A Cloud Access Security Broker (CASB) is a policy enforcement point that delivers data and threat protection in the cloud, on any device, anywhere. There are three requirements for a CASB vendor: Management: Visibility and clean-up after high-risk events Security:  Preventing high-risk events such as data leakages and threat intrusions Zero-Day protection: Protection from known and unknown data leakage risks and malware threats Correspondingly there are three types of CASB: API-only that deliver only management. Such CASB uses API access to SaaS apps to remediate after data-leakage events. Multi-mode First-Gen that delivers management and security, but not Zero-Day protection.  Such CASB offer signature-based protection for known data leakage paths and a fixed set of applications Multi-mode Next-Gen that deliver management, security and Zero-Day protection.  Such CASB dynamically adapt to deliver protection for known and unknown data leakage risks and malware threats, on any app. Bitglass is the CASB with a true hybrid architecture. We use a combination of proxies and API integrations with cloud apps, ensuring complete coverage against all risk of data leakage as sensitive information moves beyond the corporate firewall. While the industry is making the shift to a multimode approach, Bitglass designed its solution from the beginning to reduce complexity and headaches for IT. Bitglass addresses all components of a multimode approach, including: Forward proxy, which requires light-weight installations on endpoints and is perfect for securing managed devices. Reverse proxy, which doesn’t require agents and is ideal for BYOD environments. ActiveSync proxy, for agentlessly securing data accessed and stored by mobile devices. API integration, which provides visibility and control over data at rest within cloud-based tools. The largest differentiator for Bitglass is its reverse proxy, something competitors have yet to achieve at scale with the same reliability. This is because Bitglass has patented AJAX-VM, proprietary technology necessary to ensure robust reverse proxy functionality. Additionally, Bitglass differs from the competition through the below:

• Patented, full-strength, searchable cloud encryption protects cloud data-at-rest while preserving user experience.
• Agentless mobile data protection and selective wipe ensure that Bitglass customers enjoy all of the benefits of an MDM solution without violating employee privacy or requiring the headaches associated with deploying and maintaining agents on endpoints.
• Its Zero-day Core, which includes advanced threat protection built for the cloud. While first-gen CASBs leverage signature-based engines for detecting known malware, Bitglass has partnered with Cylance to block both known and zero-day malware threats at upload, at download, and at rest within the cloud – for any app or device. Cylance’s solution is provided through Bitglass’ agentless, real-time protection platform – no endpoint installations are required.