// THREAT DETECTION AND DATA PRIVACY TERM
CASB
A CASB is a security tool that sits between users and cloud services, enforcing security policies as people access cloud applications and data.
TECHNICAL DEFINITION
A Cloud Access Security Broker (CASB) is an on-premises or cloud-based security policy enforcement point positioned between cloud service consumers and cloud service providers, combining visibility, compliance, data security, and threat protection for Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS) environments.
BACKGROUND
The Office of Federal Procurement Policy (OFPP) is a component of the United States Office of Management and Budget (OMB), which is part of the Executive Office of the President of the United States (EOP). OFPP was established by the U.S. Congress in 1974 through the Office of Federal Procurement Policy Act OFPP provides overall direction for government-wide procurement procedures and "to promote economy, efficiency, and effectiveness in acquisition processes." OFPP is headed by an Administrator who is appointed by the President and confirmed by the Senate. In April 2025, President Donald Trump nominated Kevin Rhodes to be the next Administrator. Rhodes was confirmed on October 7, 2025 and sworn in on October 15, 2025.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- Cloud Security Broker
- Cloud Security Gateway
- CASB solution
USAGE NOTE
CASBs are crucial for organizations adopting cloud services to extend their on-premises security policies and controls to the cloud.
DEVELOPERS
Organizations developing technology related to CASB.
Netskope is a leader in CASB, offering cloud security solutions that provide visibility into cloud usage, protect sensitive data, and prevent threats across sanctioned and unsanctioned cloud apps.
Zscaler offers a Cloud Access Security Broker (CASB) service as part of its Zero Trust Exchange platform, providing data protection, threat prevention, and compliance for cloud applications.
Palo Alto Networks provides comprehensive CASB capabilities within its Prisma Cloud security platform, offering discovery, data security, threat prevention, and compliance across SaaS applications.
Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security - MCAS) is Microsoft's native CASB solution, providing deep visibility, strong data controls, and enhanced threat protection for cloud apps.
Proofpoint offers CASB solutions to protect sensitive data and prevent threats across cloud applications, integrating with its broader data loss prevention and threat protection suites.
Forcepoint provides CASB technology as part of its SASE and data-first security solutions, enabling organizations to discover cloud applications, monitor usage, and protect data in the cloud.
Broadcom's Symantec Enterprise division offers CloudSOC CASB, providing security for cloud applications by discovering cloud usage, enforcing policies, and protecting data.
Trellix (formerly McAfee Enterprise) offers CASB capabilities as part of its unified cloud security platform, providing visibility, data protection, and threat defense for cloud applications.