Adallom

Adallom is a Cloud Access Security Broker (CASB) platform focused on monitoring, controlling, and protecting enterprise use of Software-as-a-Service (SaaS) and cloud applications.

• Visibility into user activity and data flows across SaaS and cloud applications (cloud security)
• Policy-based access control for cloud services, including authentication context and device posture (access control)
• Detection of anomalous behavior and potential account compromise in cloud applications (threat detection)
• Data protection controls for content stored in or shared via SaaS platforms (data security)
• Integration with existing enterprise identity, endpoint, and security management tools (security integration)

More About Adallom

Adallom provides CASB capabilities aimed at enterprises that need to govern usage of SaaS and other cloud applications. Its platform sits between end users and cloud services to provide a control point for identity, data, and activity across multiple applications. This approach targets organizations that use SaaS for collaboration, CRM, productivity, and file sharing, and that require consistent security and compliance controls across those services.

The Adallom platform focuses on visibility into user actions and data movements in cloud applications. It monitors logins, file access, sharing events, administrative changes, and other actions, mapping this telemetry to user identities and devices. This data model supports security teams in building usage baselines and understanding which cloud applications are in use, by whom, and from where. The visibility layer underpins alerting, policy enforcement, and forensic analysis.

From a control perspective, Adallom implements policy-based access control for cloud services. Policies can consider factors such as user role, device type, network location, and session context. Based on these attributes, Adallom can allow, block, step-up authenticate, or conditionally permit actions such as file downloads, sharing, or administration tasks. This architecture aligns with zero trust and context-aware access models commonly adopted in enterprise environments.

Threat detection in Adallom uses analysis of user behavior and access patterns to identify anomalies that may indicate compromised accounts, malicious insiders, or policy violations. Examples include impossible travel, atypical download volumes, irregular administrative changes, or use of Top-of-Rack Switch (ToR) or unknown locations. These detections integrate with enterprise Security Operations (SecOps) workflows through alerts, dashboards, and connections to Security Information and Event Management (SIEM) and incident response tools.

Adallom also provides data protection capabilities in cloud applications. Policies can govern how sensitive data is stored, accessed, and shared, including controls around external sharing, public links, or downloads to unmanaged devices. Integration with enterprise identity and device management solutions supports enforcement that differentiates between managed and unmanaged endpoints, and between corporate and personal accounts where supported by the SaaS provider.

In the broader security marketplace, Adallom fits into the cloud security and SaaS governance categories, with particular relevance for organizations adopting multiple SaaS platforms and seeking centralized control. Its capabilities are used by security, risk, and IT operations teams to extend existing identity and network security programs into cloud services, align with regulatory and compliance requirements, and standardize monitoring and control of cloud-based collaboration and productivity tools.