Qostodian continuously discovers, classifies, and remediates sensitive unstructured data at petabyte scale without copying it. Monitor workstations, file servers, M365, and cloud. Security enforced at the source.
Qostodian is a SaaS data security platform that provides continuous visibility, control, and intelligence over sensitive data across unstructured data sources. It operates using a zero copy architecture, ensuring data remains in its original location at all times.
The platform offers organization-specific sensitive data discovery and classification, risk analytics, policy enforcement, reporting, and automation. Users can interact with the platform and derive risk insights and reporting using natural language.
Built for enterprise, Qohash has attained external certifications for SOC 2, ISO 27001, and ISO 42001. See trust.qohash.com for a complete list of external assessments and certifications.
Highlights
Zero copy architecture
- data remains in your security production environment and complete coverage (no sampling)
- eliminate transfers, reduce exposure, and remove dependencies on centralized infrastructure and associated costs
Unified visibility across data, users, and LLMS
- enable safe AI adoption by addressing data risk at the source and applying policies to AI use
- gain real-time visibility into data access and exposure across all environments
- correlate activity from LLMs, cloud, file servers, and workstations
Trusted by clients in highly regulated industries
- Certified to the highest standards for reliability and security of information under SOC and ISO
- Supply chain integrity, including the highest levels under Supply-chain Levels for Software Artifacts (SLSA) v1.2
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This contract has one pricing dimension: covered entities. You buy access based on the number of covered entities. That count usually reflects your organization's headcount, measured by the number of human users in your identity management platform. As your user count grows, your covered entity count scales with it. There are no separate tiers, instance sizes, or usage add-ons to choose from. You commit to a set quantity of covered entities for the contract term.
Top-of-mind questions for buyers
What counts as one covered entity for billing purposes?
A covered entity maps to a human user in your identity management platform. The count usually reflects your organization's headcount. Each person tracked as a user counts as one covered entity. Service accounts or non-human identities are not the basis for this count.
How does my cost change if my organization's headcount grows during the term?
You commit to a set quantity of covered entities for the contract term. If your human user count rises, your covered entity count scales to match. Contact the vendor to adjust the committed quantity, since the marketplace data does not define an automatic overage mechanism.
What does the covered entities pricing include beyond user access?
The covered entities dimension covers use of the platform, which finds, tracks, and safeguards sensitive data. Pricing scales with your user count rather than data volume or scan targets. The marketplace data lists no separate add-ons or usage-based charges beyond this single dimension.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Please contact our customer success team at support@qohash.com or your dedicated technical account manager.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
The platform works well: the zero-copy is solid and the UDSI feature is really powerful. Pankaj is technically very competent, and the TAM model (Pankaj + Alexandre) provides a real advantage on the contractual level.
What do you dislike about the product?
API keys, OAuth tokens, webhooks: nothing is available out-of-the-box. You have to go through UDSI; it's doable, but it adds complexity. (Specific gap in the TELUS environment.)
What problems is the product solving and how is that benefiting you?
Today, TELUS discovers that there was a problem after a breach. Qostodian allows seeing the risk beforehand — who are the 50 users most at risk, which files should be deleted, where credentials are stored in plain text. With the deployment of Gemini and other AI tools at TELUS, sensitive data can end up in prompts or files accessible by these tools. Qostodian provides the necessary visibility layer to deploy AI responsibly.
Packaging and Containers
Discover Unknown Sensitive Data with Qostodian's Effective Solutions
Reviewed on Apr 29, 2025
Review provided by G2
What do you like best about the product?
Qostodian has been a great tool for helping us find sensitive data across a bunch of different sources (OneDrive, Sharepoint, Workstation, FileShare). It's fast, easy to use, and allowed us to discover sensitive data that we didn't know we had. We had a lot of false positives at first but most of them have all been fixed by their new improvements.
What do you dislike about the product?
At first, there were a lot of false positives, which made it harder to trust the results. A lot of it was because our internal data looked similar to sensitive pattern. The good thing is they've fixed a lot of it with updates, but some fine-tuning is still needed depending on your setup. They helped us to solve this problem.
What problems is the product solving and how is that benefiting you?
Qostodian helps us ensure that only authorized individuals have access to sensitive information and that this data complies with the latest regulations in our region.
François S.
Powerful Tool to reduce privacy organization risk
Reviewed on Apr 17, 2025
Review provided by G2
What do you like best about the product?
The tool is able to quickly give deep insights on the privacy information residing within the organization, by reporting and alerting. It is easy to focus on high risk sources or individuals, so the results come quickly.
What do you dislike about the product?
Access to raw data information is tricky
What problems is the product solving and how is that benefiting you?
Before the implementation of Qostodian, we always looked at trying to classify the information we had on a file level, but with Qostodian we are able to tackle it at the information level, so it give a more comprehensive reporting and it's easier to take action on specific type of information and it doesn't rely on classification. It's able to shed some light on forgotten places or broken processes.
Banking
Easy to use product with get customer service.
Reviewed on Jan 15, 2025
Review provided by G2
What do you like best about the product?
Great product out of the box, no need for custom rules. Team takes customer ideas into consideration for updates and features.
What do you dislike about the product?
A weakness is false positives on sensitvie data.
What problems is the product solving and how is that benefiting you?
IDentifying senstiive data and reducing risk around sensitive data.
Richard E.
Data Security Made Simple
Reviewed on Oct 22, 2024
Review provided by G2
What do you like best about the product?
I like the face that the agent allows me to scan all data on a workstation and server and catagorse the information and put it in a easy to understand output to allow for easy reporting
What do you dislike about the product?
I am not a fan that it also shows information that isn't needed as it will rank information that matches it criteria but will display this in the portal i think if the score is below 0.6 certain then the information isn't needed to be put into the report
What problems is the product solving and how is that benefiting you?
We are a large organisation and Data security is at the forefront for us so with Qohash we are now able to scan for sensitive data that is on the users computer and should be on the file shares, this benifits us as it allows us to make the workstation secure and we are confident that the data is secured