Varonis debuts trailblazing features for securing Salesforce. Learn More

Varonis named a Leader in The Forrester Wave™: Data Security Platforms, Q1 2023

Read the report

Federal Policy Pack

Find and protect CUI, classified, and top-secret data.

  • Federal, civilian, & DoD policies
  • Accurate & automatic classification
  • Built and tested by privacy experts

Never write another confusing RegEx.

Federal Policy Pack gives you access to hundreds of expert-built, auto-updating policies to accurately discover top secret, confidential, or controlled unclassified information (CUI)—automatically.


Pinpoint accuracy. Petabyte scale.

Get accurate classification results across petabytes of unstructured data with few false positives. Our policies go beyond regular expressions with proximity matching, negative keywords, and algorithmic verification to generate high-fidelity results.


Don’t just find confidential data, protect it.

Finding confidential information is only the first step. With Varonis, you can see which confidential files are exposed, automate remediation, and alert on misuse.

All of our data is indexed across our various data stores. At any time, I can show an assessor where our CUI resides and who has access to it. That’s huge when it comes to compliance.
IT Director, DoD Contractor Read the case study

Key features

Automatic policy updates

We update our policy definitions automatically so you can be confident your data classification results reflect the latest changes in data privacy laws.

Pre-defined audit & compliance reports

Unlock a massive library of reports to provide concrete evidence of compliance. Run reports on-demand or email them on a schedule.

Advanced threat detection

DatAlert monitors regulated data access and alerts you to abnormal PII activity from ransomware to insider threats.

Attack surface reduction

Automatically restrict access to personal information and minimize its exposure with the Automation Engine.

Policy enforcement

Reduce risk by finding stale personal information and moving, archiving, or deleting it with a Data Transport Engine rule designed around your retention policies.