Advanced Data Security | Workflow Automation & Playbooks

Playbooks enable you to automate almost any task

A playbook is a set of rules, conditions, and business logic combined to automate a task. Playbooks can ingest data, execute jobs, migrate and manipulate data, create tickets and incidents in external systems, and automate almost any task. You can invoke Playbooks via a scheduled job, triggered by a system event, or automated from an external API call. Alternatively, you can activate a playbook via the user interface.

Imperva Data Security Fabric (DSF) provides several dozen pre-packaged playbooks that carry out a wide variety of tasks. Many of these playbooks enable you to respond to outliers, anomalies, and threats – automatically notifying the appropriate team members.

You can create your own playbooks by starting from scratch or cloning and modifying an existing playbook. The versatility of these playbooks provides you with enormous analytical and automating power. Playbooks run as part of an automated process – for example, a scheduled job – or run at any time via the user interface.

Key features and benefits

There are more than 30 prebuilt playbooks available out-of-the-box in Data Security Fabric
You can create your own playbooks by starting from scratch or cloning and modifying an existing playbook
Catalog of over 2,000 pre-built integrations, including cross-SOAR orchestration so that you can coordinate end-to-end actions
Built-in playbooks include sensitive data alerts, importing assets, running or disabling scans, and discovering when repositories new data sources added to them

Eliminate manual processes that overload your team

Database security programs typically rely on extensive manual processes that limit the team’s capacity to develop new use cases. Imperva DSF takes process automation to a new, highly efficient level based on advanced workflows, data enrichments, embedded analytics, and orchestration to dramatically improve efficiency and throughput. Business process automation through Imperva Playbooks turns days of work into minutes while reducing the risk of human error and freeing up your team to focus on more strategic tasks.

Speed investigation and response operations
Automate any number of manual processes such as cloud database discovery, reporting sign-off, entitlement review, change reconciliation requests, and more
Combines event-level data from all monitored systems as well as metadata for context

Data-level SOAR integration: Built-in playbooks offer a mature approach to data breach prevention

Traditional data activity monitoring and logging tools flood security operations center (SOC) teams with low-value data and alerts, creating a significant data security challenge for organizations. An excess of low-confidence information can give rise to bottlenecks in event-level workflow communications as SOC teams struggle to prioritize alerts for remediation and decide which anomalous events warrant investigation. Manual steps are often required to enter these incidents into the organization’s Security, Orchestration, Automation, and Response (SOAR) platform, introducing more delays, disorganization, and potential for errors.

With automation provided by Imperva DSF playbooks, you can easily integrate high-value threat alerts with SOAR platforms to streamline and accelerate incident response processes. Imperva Data Risk Analytics (DRA) can automatically detect and classify data security incidents, trigger appropriate actions, and accelerate incident investigation and resolution.

2,000+ SOAR integration

Imperva DSF Data Risk Analytics, when integrated with ServiceNow™, can automatically triage data risk incidents

Imperva DSF Data Risk Analytics (DRA) offers a solution to the security staff shortage faced by CIOs and CISOs. With Imperva DRA integrated with ServiceNow, organizations can automate the triaging of data risk incidents, allowing security specialists to focus on high-impact data risk incidents and external threats while assigning less severe incidents to non-security staff such as data experts, access experts, direct managers, database owners, etc. Intelligent orchestration automation provides a cost-effective solution for organizations and ensures their data remains secure.

Learn more

Automate database discovery and gain visibility into unknown databases

You can’t protect what you don’t know about. Imperva DSF’s built-in Playbooks help you discover forgotten or rogue databases, classify sensitive data, and assess databases for vulnerabilities and misconfigurations. Automated data classification identifies systems in scope for audits and can pinpoint sensitive data locations.

Automate database discovery and gain visibility into unknown databases
Scan your enterprise network and identify database services and servers
Configure database discovery to scan specific network segments on-demand or at scheduled intervals (scan results include: IP address, ports used, and whether it’s new or existing)

Imperva Data Security Fabric protects all data types with a single system that delivers multiple business capabilities

Imperva Data Security Fabric is the first data-centric solution that enables your organization's security and compliance teams to quickly and easily secure sensitive data, no matter where it resides, with an integrated, proactive approach to visibility and predictive analytics.

Imperva Data Security Fabric is composed of cutting-edge orchestrated technical capabilities that work in unison to protect your data across your entire organization:

Data Discovery & Classification

Discover ungoverned data, classify all data, and assess vulnerabilities.

Learn more

Data Activity Monitoring

Gain complete visibility and ensure compliance with continuous monitoring, auditing and analyzing all data store and data types.

Learn more

Data Retention & Archive

Meet any data archiving requirement using the most cost efficient storage technology available.

Learn more

Data Risk Management

Detect and report non-compliant, risky, or malicious data access behavior across all of your data repositories enterprise-wide to accelerate remediation.

Learn more