Identity Finder boasts a full palette of features and benefits, many of which are summarized here.
Business Benefits
- Low Total Cost of Ownership
- Legal and Regulatory Compliance
- Unmatched Accuracy
- Powerful Reporting
- Data Inventory
- Intuitive Interface
- Improves Business Processes
- Agentless Search and Remediation
- Empowered End User Searching and Remediation
- Hybrid Searching and Remediation
- AnyFind Technology
- Console
- Centralized Policies & Granular Control
- Managed Distribution
Information Searched
- Social Security Numbers
- Credit Card and PCI Data
- Protected Health Information
- Bank Account Numbers
- Passwords
- Dates of Birth
- Phone Numbers
- Driver License Information
- Personal Addresses
- Canadian Social Insurance Number
- Australian Tax File Number
- United Kingdom National Insurance Number
- United Kingdom National Health Service Number
- Passport Numbers
Business Benefits
Low Total Cost of Ownership
Identity Finder is easy to install and set up, eliminating the need for expensive professional services. Identity Finder has an MSI installer for Windows and a graphical application we call "msibuilder" that allows easy customization. The Endpoint Client may then be rapidly deployed via Group Policy (Active Directory) or any other Patch Management system (such as LanDesk). The Mac Endpoint Client (in .PKG format) may be deployed similarly. These allow for silent, network propagated installations or direct user installations without the need for complicated manual services. Once deployed, the DLP Console can be configured to automatically upgrade Endpoint Clients directly from our website or via your custom installer.With an intuitive interface, extensive Knowledge Base and responsive Technical Support, most of our customers spend just a few hours installing Identity Finder. Identity Finder searches for FERPA data, PCI data, HIPAA data, and every other regulation or compliance data type, with no configuration needed and at no extra cost.
Sensitive data leaks out of secure systems on a daily basis. With each email, Excel spreadsheet or instant message, the number of devices in your secure data environment grows, and your audit and compliance costs go through the roof. Identity Finder will reduce audit and compliance costs by deleting all of those copies, shrinking the size of your secure data environment. Once you combine the tens of thousands of dollars you'll save in audit and compliance costs with easy installation and maintenance, it's clear that Identity Finder has a very low total cost of ownership.
Legal and Regulatory Compliance
Identity Finder is a key component to several legal, agency, and industry regulations, including: PCI-DSS 2.0, HIPAA and HITECH, State Breach Notification Laws, Red Flag Rules, Sarbanes-Oxley, FERPA, and the Gramm-Leach-Bliley Act.Unmatched Accuracy
Identity Finder is so accurate that our customers report a false positive rate of 2% or less; up to 25 times more accurate than our competitors. To achieve these unprecedented results, Identity Finder's AnyFind™ technology utilizes advanced proprietary algorithms incorporating contextual analysis, proximity checks, validations, industry checksums, minimum counts, and a variety of user customizable settings.For specific file types, such as Microsoft Excel, Identity Finder knows that while a cell might display 123-45-6789, different versions of Excel store numbers in different ways internally. Identity Finder intelligently adjusts its validation algorithms based on file type so that cells in CSVs include commas, Excel 2007 and later files include XML tags, and Excel 2003 and below include carriage returns, and trailing decimals.
Identity Finder takes further steps by looking for keywords, negative keywords, context, minimum counts, and a variety of user customizable settings allow Identity Finder to only match the information that is real PII. Once potential PII is found, Identity Finder’s AnyFind™ tool can validate the number against additional rules, such as Social Security Administration rules to ensure that an SSN could have been issued. It passes potential credit card numbers through the Luhn algorithm, and compares the number against definitions from issuing banks and financial institutions. These few examples of intelligent, real-time and context-aware search features maximize accuracy and drastically reduce false positive results.
Powerful Reporting
Identity Finder allows results to be reported in a wide variety of ways for both users on the Endpoint Client and administrators from the central DLP Console. Our out-of-the-box reports can be tailored for high-level decision-makers who need an enterprise-wide risk analysis, technologists who must implement remediation, or end-users trying to improve behavior and understand their own systems.Data Inventory
Identity Finder creates and tracks a detailed data inventory so you can see what has changed over time. You will be able to measure progress toward compliance and know which assets were compromised should a device become stolen or lost. Having an up-to-date data inventory aids compliance with several regulations, and enables a quick, surgical response in case a breach ever occurs.Intuitive Interface
Identity Finder's award-winning, wizard-based interfaces for both finding and remediating sensitive data are approachable and intuitive for non-technical and advanced users.Improves Business Processes
Identity Finder improves business processes and employee behavior by making them aware of the underlying problems that lead to data leakage and breaches. Identity Finder's detailed analysis empowers decision-makers and employees to identify and fix broken or risky business practices and prevent future sensitive data leakage.Usability Features
Agentless Search and Remediation
Identity Finder offers agentless or remote searching, remediation and reporting. As long as the Identity Finder process has proper credentials, the Endpoint Client can scan any remote location mounted and visible on the network regardless of file system format. UNC paths, IP Addresses, NETBIOS Names, and Fully Qualified Domain Names are searched no differently than the local file system – without the need to deploy an additional Endpoint Client to those remote endpoints. This will allow IT staff to conduct manual or automated scans of any remote endpoint on the network without notification to the local user of that endpoint.Empowered End User Searching and Remediation
In contrast to Agentless Search, end users may be empowered to search and remediate their own devices. Experience has shown that data owners are often in the best position to evaluate the how useful information is. Consequently, Identity Finder may be deployed on each end point and configured to allow end users to search and remediate their own systems through a series of simple, streamlined, and intuitive wizards.Hybrid Searching and Remediation
Most commonly Identity Finder is deployed using a hybrid approach of Empowered End Users and Agentless searching. Using the granular controls provided in the Identity Finder DLP Console, any feature or control may be delegated to end users or managed centrally. Power users or IT staff can take advantage of our Advanced Interface to have full access to our entire package – including all identity types, custom searches, multiple-criteria searches, advanced locations, and even remote searches.AnyFind Technology
Identity Finder’s AnyFind™ searching engine uses a variety of complimentary methods to positively identify PII (such as credit card and social security numbers). It goes well beyond using simple regular expressions to match delimited SSNs with the specific patterns in traditionally formatted SSNs. Identity Finder also finds formats unique to certain file types as well as finding unformatted, or non-delimited 9-digit social security numbers.Console
Identity Finder DLP Console provides centralized reporting and remote administration, remediation, and scheduling. Its simple and powerful interface generates reports, customizes and controls end points.Centralized Policies & Granular Control
Identity Finder understands that your organization has distinct business and regulatory requirements and a unique network topology. Some organizations allow their employees to have complete control over their own systems, while others require centralized control of the scanning and remediation process. Some organizations require independent verification and scheduled scans, some will allow limited end-user action, while others require only compliance monitoring. Some organizations have robust software distribution methodologies and others that have no process or tools whatsoever.The DLP Console allows you to set pre-defined policies and criteria for multiple Endpoint Clients at the same time. These can be used to control every single feature of an Endpoint Client from a single location. The search criteria, custom identity types, remote endpoint targets, available remediation options, and more can be set and assigned for one, multiple, or all endpoints from within the DLP Console’s interface. DLP Console administrators may ensure that certain roles only have access to certain features, reports, or subset of endpoints. This type of drill-down administration separates Identity Finder from many of the competitors in the marketplace. Regardless of your needs or network topology Identity Finder provides granular policy control, making it easy to deploy upgrades, push new policies, schedule searches, review results, and generate reports.
Managed Distribution
Our Endpoint Client software uses a standard installation package that can be easily customized or not used at all; and our application can be used with a full user interface or via a command line.Technology Features
Data at Rest Search
For companies which need to protect sensitive customer and employee personal information, or comply with a state and federal security regulations, Identity Finder is a sensitive data discovery and Data Loss Prevention (DLP) software product that finds and secures sensitive Personally Identifiable Information (PII) quickly, accurately, and affordably.Unlike traditional data-in-motion DLP products which try block information as it passes over a network, Identity Finder searches for and protects PII at its source. Because Identity Finder takes a data-at-rest approach to DLP, our software finds and secures forgotten PII on every inch of your hard drive, stoping leaks well before they reach an egress point. Whether your computer is infected, lost, stolen, or hacked, Identity Finder ensures your data is safe. The unmatched accuracy of our data-at-rest AnyFind™ technology is at least 25 times more accurate than data-in-motion DLP because it utilizes advanced proprietary algorithms incorporating contextual analysis, proximity checks, validations, industry checksums, minimum counts, and a variety of user customizable settings.