What is a cloud access security broker (CASB)?
A cloud access security broker (CASB) is a security control that sits between users and cloud services. It shows which cloud apps, including AI tools, people use, and enforces policies on data and access. A secure web gateway (SWG) filters web traffic more broadly.
How it works
CASBs discover shadow IT and shadow AI, flag risky apps, apply DLP to uploads and control sharing. They are often part of a security service edge (SSE) platform alongside the SWG.
CASB and SWG logs are a rich source of human risk signals: unsanctioned apps, risky downloads and sensitive data sent to AI tools.
Why it matters
Most work now happens in cloud apps the network never sees. CASBs give security teams that visibility.
How Living Security helps
Living Security reads web gateway and CASB signals, such as unauthorized AI tools and sensitive data in an AI prompt, into the Human Risk Index.