NextLabs launches Salesforce and Snowflake security enforcers

NextLabs said it is now offering Enforcer products for Salesforce and Snowflake to add policy-based access control, data masking and segregation of duties to two major enterprise cloud platforms. The launch is aimed at helping companies apply Zero Trust controls to sensitive data without heavy application customization.

Why it matters: - Salesforce and Snowflake often hold customer, financial, operational and business data that security teams need to protect more precisely than legacy roles and permissions allow. - The new products are designed to help organizations limit who can see, change or share sensitive records and fields in real time. - The launch expands NextLabs’ Zero Trust approach across enterprise cloud apps and data platforms.

What happened: - NextLabs announced the availability of NextLabs Enforcer for Salesforce and NextLabs Enforcer for Snowflake. - The release extends fine-grained, policy-driven security to two widely used enterprise cloud platforms. - NextLabs also said the products build on existing support for ServiceNow, Microsoft 365, Dynamics 365, Databricks, AWS S3 and Azure Storage. - CEO Keng Lim said the new enforcers are meant to help organizations centrally manage authorization policies and dynamically protect sensitive information without extensive application customization.

The details: - NextLabs Enforcer for Salesforce adds dynamic, policy-driven authorization based on attribute-based access control, centralized policy management, dynamic record filtering, runtime data masking and policy-driven information sharing. - The Salesforce product evaluates access requests in real time using user, data, business transaction, environment, device, location, data classification and organizational context. - The Salesforce product can determine which records users can access and which sensitive fields should be masked. - NextLabs Enforcer for Snowflake provides fine-grained data access control, dynamic data filtering, dynamic data masking and policy-driven information governance. - The Snowflake product places a Policy Enforcement Point between Snowflake clients and the Snowflake service. - The Snowflake product evaluates requests using user, resource, SQL and business context. - The Snowflake product applies centralized ABAC policies across supported Snowflake interfaces. - Key capabilities include real-time ABAC, dynamic data filtering, dynamic data masking, centralized policy management through NextLabs CloudAz, policy enforcement across Web Console, CLI and REST API, fine-grained business transaction authorization, allowed user list obligations, segregation of duties enforcement, and centralized audit and monitoring. - Supported sensitive data types include PII, customer identifiers, financial information, employee information, pricing information and confidential business information.

Between the lines: - The products are built to move authorization decisions out of the application and into a centralized policy layer. - That design can make least-privilege access easier to enforce across changing business conditions, organizational roles and regulatory demands. - The launch also positions NextLabs to compete on cross-platform policy consistency, not just point security features.

What's next: - NextLabs said the enforcers are intended to help organizations adapt data protection policies as user roles, business needs and regulatory requirements change. - The company is also using the launch to reinforce a broader data-centric security strategy across cloud, hybrid and on-premises environments.

The bottom line: - NextLabs is betting that centralized, attribute-based controls will give enterprises tighter security around Salesforce and Snowflake data without forcing major changes to the applications themselves.