688 Cavelo: Data Risk Management for MSPs

Uncle Marv welcomes Kris Shoemaker from Cavelo to discuss their data risk management platform. Cavelo positions itself under the attack surface management umbrella, offering a comprehensive solution for MSPs that includes data discovery and classification, vulnerability management, identity access management, and asset discovery. Kris explains that Cavelo's approach is data-centric, focusing on protecting a company's data and intellectual property. The platform uses agents deployed on Windows, Mac, and Linux devices to discover and classify sensitive information according to various frameworks. This allows MSPs to identify and protect their clients' "crown jewels." 

The vulnerability management module of Cavelo is highlighted as a robust solution, competing with major players in the field. Kris emphasizes that while Cavelo excels at finding and prioritizing vulnerabilities, it integrates with existing remediation tools rather than handling remediation itself. The identity access management feature is discussed, which helps identify users with access to sensitive data and tracks their activities. Cavelo integrates with both on-premises Active Directory and Office 365 tenants to provide a comprehensive view of permissions. Kris describes the onboarding process as streamlined and MSP-friendly, with easy deployment options and self-updating agents. He emphasizes that Cavelo is designed for ongoing monitoring rather than one-time assessments, though it can perform quick scans for potential new clients. 

The interview concludes with a discussion of Cavelo's position in the cybersecurity landscape. Kris positions Cavelo as a "left of boom" solution, focusing on proactive visibility and insights to help prevent or mitigate security incidents. 

Key Takeaways: 

• Cavelo offers a comprehensive data risk management platform for MSPs
• The platform focuses on data discovery, classification, vulnerability management, and identity access management
• Cavelo uses agents on various operating systems to discover and classify sensitive data
• The vulnerability management module competes with major players in the field
• Cavelo integrates with existing remediation tools rather than handling remediation itself
• The platform provides insights into user access and permissions across on-premises and cloud environments
• Cavelo positions itself as a proactive, "left of boom" solution in the cybersecurity landscape

Website: https://www.cavelo.com/

=== Show Information

• Website: https://www.itbusinesspodcast.com/
• Host: Marvin Bee
• Uncle Marv’s Amazon Store: https://amzn.to/3EiyKoZ
• Become a monthly supporter: https://ko-fi.com/itbusinesspodcast