Hack the Route Start free Open app Detection and response
Data loss prevention (DLP)
Controls that watch for sensitive data leaving the network and block or flag the attempt.
DLP inspects traffic and files for sensitive content — credentials, personal data, marked documents — leaving the organisation, and blocks or alerts when it does. It overlaps with the sinkhole (cutting exfiltration channels) and with forensics (finding, after the fact, the credentials and files that a capture shows were sent in the clear). Cleartext protocols make both the leak and its detection easy; encryption shifts DLP toward the endpoint.