Avanpost Unveils DAG System for Sensitive File Discovery and Excessive Access Rights Management

Avanpost has introduced DAG, a specialized system for managing access to unstructured data stored on file servers, in cloud services, and within corporate knowledge bases.

Many organizations face a common problem: employees change roles or leave the company, yet retain access to old folders containing sensitive exports of personal data and password instructions. DAG addresses this gap by discovering confidential information based on file content, revealing real user permissions, and identifying security policy violations that approved regulations often fail to reflect.

The solution determines exactly which individuals can open sensitive documents, regardless of what official access matrices suggest. Once excessive rights are found, the built-in business process engine allows organizations to send requests to data owners, gather necessary approvals, assign tasks to IT departments, and monitor completion. Follow-up scans confirm that access has actually been revoked rather than relying solely on ticket status.

DAG continuously tracks changes to permissions and objects, forwards violation data to SIEM and SOAR platforms, and can trigger internal response playbooks. It operates either standalone or integrated with IdM/IAM systems, using employee position and HR status to initiate access reviews during transfers or departures.

The vendor offers two editions: one optimized for large enterprises with high performance requirements and another focused on simpler integration for mid-sized businesses. Interested organizations are invited to run a pilot deployment on their existing infrastructure.