rotation
     • Adds automatic deletion of GCP log files after ingestion

     +1 more show less

     • Improves classification monitor visibility to include all scan types

     6 details in Everything

102. Varonis updates: 2026-05-31 May 31, 2026 · release notes

     Varonis adds Actor Identity attribution for AWS, Databricks service principal isolation, and per-account Data Concentration control

     • Adds the Actor Identity field to the Activities page to reveal the real identity behind AWS activities (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. users, assumed roles, services)
     • Enables configuration of dedicated service principals for each Databricks workspace during integration
     • Adds per-account toggle for Data Concentration to optimize scanning efficiency

     3 details in Everything

103. Investigate database users across platforms May 28, 2026 · release notes

     Varonis adds centralized visibility into database users across Oracle, MSSQL, MySQL, and PostgreSQL.

104. Guided permission setup for databases May 20, 2026 · release notes

     Varonis adds guided onboarding for databases with tailored permission requirements.

     • New database onboarding flow includes built-in guidance for tailored least-privilege permissions.

     1 detail in Everything

105. Centralize Salesforce security insights in Microsoft Purview May 18, 2026 · release notes

     Varonis integrates with Microsoft Purview to centralize Salesforce classification results.

     • Adds integration with Microsoft Purview for centralized Salesforce security insights.

     1 detail in Everything

106. Varonis updates: 2026-05-17 May 17, 2026 · release notes

     Varonis adds Netskope integration, Nutanix NFS v3 support, exclusion flags for automatic labeling, and centralized DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. request management.

     • Ingest Netskope Secure Web Gateway events via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to monitor web proxy activity
     • Monitor file operations on Nutanix storage platforms using NFS v3 event support
     • Exclude files or folders from automatic classification-based labeling by applying exclusion flags
     • Regenerate collector activation codes at any time with automatic revocation of unused prior codes
     • Count only files located directly under a selected folder for precise top-level reporting

     +1 more show less

     • Access the new Requests page in Varonis Analytics to manage all Data Access Governance (DAG) requests

     6 details in Everything

107. Varonis updates: 2026-05-04 May 4, 2026 · release notes

     Varonis adds Salesforce classification mapping via Service Tags and local processing for ServiceNow

     • Ingests Salesforce Compliance Categorization values as Service Tags to highlight missing labels
     • Supports local data processing in the ServiceNow integration for data residency

     2 details in Everything

108. Service tags for Databricks resources May 3, 2026 · release notes

     Varonis automatically discovers and syncs service tags for Databricks resources to improve data labeling consistency.

109. Varonis updates: 2026-04-24 Apr 24, 2026 · release notes

     Varonis Atlas adds browser-based pentesting, AWS Assumed Role gateway auth, multi-modalmulti-modalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. guardrails, and selective logging

     • Adds browser-based pentesting capability to Varonis Atlas for assessing AI applications accessed through a browser
     • Enables AWS Assumed Role authentication in the Gateway for secure downstream access to Bedrock and other AWS integrations
     • Introduces multi-modal guardrails to evaluate and enforce policy across content types beyond text-only interactions
     • Adds Pentest Strategies to organize and execute attack approaches during AI red team assessments
     • Supports anomaly detectors in AI Investigation to identify unusual behavior patterns in runtime activity

     +3 more show less

     • Adds discovery for AWS Bedrock AgentCore resources as part of AI asset inventory workflows
     • Enables Runtime Policy Automations to trigger automated responses tied to runtime policy outcomes
     • Introduces Gateway Selective Logging to independently configure Prompt Logging and Operational Metrics Logging options

     8 details in Everything

110. Protect secrets, credentials, and PII across the development cycle Apr 21, 2026 · release notes

     Varonis adds Bitbucket, JFrog, Jira, Confluence integrations for DevSecOps coverage

     • Adds support for scanning secrets and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. in Bitbucket repositories via new integration
     • Adds support for scanning secrets and PII in JFrog artifacts via new integration
     • Extends detection to Jira boards for secrets and PII leakage
     • Extends detection to Confluence pages for secrets and PII leakage

     4 details in Everything

111. Varonis updates: 2026-04-16 Apr 16, 2026 · release notes

     Varonis enhances its analytics platform with new filters for account security, a centralized workspace for governance requests, and automated labeling capabilities.

     • Token issuer and Password policies filters in Account analytics detect malicious domains and validate passwords.
     • New Requests page in Varonis Analytics centralizes Data Access Governance (DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops.) request management.

     2 details in Everything

112. Tailored scan scopes for cloud storage Apr 13, 2026 · release notes

     Varonis adds tailored scan scopes for Google Cloud Storage and Azure Blob

     • Supports multiple scan scopes within a single Google Cloud Storage environment to allow tailored scanning strategies by data type or business need
     • Supports multiple scan scopes within a single Azure Blob environment to allow tailored scanning strategies by data type or business need

     2 details in Everything

113. Classification for Azure managed databases Apr 9, 2026 · release notes

     Varonis adds classification for Azure managed databases using side scans

114. Global availability for AI data classification Apr 1, 2026 · release notes

     Varonis makes AI-powered data classification globally available across all supported regions.

115. Varonis updates: 2026-03-30 Mar 30, 2026 · release notes

     Varonis adds support for customer-managed secrets in Databricks integration and Apply Salesforce Data Classification Labels action.

     • Supports customer-managed secrets from AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves., Azure Key Vault, or Google Cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. for the Databricks integration
     • Adds Apply Salesforce Data Classification Labels action to classify sensitive Salesforce data using Varonis advanced classification

     2 details in Everything

116. Export audit log activity Mar 23, 2026 · release notes

     Varonis adds capability to export detailed audit logs for cloud environments.

117. Varonis updates: 2026-03-22 Mar 22, 2026 · release notes

     Varonis adds AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves. key policy integration for S3 access analysis and full ServiceNow ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. table visibility.

     • Incorporates AWS KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. key policies into effective access calculations for encrypted Amazon S3 data to accurately determine exposure
     • Displays KMS key policy details directly in the UI for investigation workflows without leaving Varonis

     2 details in Everything

118. Varonis updates: 2026-03-09 Mar 9, 2026 · release notes

     Varonis adds MongoDB monitoring, ServiceNow ITSMITSMIT Service Management: a framework of practices for delivering and supporting IT services, covering ticketing, change control, and incident response. Cyber tools integrate with it to automate alert-to-ticket workflows. support, AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves. side-scanning, and a unified DB Security dashboard.

     • Adds monitoring and protection for ServiceNow ITSM environments, including record- and field-level classification, threat detection via login/CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. activity, CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. risk coverage, and CMDBCMDBA Configuration Management Database: a repository that stores records of IT assets and the relationships between them, giving cyber tools a single authoritative source for infrastructure context. discovery.
     • Supports AWS database side scans using customer-managed KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. keys to maintain strict encryption control.
     • Introduces Database Security dashboard with a unified view of sensitive data exposure, classification coverage, access behavior, and risk indicators across Azure, Databricks, Snowflake, AWS, and on-premises databases.
     • Adds database activity monitoring for MongoDB and MongoDB Atlas through the Gatekeeper Proxy with DNS multiplexing.
     • Enhances investigation filters and contextual columns to identify high-impact events, involved databases, and roles.

     5 details in Everything

119. Apply data classification policies only where they matter most Mar 3, 2026 · release notes

     Varonis adds targeted scoping for data classification policies by service and account

     • Adds ability to select specific services and accounts when applying data classification policies

     1 detail in Everything

120. Customer-managed encryption keys for Snowflake Mar 1, 2026 · release notes

     Varonis adds customer-managed encryption keys for Snowflake via AWS KMSAWS KMSAWS Key Management Service, Amazon's hosted service for creating and controlling cryptographic keys, giving cyber tools a durable, audited place to encrypt data without managing raw key material themselves., Azure Key Vault, or Google Cloud KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves.

     • Adds support for customer-managed encryption keys (CMEK) when integrating with Snowflake
     • Enables key supply from AWS KMS, Azure Key Vault, or Google Cloud KMS for data protection

     2 details in Everything

121. Varonis updates: 2026-02-15 Feb 15, 2026 · release notes

     Varonis adds IPYNB and ChatGPT classification, Netskope/E DR integrations, and DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. rules API.

     • Classify sensitive data in Jupyter Notebook (IPYNB) files
     • Customize global access groups for automated remediation by adding or removing CIFS Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. groups
     • Automate user disablement and endpoint quarantine via EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. integrations when threat detection policies trigger alerts
     • Classify ChatGPT conversation text based on active data classification policies
     • Use one Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. app to monitor all Azure Files storage accounts

     +11 more show less

     • Integrate Netskope Secure Web Gateway via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to send web proxy events for monitoring
     • Monitor VAST Data as a new data source, including SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./NFS views and real-time classification
     • Find NFS shares in the Management Console by automatically searching by share path when the name is missing
     • Automatically apply classification labels to files based on Varonis flags
     • Replace deleted files with stub text files containing key details in Data Lifecycle Automation workflows
     • Bulk upload governance metadata for resources and groups via a dedicated BulkOps UI
     • Retrieve full configuration of authorization rules on governed resources and groups via the DAG authorization rules API
     • Filter Account analytics by Token issuer and Password policies to detect malicious sign-ins and verify password compliance
     • Use a new Informational severity level for detections that do not require action
     • View cloud system health alerts in the System Health page of the Varonis Web Interface
     • Protect sensitive content in Confluence environments by applying Varonis data protection

     16 details in Everything

122. Classify JSONL and NDJSON Files Feb 8, 2026 · release notes

     Varonis adds classification support for JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. and NDJSONNDJSONA text format where each line is a self-contained JSON object, making it easy to stream, append, and parse large datasets record-by-record without loading the whole file into memory. files used in AI training sets.

     • Adds classification coverage for JSON Lines (JSONL) and Newline-Delimited JSON (NDJSON) file formats.

     1 detail in Everything

123. Varonis updates: 2026-02-02 Feb 2, 2026 · release notes

     Varonis 2026-02-02 adds Google Cloud integration user configuration, dedicated exposure column, and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. coverage in Sensitive items widget

     • Adds Change Integration User option during Google Cloud account setup to update the integration account from Configuration > Connected Services.
     • Moves exposure tags (public, private, org-wide) into a dedicated Exposure column to enable direct filtering and insight management.
     • Extends the Sensitive items widget to fully cover sensitive items containing PII.

     3 details in Everything

124. Gain more control over Microsoft Information Protection (MIP) labels  Jan 28, 2026 · release notes

     Varonis adds priority-based override and manual label preservation options for Microsoft Information Protection (MIP) labels.

     • Adds option to always apply Varonis MIP labels and override existing ones
     • Adds priority-based override mode for MIP labels so higher-priority labels win
     • Adds ability to preserve manual MIP labels by ignoring conflicting automated labels

     3 details in Everything

125. Increased visibility with Data Locale per Row in Item Analysis Jan 25, 2026 · release notes

     Item Analysis now shows Data Locale per row in tables for validated classification insights.

     • Adds Data Locale column to Item Analysis table views, displaying the locale value for every row in an analyzed table

     1 detail in Everything

126. Varonis updates: 2026-01-12 Jan 12, 2026 · release notes

     Varonis adds encrypted labels for more file types, DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. API staleness fields, unified Entity filter, and BulkOps CSV/PS onboarding

     • Adds isStale (Boolean) and staleSinceTimestamp (DateTime) fields to the DAG API to identify dormant access
     • Introduces Hide Nested Group Members of Excluded Groups filter in the Managed User Level Permissions report
     • Enables bulk upload of managed folders and groups via structured CSV and PowerShell module in BulkOps
     • Adds Classification record type (direct) column and filter to show matched patterns/dictionaries for files, messages, and aggregated items
     • Supports applying labels with encryption to .txt, .bmp, and .xml file types

     +4 more show less

     • Displays Data Access Governance (DAG) reports directly in the UI with up to 50,000 results without export
     • Adds Entity unified identity filter to investigate activity across all user accounts on supported platforms
     • Enables filtering SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. (CIFS) and NFS file-access events by application protocol-type metadata
     • Supports NetApp ONTAP Cluster Mode access-denied events via FPolicy including NTFSNTFSThe default file system format for Windows, developed by Microsoft, storing files with rich metadata and access controls; cyber tools target it to parse artifacts like timestamps, alternate data streams, and the MFT. permission failures from ONTAP 9.13.1

     9 details in Everything

127. Improve AWS access analysis with deeper KMS key policy visibility Jan 11, 2026 · release notes

     Varonis adds KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. key policy visibility to AWS access analysis for better data exposure insights.

     • Incorporates KMS key policies into AWS access analysis to clarify who can access encrypted data

     1 detail in Everything

128. Secure your Confluence with misconfiguration detection and permission analysis Jan 4, 2026 · release notes

     Varonis adds Confluence Cloud misconfiguration detection and permission analysis to identify risky settings and excessive access.

     • Adds Confluence Cloud misconfiguration detection to pinpoint risky settings and publicly shared content with remediation steps
     • Adds detailed permission insights for Confluence Cloud to reveal excessive or unused access for least privilege enforcement

     2 details in Everything

129. Varonis updates: 2025-12-02 Dec 2, 2025 · release notes

     Varonis adds AWS Security Hub integration and Exact Data Matching for sensitive data discovery.

     • Adds AWS Security Hub integration to cut alert noise and accelerate remediation
     • Enables Exact Data Matching (EDM) in Data Discovery & Classification to reduce false positives

     2 details in Everything

130. Varonis updates: 2025-11-27 Nov 27, 2025 · release notes

     Varonis adds CyberArk credential management integration and Azure NetApp Files monitoring

     • Adds CyberArk integration to manage credentials for Varonis operations without manual password entry
     • Enables monitoring of Azure NetApp Files for sensitive data visibility

     2 details in Everything

131. AWS GovCloud Aug 28, 2025 · release notes

     Varonis adds AWS GovCloud integration to Varonis for DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. service.

132. Varonis updates: 2025-07-28 Jul 28, 2025 · release notes

     Adds imPAC LABS integration for centralized risk visibility in Varonis Next-Gen DAMDAMDatabase Activity Monitoring — a category of tooling that intercepts and logs database queries and transactions in real time, letting cyber tools detect unauthorized access or anomalous behavior without modifying the database itself..

133. CSPM Enhancements Jul 22, 2025 · release notes

     Varonis CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. adds detection for 600+ cloud misconfigs and integrations with Wiz and Azure Policy.

     • Adds detection for more than 600 cloud misconfigurations
     • Adds integration with Wiz to ingest risks
     • Adds integration with Azure Policy to ingest risks

     3 details in Everything

134. Varonis MCP Server Jun 10, 2025 · release notes

     Varonis MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. launch simplifies AI agent execution for data security workflows.

     • Releases the Varonis MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Server to simplify how customers use AI tools and agents to execute complex workflows.

     1 detail in Everything