Proofpoint DSPM
Compare with…Proofpoint DSPM discovers sensitive data and supports data-access analysis. Its Snowflake documentation describes different scan deployments, so require the architecture for the version being quoted. [1] [2]
Discovery & classification and Access governance [1]
Sources reviewed 4 sources
Data coverage
Read the scope beside each mark. Support for an environment does not establish every capability in every store.
- Microsoft 365
- Partial
The account documentation includes OneDrive and SharePoint scan accounts. Confirm Exchange, Teams and permission-remediation scope. [3]
- AWS
- Partial
Snapshot-based scanning is documented for Amazon RDS. Confirm the supported engines and infrastructure costs. [4]
- Google Cloud
- Partial
Snapshot-based scanning is documented for Google Cloud SQL. Other GCP data services need confirmation. [4]
- Snowflake and Databricks
- Partial
Snowflake classification, access analysis and native tags are documented. Databricks coverage is not established by these sources. [1]
- On-prem shares
- Unconfirmed
- SaaS apps
- Partial
Google Drive is a documented scan-account type. [3]
Unconfirmed means the reviewed sources do not establish coverage. How coverage is assessed
Deployment and cost
How it runs
The product page describes a Snowflake-native app. The onboarding guide also documents a scanner in a customer-owned AWS sidecar account. [1] [2]
- Deployment check
- Have Proofpoint identify which workflow and permissions apply to your quote.
Pricing and operating workload are not published in the reviewed sources.
Questions for the vendor
- Is the proposed Snowflake scanner a native app or a sidecar in your AWS account?
- Which findings can trigger a native access change rather than a notification or ticket?
- List scan, snapshot and warehouse compute charges outside the subscription.