But an organization looking to protect itself from SaaS application and shadow IT risks still has much to gain from a standalone CASB. We’ve surveyed the CASB market to provide our recommendations for the top CASB vendors, along with buying guidance for those in the market for a CASB solution.<\/p>\n\n\n\n
Table of Contents<\/strong><\/p>\n\n\n\n Best for compliance<\/strong><\/p>\n\n\n\n Broadcom\u2019s solution for addressing visibility into cloud application security is the Symantec CloudSOC CASB. Big cybersecurity acquisitions of Blue Coat Systems and Symantec in the last decade provided the roots of Broadcom\u2019s CASB offerings. Paired with the Symantec cloud data loss prevention (DLP)<\/a> solution, the Symantec DLP Cloud includes CASB Audit, CASB for SaaS and IaaS, and CASB Gateway.<\/p>\n\n\n\n Contact Broadcom’s sales team for pricing details or find an official distributor<\/a> or consulting services partner<\/a>.<\/p>\n\n\n\n Best for reporting<\/strong><\/p>\n\n\n\n A part of the vendor\u2019s Autonomous Security Engine (ASE) solution, Censornet Cloud Access Security Broker comes integrated with adaptive multi-factor authentication<\/a>, email security, and web security. Censornet’s CASB<\/a> also offers Identity as a Service (IDaaS) for secure user authentication.<\/p>\n\n\n\n Censornet offers extensive reporting capabilities, including pre-built trend reports. Users can download and email reports to other members of the organization or to customers. Multiple report views allow security teams to report by device, threat level, user, and other views.<\/p>\n\n\n\n The email security plan starts at \u00a31.70 per user\/month. The web security and antivirus plan starts at \u00a32.30 per user\/month. The CASB plan starts at \u00a32.50 per user\/month. To receive an exact quote for your business, contact the sales team.<\/p>\n\n\n\n Read more about application security<\/a><\/strong><\/p>\n Best for risk analysis<\/strong><\/p>\n\n\n\n Forcepoint\u2019s CASB products focus on protecting sensitive data and critical applications. Forcepoint’s cloud audit and protection capabilities are designed for real-time activity monitoring and analytics. Forcepoint has added to its CASB offerings with technology acquisitions from Imperva and Bitglass.<\/p>\n\n\n\n It uses malware engines from CrowdStrike and Bitdefender to halt malware that’s transferred between users to SaaS applications.<\/p>\n\n\n\n Forcepoint offers a demo to potential customers. Contact its sales team for a specific quote for your enterprise.<\/p>\n\n\n\n Best for zero trust<\/strong><\/p>\n\n\n\n iBoss offers CASB as a product in the Application and Data Discovery capabilities of its zero trust platform. iBoss restricts data transfers in corporate systems, redirecting file uploads and other transfers to company accounts if a user tries to send business data to a personal account. iBoss\u2019s CASB offerings are particularly useful for social media and Google and Microsoft cloud applications. The product is well rated by users and analysts alike.<\/p>\n\n\n\n iBoss has three zero trust plans, only one of which includes both inline and out-of-band API CASB features (Zero Trust Complete). The least expensive plan requires add-on pricing for both of the CASB features, while the median plan requires add-on pricing for out-of-band API CASB.<\/p>\n\n\n\n Best for protecting highly sensitive data<\/strong><\/p>\n\n\n\n Bolstered by the acquisition of CipherCloud, Lookout boasts a number of advanced CASB features like DLP, UEBA, zero trust, and integrated endpoint security. Users can scan historical cloud data to find open file shares and unprotected information. Lookout analyzes encrypted traffic from approved applications as well as unapproved ones and detects application activity even from administrators for potential malicious activity. Another highlight is digital rights management, which allows security teams to encrypt data and limit access to that data based on which applications and services are permitted to see it.<\/p>\n\n\n\n Lookout offers a CASB buyer’s guide for customers who want to learn more about the Secure Cloud Access product. To receive an exact quote from Lookout, contact the sales team.<\/p>\n\n\n\n Best for access controls<\/strong><\/p>\n\n\n\n Skyhigh Security’s CASB solution supports data loss prevention policies and blocks attempts to download corporate information to employees’ personal devices. Skyhigh uses both forward and reverse proxy for inline deployment. It provides integrations via API for a variety of business applications, including Slack, Zoom, and GitHub, as well as multiple identity and access management tools<\/a>. Skyhigh \u2014 which comprises McAfee’s former cloud business \u2014 includes the CASB tool as part of its SASE<\/a> platform.<\/p>\n\n\n\n Skyhigh offers a demo for potential customers. It has three plans: Essential, Advanced, and Complete. Note that the Essential plan doesn’t have endpoint data loss prevention. To receive an exact quote, contact Skyhigh’s sales team.<\/p>\n\n\n\n Best for Windows environments<\/strong><\/p>\n\n\n\n Microsoft Defender for Cloud Apps addresses DLP, compliance, discovery, access and other security functions across business environments like social media, SaaS apps, and email. Office 365 is, of course, a particularly strong use case.<\/p>\n\n\n\n Defender for Cloud Apps supports blocking downloads on untrusted devices. Admins can also label files based on the sensitivity of the data in the file, creating protective rules that limit how the data can be accessed and shared.<\/p>\n\n\n\n Note that unlike most of Microsoft’s security solutions, Defender for Cloud Apps doesn’t have a free trial specific to its product. Contact Microsoft’s sales team for further pricing information.<\/p>\n\n\n\n Best for security integrations<\/strong><\/p>\n\n\n\n Netskope has long been a leader in CASB technology, with continuous security assessment and compliance. The company has also packaged together a number of offerings as a SASE solution. Highlights of the CASB solution include the Cloud Exchange for tech integrations, including third-party security solutions like EDR<\/a> and SIEM, and malware blocking for both email and storage service.<\/p>\n\n\n\n\n
![\"Broadcom](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/01\/broadcom-logo.png\"){kind=logo}
<\/figure>\n\n\n\nBroadcom<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n\n![\"Censornet](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/04\/censornet-logo.png\"){kind=logo}
<\/figure>\n\n\n\nCensornet<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n![\"Forcepoint](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/02\/forcepoint-logo.png\"){kind=logo}
<\/figure>\n\n\n\nForcepoint<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n![\"iBoss](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/04\/iboss-logo.png\"){kind=logo}
<\/figure>\n\n\n\niBoss<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n\n![\"Lookout](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/04\/lookout-logo.png\"){kind=logo}
<\/figure>\n\n\n\nLookout<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n\n![\"Skyhigh](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/02\/skyhigh_security-logo.png\"){kind=logo}
<\/figure>\n\n\n\nSkyhigh Security CASB<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n\n![\"Microsoft](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/01\/microsoft-logo.png\"){kind=logo}
<\/figure>\n\n\n\nMicrosoft Defender for Cloud Apps<\/h2>\n\n\n\n
Pricing<\/h3>\n\n\n\n
Key features<\/h3>\n\n\n\n
\n
Pros<\/h3>\n\n\n\n
\n
Cons<\/h3>\n\n\n\n
\n
\n\n\n\n\n![\"Netskope](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/02\/netskope-logo.png\"){kind=logo}
<\/figure>\n\n\n\nNetskope<\/h2>\n\n\n\n
![\"Palo](\"https:\/\/www.esecurityplanet.com\/wp-content\/uploads\/2023\/01\/palo_alto_networks-logo.png\"){kind=logo}
<\/figure>\n\n\n\n