SearchInform Enhances Transparent Monitoring for Linux Endpoints

SearchInform has enhanced the transparent monitoring capabilities of its next-generation DLP, Risk Monitor, by extending user awareness features to Linux-based endpoints. Corporate users working on Linux devices can now receive security notifications. When the system blocks a potentially risky action – such as copying data to removable device, sending a message, or printing a document – the user sees a pop-up notification explaining the reason for the restriction.

This update signifies the consistency of the transparent monitoring approach across SearchInform products. Under this approach, the information security system informs users about active restrictions, warns them about the risks associated with specific actions, and helps reinforce corporate security policies.

“Violation notifications are the first step toward engaging employees in information security processes,” comments Sergio Bertoni, Leading Analyst at SearchInform.

“When users see a blocking alert, they become aware that their actions may pose a threat to the organization. This has a disciplining effect, also reducing the likelihood of accidental violations and deterring potential malicious actors who understand that their attempts to bypass security controls will not go unnoticed. Transparency in security controls helps foster a culture of secure behavior among users,”  he explained.

The update complements transparent monitoring options already available in SearchInform products within Linux environments. For example, the system can layer on-screen watermarks of customizable visibility and activating condition: either continuously or when critical applications are opened. Such watermarks can serve as a constant reminder of security rules and prevent attempts to anonymously take and leak screenshots or photos of the screen.

Additionally, the DCAP system SearchInform FileAuditor supports visual document labeling that reflects the level of data sensitivity. The tool also allows users to manually classify files by assigning a data protection category (Confidential, Restricted, Public, etc.) or specifying access groups, for example, Legal Department Only.

ABOUT SEARCHINFORM

SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, Information Security outsourcing service.

Explore SearchInform’s full cybersecurity product portfolio, including DLP, DCAP, and insider risk management solutions.