What's new

Multi-target scanning for SharePoint Online and OneDrive: Select and scan multiple SharePoint Online sites (including subsites and Teams channel folders) and OneDrive user accounts in a single scan configuration, eliminating the need to create separate scans for each site or user.

For more information, refer to the Scan Configuration Fields section.

Per-file classification status: Files that are not classified are now grouped under Unclassified in the scan status sidebar. Each file is labeled with the applicable reason, providing greater visibility into classification outcomes and helping administrators better understand scan coverage across their content.

For more information, refer to the Classification status section.

Improved vendor quota handling for Microsoft and Google APIs for faster discovery and classification.

For detailed information, refer to the SharePoint Online Rate limiting and API throttling behavior section.

For detailed information, refer to the OneDrive Rate limiting and API throttling behavior section.

Structured scan status accuracy: Database scans remain in progress until classification completes, rather than moving to completed status immediately after discovery. The INCOMPLETE status is removed for database scans, and per-item database scan errors are surfaced in the UI/API.

For more information, refer to the Scan Errors section.

Pre-scan validation for database limits: DSPM pre-validates structured data targets against technical and plan/entitlement limits before scan start. If limits are exceeded, the scan is paused with actionable feedback.

For more information, refer to the Structured data scan limitations section.

Scan process UX updates: Scan configuration lists sort newest first, and file date metadata is split into discovered/catalogued and classified timestamps.

Salesforce Connector: Adds support for discovering, classifying, and monitoring Salesforce records and files, attachments, objects, fields, and supported notes.

For more information, refer to the Salesforce Connector section.

Dell ECS Connector: Adds support for Dell ECS as an S3-compatible unstructured object storage source.

For more information, refer to the Dell ECS Connector section.

CyberArk for structured data connectors: Extends CyberArk Credential Provider integration to structured database connectors, including PostgreSQL, MySQL, Microsoft SQL Server, Oracle/Oracle Exadata, Snowflake, Databricks, DB2, Teradata, and SAP ASE.

Tag aliases are now consistent everywhere. Custom tag aliases display and behave the same across search, sort, export, analytics, and file tagging, not just classification results. Aliases are now required (existing blanks auto-backfilled), search resolves both alias and tag name to the same tag, and saved filters keep working.

Faster regex classification engine: Replaces the legacy pattern-matching execution path with a faster, more accurate engine.

Configurable tag conflict resolution: Introduces configurable severity ordering and default tags for single-select tagsets.

Additional built-in DLP classifiers: Adds regional policy groups for Egypt, Indonesia, and Saudi Arabia.

Out-of-the-box regex patterns: Adds built-in pattern matching regexes for categories such as API secrets, technical identifiers, PII, PCI, regional identifiers, and contextual filters.