|
By Volodymyr Kuznetsov
Today, Cyberhaven is joining the Open Secure AI Alliance to help advance a future in which enterprises can adopt open-source AI without compromising security, compliance, or control over their data. Cyberhaven is betting on a world where companies are free to choose from many models, agent frameworks, and open harnesses, as well as run them on infrastructure they control. That choice matters. Enterprises will not standardize on a single model or AI platform.
|
By Cyberhaven
A board meeting agenda gives the CISO ten minutes to talk about AI. Walking in with a shadow AI tool count or a list of blocked prompts does not answer the question directors probably have: what happens if this goes wrong, and who is accountable when it does? Boards increasingly carry direct exposure for AI oversight failures, from regulatory scrutiny to shareholder litigation.
|
By Cyberhaven
Security teams that tighten insider threat controls usually hear about it fast, and not from attackers. Sales reps complain they cannot share a deck with a prospect. Engineers say a blocked upload cost them an afternoon. The business assumes that stopping data loss and staying productive are opposing goals, and every blanket policy that blocks first and asks questions later reinforces that assumption. They do not have to be opposing goals.
|
By Cyberhaven
According to new research from Cyberhaven Labs, drawn from real-world data movement events and active user counts across Cyberhaven's enterprise customer base between December 2025 and June 2026, Claude Desktop usage grew 1,233% between January and June 2026.
|
By Cyberhaven
Every data security program still gets built around a two-state model: data in motion and data at rest. It made sense when data had a network path you could log and a storage location you could lock down. This approach makes a lot less sense now that the same file can sit at rest in Google Drive one minute and get pasted into a Claude or ChatGPT prompt the next, with no firewall event to mark the handoff.
|
By Nishant Doshi
We're living through the biggest shift in how work gets done in a generation. In every industry, every company is becoming an agentic enterprise, meaning a business where humans and autonomous AI work side by side. What makes an agentic enterprise successful is its workflows: how it combines intelligence, both human and machine, with its proprietary data.
|
By Cyberhaven
Most data loss prevention (DLP) programs start with a budget decision disguised as an architecture decision. Cover the SaaS layer first, since that is where most collaboration tools live, or cover the endpoint first, since that is where users actually act on data. Whichever layer gets funded first tends to become the program's foundation by default, not by design. That default has unintended consequences for data security.
|
By Volodymyr Kuznetsov
An OpenAI model evaluation, run with safety guardrails deliberately reduced to stress test raw capability, broke out of its test environment and reached Hugging Face's production servers weekend of July 11–12, 2026, with disclosure occurring July 16. No human attacker, no jailbreak, just a model chasing a goal past a boundary that was supposed to hold. Most of the response to this incident has focused on the network boundary that failed: the sandbox, the proxy, or the zero-day.
|
By Cyberhaven
Most data exfiltration does not look like a policy violation while it is happening. An employee moves a file to a personal cloud account they use every day. A contractor pastes source code into a chatbot to get help debugging. An AI agent with standing access to a shared drive pulls a document into a workflow no one is watching. None of it trips a keyword match, because none of it was written with a banned word in the payload.
|
By Cyberhaven
Most DLP rollouts stall in the same place. The classifier flags a file as "confidential," but nobody, including the DLP solution itself, can say why, where it came from, or whether that label still matches what's inside the file six months later. Data discovery and data classification get bundled together in nearly every vendor pitch, but they solve different problems, and the gap between them is where false positives, stale labels, and missed exfiltration events live.
|
By Cyberhaven
he video outlines how Cyberhaven's Data Security Posture Management (DSPM) provides a continuously updated, context-aware inventory of data at rest.
|
By Cyberhaven
AI changed work, Cyberhaven protects it. Cyberhaven exists to protect the way enterprises actually work today: with AI agents accessing, moving, and acting on data across every workflow. In this video, we share Cyberhaven's mission and our stance on data security for the agentic enterprise.Traditional data security, built for files at rest, wasn't built for AI agents acting at machine speed. Cyberhaven traces data through its full lifecycle and adapts protection as context changes, so security keeps pace with how work actually happens.
|
By Cyberhaven
Turn every analyst into a power user. Security investigations shouldn't take 45 minutes of tab-switching and manual querying. In this 20-minute walkthrough, Cyberhaven Director of Product Management Dave Stuart demos the Analyst Plugin, and shows how a single conversation replaces the queue.
|
By Cyberhaven
In this video, you will learn the five questions every data leak investigation must answer to be defensible — what the data is, where it originated, who accessed it, where it spread, and the fastest containment step — and why the visibility gap in most security stacks makes those questions impossible to answer instantly. You will also learn how combining DSPM baseline inventory with real-time data lineage replaces the high-stress scramble with surgical containment and audit-ready proof, so you move from "I think we're safe" to "here is the proof.".
|
By Cyberhaven
In this video, you will learn why locking down source systems like your CRM, HR database, and S3 buckets leaves your real risk surface exposed, how one regulated file fragments into CSV exports, screenshots, scripts, and AI prompts that shed their security context at every hop, and why both legacy DLP and traditional DSPM fail to act on these invisible derivatives. You will also learn how lineage-focused DSPM tracks the provenance of the data payload itself — every copy, paste, and save — so you can enforce policy on fragments instead of guessing from patterns.
|
By Cyberhaven
Autonomous AI agents are running on enterprise endpoints right now, accessing files, processing sensitive data, and executing actions outside the visibility of most security programs. This is Part 1 of Cyberhaven's four-part AI Security product launch series. What this video covers: Most AI security tools were built for browsers and SaaS apps. They cannot see agents operating at the OS level, coding assistants running in IDEs and CLIs, or MCP servers executing in the background. Cyberhaven's AI Security platform was built to close that gap.
|
By Cyberhaven
Security teams cannot govern what they cannot see. This is Part 2 of Cyberhaven's four-part AI Security product launch series, focused on Shadow AI Discovery and how Cyberhaven automatically inventories every AI app and agent running across your organization.
|
By Cyberhaven
Visibility without enforcement is just an alert backlog. This is Part 4 of Cyberhaven's four-part AI Security product launch series, covering how Cyberhaven enforces risk-based controls at the data level, not the tool level, using Data Lineage as the foundation.
|
By Cyberhaven
Knowing an AI tool exists is not the same as knowing what it did with your data. This is Part 3 of Cyberhaven's 4-part AI Security product launch series, covering Agentic AI Visibility and AI Risk IQ, Cyberhaven's evidence-based risk scoring system for every AI app and agent in your environment.
|
By Cyberhaven
In this video, you will learn why agentic browsers like ChatGPT Atlas, Perplexity Comet, and Arc have turned the browser into a double agent inside your enterprise, how shadow adoption is bypassing MDM and endpoint controls in days, and why indirect prompt injection creates an attack surface your file-based DLP cannot see. You will also learn how data lineage replaces noisy content inspection with origin-and-destination tracking, so you can stop the leak without blocking the tools your business depends on.
|
By Cyberhaven
Dive into our expertly curated DLP program checklist that will align with your organization's ambitious business and catapult them forward.
|
By Cyberhaven
In this guide we demystify DLP to distill the basics of DLP program development. Learn the essentials required to create scalable data security and data protection programs.
|
By Cyberhaven
Data is leaving your company in ways that didn't exist years ago-AirDrop, generative AI, and more. Legacy DLP hasn't kept up; now it's time to invest in more forward-looking solutions.
|
By Cyberhaven
DDR makes it possible to stop data exfiltration across all channels with one product and one set of policies.
- August 2026 (4)
- July 2026 (21)
- June 2026 (25)
- May 2026 (29)
- April 2026 (14)
- March 2026 (11)
- February 2026 (9)
- January 2026 (11)
- December 2025 (10)
- November 2025 (6)
- October 2025 (3)
- September 2025 (6)
- August 2025 (7)
- July 2025 (10)
- June 2025 (1)
- April 2025 (8)
- March 2025 (6)
- February 2025 (2)
- January 2025 (2)
- November 2024 (1)
- October 2024 (1)
- September 2024 (5)
- August 2024 (3)
- July 2024 (3)
- June 2024 (2)
- May 2024 (1)
- April 2024 (1)
- March 2024 (2)
- February 2024 (2)
- January 2024 (2)
- November 2023 (1)
- April 2023 (1)
Cyberhaven detects and stops the most critical insider risks to your most important data.
Let’s face it, data security products never lived up to our expectations and now that the way we work is changing they can’t keep up. Cyberhaven solves these challenges so companies can finally protect their data.
Data Detection and Response:
- Understand how data flows: See what systems store different types of data and how data moves within the company to new places and people.
- Stop data exfiltration anywhere: Block important data from leaving your control via cloud, web, email, removable storage, Bluetooth/AirDrop, and more.
- Accelerate internal investigations: Quickly understand an incident to determine user intent with a complete record of events before and during an incident.
- Detect and stop risky behavior: Instantly detect when a user handles important data in a risky way, stop them in real time, and coach them.
Trace your data to protect it like never before.