Part ofPosture and Discovery
Find Sensitive Data Across Cloud and File Storage
Scan Amazon S3, Azure storage, Google Cloud Storage, local and network files, documents, images, and archives to see exactly where sensitive information lives.
Product overview
Sensitive data does not live only in databases. It also accumulates in buckets, shared folders, documents, images, and archives. DataSunrise finds it and shows the exact file or object behind every result.
Create a repeatable discovery task, choose what to inspect, apply built-in or custom Information Types, and review the findings in one place.
Use the results to investigate unexpected storage, prepare compliance evidence, and plan the next security action.
How it works
Run the same discovery process across object stores, shared files, documents, images, and archives.
Add credentials and choose the buckets, containers, shares, or paths to inspect.
Select content, classifiers, OCR, archive handling, and the amount of each file to analyze.
Start the task immediately or on a schedule. Incremental scans can focus on new and changed content where available.
See the path, Information Type, statistics, and processing status, then export reports or reuse findings in Object Groups.
Each run keeps its scope, settings, and findings together, so teams can repeat the scan and compare results over time.
Product evidence
Product screens show how policy, evidence, and protection appear in practice.
Storage discovery capabilities
Bring cloud object stores, shared file systems, and local paths into the same discovery workflow.
Scope each task to the buckets, containers, shares, paths, tags, or files that matter to the review.
DataSunrise reads common data files and business documents, opens archives, and extracts text for classification.
| Content | Examples |
|---|---|
| Data files | CSV, JSON, XML, Parquet, SAS, and Avro |
| Documents | PDF, DOCX, PPTX, and additional formats handled through Apache Tika |
| Archives and compression | ZIP, 7z, RAR, TAR, GZIP, BZIP2, XZ, Zstandard, and other documented formats |
A task can inspect a complete file or a configured leading-byte range. Its processing report also identifies encrypted, damaged, oversized, or inaccessible content that needs attention.
Documents often contain sensitive information as images rather than selectable text. DataSunrise uses OCR to read supported image formats and image-based content inside PDFs, Word files, and presentations.
Native OCR works across connected storage. Amazon Textract adds an S3 processing option, while built-in image analysis can recognize MRZ documents and payment cards.
Run a task on demand or schedule it to keep the inventory current. For large stores, narrow the scan by path, tag, object filter, or file scope, and use incremental scanning to focus on new or changed content where available.
Large jobs can run across multiple DataSunrise servers. Results include scan statistics and processing errors, so teams can see what completed and what needs attention.
Each result shows the file or object path and the Information Type that matched. Security and privacy teams can use that evidence to investigate unexpected storage, plan cleanup, answer compliance requests, and prioritize protection.
Export selected findings to CSV or PDF, or add them to Object Groups for later DataSunrise policies.
Need protected file copies? Static Data Masking creates masked CSV, JSON, and XML files. Need broader cloud inventory and posture context? Active DSPM brings those findings into the same platform.
Yes. DataSunrise connects directly to Google Cloud Storage with a service account and scans selected buckets and paths.
Yes. DataSunrise processes ZIP, 7z, RAR, TAR, and other archive and compression formats, and reports files that need a different extraction approach.
Native OCR reads supported image content across connected storage. Amazon Textract adds an OCR option for content in Amazon S3.
Yes. File Static Data Masking writes protected CSV, JSON, and XML copies through a separate batch workflow.
Yes. DataSunrise can collect Amazon S3 Server Access Logs for audit and investigation.
Map the right workflow
