DLP filter and API firewall
Rover Obscura
Obscura inspects what applications send and receive, and stops sensitive or controlled information going where it should not. It is a data loss prevention filter and an API firewall in one application, built for estates where the applications are spread across sites rather than sitting behind a single perimeter.
Two jobs, one place to enforce them
Data loss prevention
- Inspects
- What applications send, and what they return
- Looks for
- Sensitive and controlled information leaving a boundary it should stay inside
- Acts
- Blocks, redacts, or flags according to the policy you set
- Records
- What was matched and what was done about it
API firewall
- Controls
- Which callers reach which endpoints, and with what
- Validates
- Requests and responses against expected shape, not just origin
- Suits
- Service to service traffic, where a network firewall sees an allowed connection and nothing more
- Scope
- Applied per application rather than per site
Distributed applications are the hard case
No single perimeter
When applications run across sites, vehicles, and cloud, there is no one chokepoint to inspect at. Obscura applies policy at the application rather than at a gateway everything happens to pass through.
Policy travels with the app
Moving a workload to another site does not leave its data controls behind, which is the failure mode most perimeter tooling has when the estate starts moving.
Built against NIST requirements
Designed around the NIST requirements for protecting controlled information, so the controls map onto what an assessor is looking for rather than needing to be translated.
Evidence, not just enforcement
Matches and actions are recorded, which is what turns a control that is working into a control you can demonstrate was working.