With Wiz adding ”DSPM” or rather data classification, do you see there being much need for DSPM on top of CSPM? I feel like the DLP and Detection and Response are way more important than CSPM checks, but is that just me?
Sort by:
CSPM and DSPM sit with slight overlap but in distinct capability towers. I see CSPM being more of a misconfiguration detector to shift right and through the cycle. Thye tool and capability shared with infrastructure and IT. DSPM on the other hand is used by privacy, Audit, Cyber and Data governance teams and has a much broader audience. DLP is just a tool to protect sensitive data but DSPM gives you a more holistic view and scope for DLP.
The need for DSPM and CSPM is different. It depends on the organisation's security posture and how they want to manage their digital risk.
It is about vendors moving to provide an entire suite of services versus businesses needed to individually deploy and integrate a whole set of independent security products and solutions
There are wonderful vendors available in both the DPSM and CSPM spaces and I worry that Wiz is taking on too many functions for their platform. It's hard to be a unicorn, the pressure must be over the top - but when is it too much?
They are distinctly different postures and needs. They are not overlapped.