Leak Signal: A Cloud Native Solution for Data Exfiltration Prevention

Leak Signal is a startup that has built a set of tools and products to detect and prevent data exfiltration in service meshes and proxies. They offer a plugin that works with Envoy proxy, Nginx, AWS Lambda, and more, using proxy WASM technology. The plugin provides real-time traffic analysis and classification of sensitive data on the request and response level, allowing companies to identify potential data leaks. Leak Signal also offers a cloud-hosted or on-premises command module that collects telemetry and provides visibility into the data flow. With their micro-segmentation capabilities, companies can automatically group services based on the sensitive data they handle, achieving PCI compliance and other security requirements. Leak Signal's policy enforcement allows for proactive alerting, blocking, and rate limiting based on predefined rules and statistical models. While other emerging technologies like eBPF and the Kubernetes Gateway API were discussed, Leak Signal focuses on providing a comprehensive solution using the power of proxy WASM, making it accessible and efficient for a wide range of enterprise infrastructures.