I find Cyberhaven the most immediate value add to our organization, the moment the sensor is installed, we have insight to what data is moving to where and how they were able to get there, it's full data visibility, full stop. By far, Cyberhaven's single pane of glass interface and incident/data reporting was miles apart to their nearest competitor, the sensor performance is lightweight (also backed up by their SLA), from deployment to anti-tampering, is industry leading. The integration with our exisiting security stack goes hand in hand and fits with what we had, with little performance loss. I love this DDR product and we compared it with three other vendors, this is a leader.

They have given us the ability to track and measure data movement. We had no visibility into certain areas of our internal systems. Through their file lineage feature, we can not only track movement before an incident, but we can continue to track where that data moves after an incident. This is something we couldn't find in other vendors. Combined with the ability to classify data sources and not just destinations. This gave us a huge head start in data classification.

CyberHaven is an insider threat tool that allows us to capture external exfiltations and is now an integral part of our DLP control process.