Skip to content

Glossary · Cybersecurity fundamentals

Cloud access security broker

A security control between users and cloud services that shows which apps are used and enforces policy on them.

Also called CASB, secure web gateway, SWG

What is a cloud access security broker (CASB)?

A cloud access security broker (CASB) is a security control that sits between users and cloud services. It shows which cloud apps, including AI tools, people use, and enforces policies on data and access. A secure web gateway (SWG) filters web traffic more broadly.

How it works

CASBs discover shadow IT and shadow AI, flag risky apps, apply DLP to uploads and control sharing. They are often part of a security service edge (SSE) platform alongside the SWG.

CASB and SWG logs are a rich source of human risk signals: unsanctioned apps, risky downloads and sensitive data sent to AI tools.

Why it matters

Most work now happens in cloud apps the network never sees. CASBs give security teams that visibility.

How Living Security helps

Living Security reads web gateway and CASB signals, such as unauthorized AI tools and sensitive data in an AI prompt, into the Human Risk Index.

See which people and AI agentsare driving your risk.

A live walkthrough with our team, on the tools you already run.

  • 68%Less time in a risky state after targeted action (2026 Human Risk Report)
  • LeaderNamed Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024
Book a demo