Protecting critical data is the core mission behind all IT security efforts. Yet for all the millions of dollars spent in this effort, there’s been no way to validate the success – or failure – of the data protection effort. Until now.
We developed the Data Exfiltration Testing Service – Dextest™ – to detect and log all data leaving an organization. By simply comparing Dextest results against your other data protection technologies, you’ll quickly uncover incidents of data loss – and be able to effectively address them. Yes, even the false negatives that leave you wondering where your data security gaps are.
See the Dextest FAQ below for more details of the Dextest service.
Dextest is designed to prove and improve existing data security technologies. The underlying technology monitors and logs all data movement within and outside the network, including data seen as non-sensitive by other data protection technologies. Dextest delivers previously unknown visibility and exposes the true – not assumed – data landscape.
We offer a limited scope, no-cost Dextest to qualifying organizations. To see what you qualify for and to discuss Dextest scope, complete the form below. You can also email us at in**@********ts.com for details. See firsthand how Dextest can prove – and improve – data security for you.
Below are frequently-asked questions regarding Dextest. Click on the question to see the answer.
A service that provides complete data visibility and factual data activity monitoring, upon which to base future security technology policy. Dextest™ helps companies know what’s factually happening with their data and detects even the most creative insider's attempts to exfiltrate data.
Dextest can be deployed as a SaaS solution and/or endpoint agent to monitor all data in motion and data in use, identifying each file and logging location and movement, both internal and outbound traffic. Both exact and partial data matches are detected, along with associated data usage activity (who, what, where, when, how and why).
Yes, it is a lot of data! Dextest was designed around a purpose-built big data technology platform. Dextest must see – and capture – all data activity. This is one of the cornerstone distinctions that separate Dextest from traditional security technologies that only log data policy violations. Dextest sees and logs all data movement, even data that is purported to be non-sensitive by other technologies.
Dextest can use traditional sensitive data detection techniques (keywords and pattern matching) to identify data, but many technologies can (and already do) do that very well. Dextest is not a replacement for your existing security infrastructure. The technology is designed to detect all data activity – not just data that has been identified as sensitive through existing policy. Dextest will even detect data that's been manipulated to avoid detection.
For example, if a user takes a file containing credit card numbers, then deletes those numbers, Dextest will still log that file activity, both the file edit and egress.
The key to Dextest’s success is complete and total visibility of all data.
Of course you have DLP in place! So did Google, Apple, and Facebook, but they still lost 16 billion passwords and login credentials. Other notable data loss incidents in 2025 included Marks & Spencer, SK Telecom, Red Hat's GitLab instance, Quantas, Allianz, TransUnion, Farmers Insurance, Yale New Haven Health, and Blue Shield of California, to name only some of the top breaches.
Do you think those companies had data security technologies in place? Of course they did! How did they determine their existing tools were working? Probably the same way you do: you confirm that your data security tools are seeing and capturing incidents. If the tools are capturing incidents, then they must be working, right?
WRONG.
Let Dextest prove it. Dextest is not intended to replace existing security technologies, rather to prove and improve them. Most general security technologies do not focus on the data and those that do, like DLP, only log policy violations. Dextest focuses on the data, logging both policy violations and non-policy violations. This is the only sure way to know whether or not sensitive data is leaking.
Yes and no, depending on deployment choices. Dextest is primarily designed to prove your existing security technologies. Policies for existing technologies are often based on assumptions of where and how data might possibly leak. Many of the assumptions may be correct and help protect data. But with Dextest, you won’t need to assume or guess which policies are needed, you’ll know – factually – exactly how data is leaving. With this information, you can then ensure your technologies are able to fully protect your data.
I once worked with a hospital focused on protecting patient health information as required for HIPAA compliance. When I asked our contact if they had developers writing code that should be protected, he sheepishly acknowledged that yes, they did want to protect source code. Then I asked how they were protecting their medical research and the stumbling response was it was being handled in the same way as the protected patient data, even though much of the research did not match up to individual patients.
What we quickly learned was that the existing data security technologies would be almost totally ineffective at protecting both the source code and the medical research.
Dextest could PROVE that by showing PHI egress as blocked, but also could show exactly how source code and medical research was created, used, shared – and leaked!
Validate effectiveness of DLP and other existing security technologies
Directly identify data leaks and unprotected sensitive data
Uncover data obfuscation techniques used by creative insiders
Log all data movement – North, South, East and West
Maintain a history of all files
Show the who, what, where, when, how – and why (intent) – of all data activity
Classify all data in motion and at rest
List new files at creation
Identify all data creators and data consumers
Track file ownership
Prove file chain of custody
Dextest can be delivered either as a point-in-time service, an on-going managed service or traditional product purchase. Talk to one of our team for detailed pricing options for your organization.
Yes. We offer a no-cost POC to qualifying companies. The POC can be extended each month for the affordable managed service fee. Talk to one of our team for detailed pricing options for your organization.
