Pillar
Data Security
Data security is the controls around the record after you already authenticated the user: field-level encryption, tokenization, DLP that is not a PowerPoint, and backups that are not a second production.
DSPM tools
Find the row you forgot
Open the list
DLP tools
Name the secret before it leaves
Open the listQuestions about Data Security
How is data security different from application security?
AppSec asks whether the request should have happened. Data security asks what the record is worth if it did, or if the backup, the replica, or the analytics warehouse is the copy that leaks. You need both. We split them so a list about tokenization does not sit under XSS.
What lists are you researching?
Application-level field encryption, tokenization versus format-preserving tricks, and how teams keep production data out of lower environments. We will only publish when we can show a failure mode, not a vendor quadrant.
Does encryption at rest count?
Disk encryption is table stakes from the cloud account. It does not help a support engineer who can SELECT the column. A data-security list will prefer controls that still hold when the database credential is valid.
