I mainly use Varonis Platform to identify the overall security posture of an organization from a data security point of view. When you want to understand where exactly the critical data resides, it functions as a discovery tool. From an initial point, you can see where exactly the data resides. With that capability, it can also allow you to put a restriction if there is an open base. Overall, if you want to check your data from an initial point of view, Varonis Platform is the best use case you can consider.
Varonis
VaronisExternal reviews
External reviews are not included in the AWS star rating for the product.
Great for Securing, Monitoring, and Reporting on Data
Easy-to-Read Tables, Simple Navigation, and Excellent Support
Easy-to-Use Dashboard with Clear Data Visibility
One of the biggest advantages was how quickly we were able to realize value after deployment. The SaaS platform was straightforward to implement, and the dashboards and reporting capabilities made it easy for our teams to start identifying stale data, excessive permissions, and privacy risks almost immediately.
Varonis has also been instrumental in supporting our privacy and security initiatives by helping us classify sensitive data at scale and improve governance over access to critical information. The automation and alerting capabilities significantly reduced the manual effort required for investigations and monitoring.
What stands out most is the depth of insight the platform provides and the partnership approach from the Varonis team throughout the engagement.
Overall, Varonis has become a key component of our data security and privacy program, and I would highly recommend it to organizations looking to strengthen visibility and control over sensitive
Effortless Security Management and Responsive Support
Data security posture has improved and platform manages access and behavior analytics effectively
What is our primary use case?
What is most valuable?
The functions of Varonis Platform that I appreciate the most include the data transport engine, which is something I haven't seen in other DSPM tools. This engine allows you to move your stale data to an archive location in an automated solution that requires nothing from you. It is pre-filled and happens in the background, moving your data whenever required. This functionality has been coded into the platform itself.
I do use the data classification feature in Varonis Platform, and it is indeed useful because of the dictionaries, pre-built features, and custom classifiers it has, which is commendable. It also gives you the capability to write regex if you wanted. In comparison to Purview, I would rate it in second place, with Purview being the top one.
My opinion about the ML-based threat detection capabilities in Varonis Platform is that it doesn't have its own ML. What they did was integrate with Co-pilot as an extended feature. From the organization's perspective, organizations can simply do the scanning and everything from Co-pilot itself rather than going to the tool itself. From an AI use case, the threat intelligence covers more gaps and can detect an anomaly from a user perspective. If a person has regularly been using a particular folder, it detects those patterns. Earlier, an analyst would have had to write those rules, but now AI and ML in the system can actually detect those anomalies.
User behavior analytics in Varonis Platform is helpful for my company's security posture. UBA is an excellent feature and a classic example of integrating AI with the data security posture. There would be many actions done from a user end that you cannot treat manually. The AI capability and user behavior analytics understand how exactly a user is working on a day-to-day basis and how it normally goes. If there is anything abnormal, it should trigger an alert or an automated response action, which Varonis Platform has this capability inside the data alert module.
What needs improvement?
The potential areas of improvement I see for Varonis Platform are that it doesn't have a SIEM or SOAR console where you can see your incidents or a native style incident case management where you can see all your incidents and do the tracking of all those things. The endpoint part is also missing in Varonis Platform. It cannot inspect the DLP things. For example, when somebody is trying to print something, Varonis Platform cannot block that action. That is also one major use case that I see is missing from Varonis Platform.
For how long have I used the solution?
I have been working with the solution for about seven years.
How are customer service and support?
I would rate the technical support from the vendor between six and seven. I rate the technical support at this level because there are times when people are not skillful enough to understand the issue. You need to speak to them again and again and let them know about the process and what exactly the issue is. Then they understand and conduct what I would call an inside connect investigation. They do a lot of investigation and then come back to us. This takes a lot of time. The matter of how much time it will take is something I wish was faster, as sometimes you need a quick response. However, I do get my resolution every time.
How was the initial setup?
Varonis Platform's initial setup is simple because whatever the requirements are for implementing a solution inside an organization, all those features are enabled. A service account is required to navigate through the platform, which I believe is ultimately the same for each tool for their agent to run on. The setup is not complicated.
What other advice do I have?
The main benefits for me as an end user of Varonis Platform include its excellent performance from a security point of view. There is also a very good feature in its capability for basic IAM features where you can manage the ownership and file permissions. Earlier, you had to go into that particular folder to manage it, but now from Varonis Platform, you only have to go inside the console and see where exactly the open areas are and conduct those IAM activities rather than using a classical IAM tool such as Active Directory or an intranet. This means all you can do is just access it from Varonis Platform, which is a classical benefit I have received. I rate this product as an eight overall.
Actionable Data Visibility That Accelerates SOC Investigations
Accurate Sensitive Data Detection, but Pricing Can Strain Larger Budgets
Varonis: Powerful Data Security with Automated Discovery, Classification, and Fast Support
Ease of Use:
Pretty good once you get past the initial learning curve. The dashboards are clean, the visuals are intuitive, and you don’t need to be a power user to get meaningful insights. Also the onboading team will walk you through the process. 8/10
Ease of Implementation:
Implementation will takes a few weeks, especially when scanning large data sets, but the documentation and professional services support make it manageable. Starting small and expanding gradually worked well for us and avoided a painful “big bang” rollout. 7/10
Customer Support:
Excellent. Response times are quick, and the support team is knowledgeable and genuinely invested in helping you succeed. It feels more like working with a partner than a vendor. 10/10
Frequency of Use:
Daily. Between alerts, dashboards, and reporting, it’s fully embedded into our security and operations workflow.
Number of Features:
Very feature-rich without feeling bloated. Data classification, access remediation, threat detection, and automated cleanup all work together well. We’ve seen a noticeable reduction in our attack surface. 9/10
Ease of Integration:
Integrates cleanly with Active Directory, AWS, and our SIEM. The available connectors and APIs are straightforward, and we didn’t run into major integration challenges. 8/10
High Visibility and Exceptional Support
Has improved data visibility and protection while enabling automated compliance monitoring
What is our primary use case?
My main use case for Varonis Platform is for data classification on the user's machine, specifically for data visibility and protection.
A quick, specific example of how I use Varonis Platform for data classification and protection on users' machines is related to identifying and classifying sensitive data in one of the organizations, such as PR data or financial information, and monitoring user activities, including abnormal activities and risky behaviors.
Varonis Platform doesn't just classify and monitor the data; it also helps us understand user behavior, such as when users download or access large files of sensitive data, or share the same data outside the organization, allowing us to see real-time activities and take immediate action.
How has it helped my organization?
Varonis Platform has positively impacted my organization by providing clarity regarding data and permissions. Initially, we faced many issues related to data awareness among users. After implementing this solution, both the organization and users gained a clear understanding of managing sensitive and non-sensitive data, improving visibility, security, and compliance.
Using Varonis Platform for data classification has saved us time. With 1,000 users previously unsure about what files could be shared outside the organization, categorizing data enabled users to differentiate between public and sensitive data easily, thus saving time for both users and managers.
What is most valuable?
Varonis Platform offers multiple features for data protection, such as data discovery and classification. We can identify, discover, and classify sensitive data effectively, which is crucial given the DPDP law in India and GDPR. The platform also excels in access and exposure tracking, enabling us to monitor users, permissions, and reduce access to sensitive files. Additionally, it includes UEBA for behavior analytics and threat detection, making it valuable for compliance and audit readiness.
Varonis Platform has helped our organization primarily for DPDP compliance, although I currently don't have a specific example related to GDPR or HIPAA.
A unique feature of Varonis Platform that stands out to me is that, in the current market, it is one of the best data classification solutions available. Compared to others such as Forcepoint, Varonis Platform is agent-based and AI-driven for detection and response, identifying data based on its content and context, and it includes automated remediation and lifecycle automation, making it a leading product in the market.
What needs improvement?
While Varonis Platform is powerful, the initial data scanning and indexing can take significant time in large environments. However, this is not an issue in mid-level organizations.
I suggest enhancing tighter integration with third-party solutions, such as SIEM or SOAR platforms, for smoother incident response workflows. Standard compliance-related reports specifically tailored for the DPDP Act would also be beneficial.
I chose nine out of ten because, while it is an excellent solution, I would have given it a perfect score if there were standard reports for the DPDP Act and if the console were less complicated.
For how long have I used the solution?
I have been using Varonis Platform for around 1.6 years.
What do I think about the stability of the solution?
Varonis Platform is stable.
What do I think about the scalability of the solution?
Varonis Platform is highly rated for scalability. It operates effectively within our mid-sized organization and is adaptable as our data needs grow, supporting hybrid environments for future use.
How are customer service and support?
Customer support for Varonis Platform is very good. I would rate the customer support for Varonis Platform at nine out of ten.
Which solution did I use previously and why did I switch?
Before using Varonis Platform, we utilized the Titus data classification solution, specifically Forcepoint's solution, which was traditional and lacked many features and visibility, prompting our switch to Varonis Platform.
After using Forcepoint's data classification, we directly switched to Varonis Platform without evaluating other options.
How was the initial setup?
I monitor the effectiveness of Varonis Platform using its built-in dashboard and weekly risk reports that display data exposures, alert volumes, and remediation progress.
What about the implementation team?
Varonis Platform integrates with other security tools easily since it just requires APIs. For instance, we can forward Varonis Platform logs directly to our SIEM solution, integrate Active Directory for permission tracking, and also link it with cloud storage platforms such as O365, SharePoint, and OneDrive.
What was our ROI?
I have seen a return on investment mainly through time savings and improved security for sensitive data, making it a valuable investment.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup costs, and licensing for Varonis Platform has been good, with competitive costs. I believe it offers one of the best solutions available at this price point.
What other advice do I have?
I suggest enhancing tighter integration with third-party solutions, such as SIEM or SOAR platforms, for smoother incident response workflows. Standard compliance-related reports specifically tailored for the DPDP Act would also be beneficial.
I rate Varonis Platform at nine out of ten. Organizations serious about protecting their data should definitely consider Varonis Platform.