Neo Endpoint & Data
Sensitive data discovery and classification
The sensitive data you did not know you had: located, classified and documented without leaving your network.
What it is
NeoDLP locates personal and financial data on servers, shared folders, workstations and databases and delivers an inventory with evidence for the data protection officer, the auditor or the security committee. A connector installed in your network does the analysis: NeoDLP only receives the data type, location, severity and a masked evidence sample. Eleven validated detectors (Spanish ID numbers, passports, IBANs, cards, health data, credentials, private keys and more) reduce false positives. Made in Spain, with data processed in the European Union.
A single binary for Windows or Linux, enrolled with a one-time token, scans SMB shares and NAS, Linux servers over SSH and SQL Server, MySQL and PostgreSQL databases with read-only accounts.
Spanish DNI and NIE, passport, social security number, IBAN, bank cards (Luhn), health data, credentials, private keys, emails and phone numbers, plus custom rules. Identifiers are validated to reduce noise.
Only metadata and a masked evidence sample leave the network, over outbound HTTPS (443) with mTLS and without opening inbound ports. Each policy sets its evidence level and each company has its own separate space, connectors and keys.
Targets, detectors, exclusions and time windows (for example, weekdays from 02:00 to 06:00) so that scanning does not compete with business activity.
Every finding with its exact location, masked sample and hash; it can be assigned, flagged and closed. Executive and technical reports with an integrity fingerprint, a log of every action and separate administration, analyst and auditor roles.
Sign-in with Microsoft Entra ID (OIDC), import of Microsoft Purview DLP alerts, forwarding of serious findings to Wazuh or any SIEM over Syslog (CEF/JSON), HMAC-signed webhooks and alerts by email or API.
Inventory of personal and payment data in forgotten folders, servers and databases.
Validated identifiers and false-positive management.
The reports and traceability required by GDPR, PCI DSS, ENS, ISO 27001 and DORA. The tool does not replace the organisation's risk analysis or policies.
One connector, up to 50 workstations or servers and 2 databases: discovery, GDPR and PCI DSS classification, executive report and email alerts.
Up to 3 connectors, 250 devices and 10 databases: scheduling and exclusions, technical reports, false-positive management, API/SIEM alerts, separate roles and priority support.
Unlimited connectors, dedicated or on-site deployment, data region of your choice, federated sign-in (OIDC/Entra ID), your own encryption keys, SLA and support for ENS, ISO 27001 and DORA.
Prices per company per month, with no lock-in and cancellation from the console; every plan includes a data processing agreement. Up-to-date prices and a 30-minute demo with fictitious data at neodlp.bomontec.net.
Companies that need to know where they store personal and payment data, data protection officers, compliance and audit teams and, with the Enterprise plan, public sector, defence and corporate groups.
Not yet. The current version discovers, classifies and documents data at rest. Blocking USB copies, outbound email containing sensitive data and uploads to web and cloud services, plus a continuous endpoint agent, are on the roadmap.
No. The connector scans inside your network and only sends the data type, location, severity and a masked evidence sample. Full documents and rows are never centralised.
Nothing inbound. The connector initiates an outbound HTTPS connection on port 443 with mTLS.
Yes, with the Enterprise plan: dedicated or on-site deployment, data region of your choice and your own encryption keys.
You may also be interested in
Every endpoint, a bulwark: EPP/EDR protection operated by analysts, with reports you can actually understand.
Avoid penalties and stay aligned with the regulations.
Immutable backups, verified recovery.
Let's talk
Request a demo or a tailored proposal. We reply during business hours.
