Big Moves in Data Security at RSAC 2025:
- BigID unveiled Data Lifecycle Management and vector database labeling
- Abnormal AI launched AI Data Analylst for autonomous data threat triage
- CrowdStrike updated Falcon Data Protection to address GenAI and SaaS risks
- BlackFog enhanced ADX platform to counter encrypted exfiltration
- Futurex and others pushed forward on post-quantum cryptography
At RSA Conference 2025, data security was the throughline. Our team spent the week diving into sessions like “Bridging Data and Identity: The Key to Cyber Resilience” and “Cracks in the Fortress: How Major Companies Leak Their Secrets,” and meeting with vendors across the show floor tackling everything from SaaS data visibility to post-quantum encryption.
Every conversation we had—whether with CISOs, product teams, or emerging startups—pointed to the same truth: data is no longer just something we protect; it’s the center of the security story. From AI model exposure to ransomware-ready exfiltration tactics, the new risks are stealthier, faster, and harder to contain.
“We don’t need to classify everything—we need to classify what matters, and then protect it like it’s under siege.”
— Assaf Morag, Director of Threat Intelligence, Aqua Security
Here’s what stood out most on the ground at RSAC 2025.
Contextual Classification Is In—Static DLP Is Out
Gone are the days of one-size-fits-all data loss prevention. BigID showcased new capabilities to label and protect vector database content, helping companies secure the data that powers LLMs and GenAI tools.
Onum launched BYOCode, Sigma Rules, AI Pipeline assistants, and a marketplace to help teams act on telemetry at ingest and reduce detection delays.
Agentic AI Joins the Fight
Abnormal AI made a splash with its AI Data Analyst, part of a suite of autonomous agents that monitor for data risk signals and flag abnormalities in access, movement, or user behavior. It’s not just alerting—it’s storytelling: showing the “how” and “why” of suspicious actions.
Meanwhile, CrowdStrike updated its Falcon Data Protection platform with tools to block encrypted data exfiltration, detect SaaS platform misconfigurations, and reduce exposure from GenAI usage—all hot-button concerns this year.
Praeferre, as part of the UK Government’s official trade delegation, showcased its AI-powered compliance and data privacy automation solutions tailored for smart cities and critical infrastructure.
Assume Breach, Block Exfiltration
Resilience is the theme everywhere in 2025, and BlackFog doubled down with their Anti-Data Exfiltration (ADX) updates. The platform focuses not on catching breaches, but on preventing data from leaving the device in the first place—a key strategy in ransomware defense and regulatory response.
Rewind emphasized its SaaS data backup solutions, highlighting capabilities to safeguard data across platforms like Jira and GitHub, ensuring business continuity.
Quantum-Ready Encryption: From Concept to Deployment
Talk of post-quantum cryptography moved from theoretical to tactical this year. Companies like PQShield are beginning to integrate quantum-resistant algorithms into commercial products. In several panels, we heard a recurring point: the time to prepare for quantum threats is now, not when quantum systems arrive.
CryptoHub, a hardware security module from Futurex, stood out as a powerful and versatile cryptographic platform, unifying cryptographic use cases into a scalable solution.
“Quantum readiness won’t be optional for critical infrastructure—it will be mandated.”
— Tal Rabin, “The Cryptographers’ Panel”
What We Heard in the Hallways
“Data security is where compliance, risk, and security collide—and nobody owns it yet.”
— Kyle Kurdziolek, VP Enterprise Security, BigID
“We’re drowning in alerts but still blind to how data actually moves inside the org.”
— Comment at Devo’s “Achieving the Alertless SOC” briefing
Why It Matters
RSAC 2025 showed that data security has finally caught up to the scale and complexity of the modern cloud + AI stack.
The leading platforms were those that:
- Use AI to identify sensitive data in context
- Support SaaS, GenAI, and hybrid data flows—not just file servers
- Provide resilience against exfiltration and insider threats
- Begin preparing for a post-quantum future
If your data protection strategy stops at DLP, it’s not enough. The modern threat landscape demands smarter, layered, AI-driven protection. Check out our vetted list of Data Security solution providers.
For more insights and detailed discussions from RSA Conference 2025, explore the full agenda and session recordings available on the RSA Conference website.
