Varonis

Varonis Platform  solves critical questions for many organizations, such as where sensitive data resides, who has access to this data, whether the access is appropriate, and how this data is being used. Many of my clients are in the financial services, healthcare, insurance, and manufacturing domain, and they have been using this for multiple use cases. The number one use case is data governance, identifying secure sensitive information, and other very important use cases include compliance requirements for GDPR, HIPAA, PCI DSS, and Sarbanes-Oxley. Certain other use cases can be around insider threat monitoring and ransomware defense.

My client is using Varonis Platform , which focuses on data permissions, user access, and data movement within their organization. This is how they use this for all practical purposes, and they have been getting returns out of having very strong visibility into their unstructured data. They carry out fairly reasonable permission analysis and can further strengthen their permission-based regime within the organization. They use Microsoft 365, and Varonis Platform has a strong integration with Microsoft 365, which brings in good forensic capabilities as well. Varonis Platform provides great compliance support; it has a great classification engine that helps with insider threat detection and reduces manual effort by automating many processes, which is very important. They have been using this successfully for data discovery, classification, security posture management, access governance, and insider threat protection.

I discussed insider threat detection, ransomware detection, remediation using automation, compliance reporting, and incident investigation in forensics, and these capabilities sum up Varonis Platform.

Varonis Platform offers key features including data discovery, data classification, data analysis, governance, user and entity behavior analysis, also known as UEBA , which helps in ransomware detection, insider threat detection, and compliance reporting. It does a lot of automation from a remediation standpoint, as well as investigation and forensics.

The number one feature that makes the biggest difference for my clients is visibility into unstructured data; that is the most difficult for organizations to achieve. They do not have a good understanding of where sensitive data resides, who has access to this data, whether this access is appropriate, and how data is being used. Varonis Platform provides visibility, governance, threat detection, and automated remediation around data.

Varonis Platform is a great data discovery platform that provides visibility into sensitive data estimates and how it is being used. Clients have been able to reduce excessive permissions, strengthen their compliance posture, detect insider threats, and ransomware activity, which would otherwise be difficult and manual.

Varonis Platform is deployed in my clients' organizations in a combination of all types. Many clients use Varonis Platform in a largely SaaS-based model since it is a data security platform consumed in this way, and many organizations still operate hybrid environments. As far as Varonis Platform is in a position to get the data source and identify systems, it can discover and classify more secure data. Deployment in most of our clients is cloud-based, connecting to Microsoft 365, AWS , or other SaaS applications such as Salesforce . In other environments, it is a hybrid deployment with SaaS and on-premises, including file servers, NAS  devices, and AD servers.

I think about a few things regarding how Varonis Platform can be improved. The licensing pricing model and module licensing can be complex for customers to understand. Faster deployment could be beneficial, and there could be more flexibility regarding dashboard customization. AI-powered prioritization to reduce analyst workload could also be looked at. While I think it is a mature and capable platform, there are opportunities around simplifying licensing, accelerating deployment, improving risk management, and further reducing operational complexity.

There is no other relationship. I receive a twenty-dollar gift card.

I have advised many clients who have been using Varonis Platform for more than five years, and the first time I recommended this platform to a number of my clients was about three to four years back.

Varonis Platform is stable and mature. None of our clients have found any issues with it. In my experience, Varonis Platform is a stable and mature platform. It has been in the market for many years, widely deployed across large enterprises, and our clients are capable of handling large environments with significant volumes. It is a mature product with a long track record, widely adopted, and very reliable. Varonis Platform has been consistent and dependable in my experience.

Varonis Platform is highly scalable and designed to support large enterprise environments, which could have millions of files, thousands of users, and multiple data types. Scalability is generally considered one of its strengths.

Customer support is quite strong, and it could be a differentiator as well.

Varonis Platform was not being used before; this was the platform we started using because a need was identified at many client places. There were no piecemeal solutions or comprehensive solutions available, and many clients were either not using anything specific or had some competitors at version 2.0 level, but otherwise, no definite solution.

If it is a multiyear contract, then a good discount is available. The typical market perception is that Varonis Platform is more premium priced compared to other governance tools, but in large deployments, it is extremely handy, and you can justify the cost through various factors, including return on investment.

Varonis Platform has definitely reduced the risk of data breaches at many client sites and has definitely lowered manual effort; manual effort has decreased by seventy percent due to automating data classification and permission reviews. It has reduced audit preparation time and compliance efforts in evidence selection for GDPR, HIPAA, PCI DSS, and others. I have also seen a strong improvement in security operations with a focus on the introduction of mean time to detect and mean time to respond.

From the perspective of metrics, I can talk about some security metrics where insider threats have been detected. The percentage of detection of insider threat incidents has really gone up; at least the visibility has improved. It has reduced manual access reviews by anywhere between fifty percent to seventy percent. The time for audit preparation has reduced, and the number of compliance findings that have been remediated has decreased. This has reduced the regulatory and compliance risk as well.

I was considering a few options; however, there were a few clients who were using alternatives, but mainly I focused on Varonis Platform.

Varonis Platform's AI capabilities play a very important role in governance and security as it helps organizations understand what sensitive data is, who has access, whether the data is overexposed, and it does continuous monitoring of data while enforcing least privileged access. It definitely provides for sensitive data discovery, access governance, data exposure analysis, helps in compliance support, and provides aid in producing and maintaining audit trails, forensics, and automated remediation. While it is not an AI platform per se, it uses an AI engine to strengthen its data management capabilities, forming a strong foundation for enterprises.

I would advise organizations to treat using Varonis Platform not just as a security tool being deployed but as a data protection program, where the greatest value comes from visibility, excessive permissions, sensitive data exposure, and governance gaps. Everyone should start with high-risk data, establishing clear ownership and leveraging its automation capability as far as possible, cleaning up your permissions early, using automation, setting up alerts and policies, integrating with other workflow systems in your organization, and measuring success through risk reduction metrics. Focus on data exposure reduction and permission governance first, and look at outcomes through ROI eventually. This review has received a rating of nine out of ten.

Hybrid Cloud

Amazon Web Services  (AWS)

What do you like best about the product?

Reporting and automations are easy to setup and filter so you can focus on specific areas that are important to your business or send info to other teams that is relevant to them.

What do you dislike about the product?

Not all configuration items have moved to the cloud portal so there is still some switching between the on-prem collector and cloud portal.

What problems is the product solving and how is that benefiting you?

Finding sensitive files that can be accessed by more users than they should be

What do you like best about the product?

What stands out most is the visibility Varonis gives us into where sensitive data actually lives and who has access to it. It automatically discovers and classifies PII/PHI across our file shares and cloud storage, and surfaces overexposed data and excessive permissions that we'd never catch manually. It's turned a reactive process into a proactive one for us.

What do you dislike about the product?

Initial deployment and tuning are resource-intensive, especially in a larger or more complex environment. Getting the platform fully integrated, baselined, and producing high-signal alerts isn't a quick exercise — it took us several weeks of focused work plus support from professional services to really hit our stride. Worth it in the end, but be prepared to invest the time upfront.

What problems is the product solving and how is that benefiting you?

Before Varonis, we had limited visibility into where sensitive data lived and who could access it across our file shares and cloud storage. We knew we had overexposed data and stale permissions, but cleaning it up manually wasn't realistic. Varonis gave us a clear picture of our exposure and helped us systematically remediate it — locking down global access groups, removing unnecessary permissions, and moving toward a true least-privilege model. The benefit is a measurably smaller blast radius if an account is ever compromised.

What do you like best about the product?

There are a strong number of integrations available for both on-premises and cloud-based assets, which makes it easier to handle review and remediation.

What do you dislike about the product?

The interface can feel slow at times, and the email customization options are limited and lacking in features.

What problems is the product solving and how is that benefiting you?

They’re helping us move away from bad practices from the past, while also informing our user community about potentially better methods for doing their work and sharing their results.