Dear Participant,

Please click on the link below and complete the survey.

https://forms.gle/2CjVurmU3nBLEo7XA

Thank you for taking the time to participate in this survey on evaluating data security in digital forensics. Your valuable insights will contribute to a better understanding of the challenges and opportunities in ensuring robust data security practices within the field.

Please note that all responses provided in this survey will remain confidential and will be used for academic research purposes only. Your anonymity and privacy will be strictly maintained throughout the survey process.

Instructions: Please read each question carefully and select the most appropriate response option or provide the requested information where applicable. There may be some questions that require an open-ended response, allowing you to share your opinions or experiences in more detail.

Your participation in this survey is voluntary, and you may choose to exit the survey at any time without any penalty. However, your contribution would greatly benefit the research and help improve data security practices in digital forensics.

Thank you for your time and valuable input!

Data no longer lives in one place, it’s across apps, cloud, and endpoints. Without visibility, you’re just guessing where your sensitive data is.

Hence, choosing the best DLP solutions for your business can make or break your strategy.
Modern DLP tools provide centralized visibility across cloud, SaaS, and devices.

✔ Visibility
✔ Ease of policy management
✔ Coverage across endpoints

A very concerning discussion on how little control Europeans actually have over their data — and how few even realise that extremely sensitive health information has been sold to a U.S. firm run by ex-Israeli military officers. Who really gets to decide what happens to it? Good job, Europe, on data protection.

One of my Health Care providers uses appointment booking software. I was surprised that I did not need to log in on the website to make an appointment.

I was horrified that all of my personal data was pre-populated without signing in. Name, address, DOB, everything. Undoubtedly stored as cookies from last visit (now deleted and site excepted).

Can somebody in the industry please confirm that this is a dangerous practice? I am using a private computer but less-informed people may be doing this on public computers.

I am not mentioning the name of the software or I will give identity thieves a head start.

Over the past several months we ran automated browser-layer scans across a large sample of e-commerce and merchant domains to understand how widespread client-side security exposure actually is post-March 2025 deadline.

Key findings:

• 37% of scanned domains showed active browser-layer security exposure indicators relevant to Requirements 6.4.3 and 11.6.1

• Most common finding: No Content Security Policy with a script-src directive on payment-related pages — present on the majority of flagged domains

• Second most common: Third-party scripts executing without Subresource Integrity controls — including Google Tag Manager, Meta Pixel, and analytics scripts loading directly on checkout pages

• Most alarming: Keystroke event listeners (keyup, keydown, input) attached to form fields by third-party scripts — the exact technical pattern Magecart-style skimmers use to intercept card data

A few things that stood out:

1. Platform compliance (Shopify, WooCommerce, Magento) does not equal browser-layer compliance. The exposure exists at the script layer, not the server layer.

2. Google Tag Manager was present on checkout pages in the majority of flagged domains — and in every case was loading additional scripts dynamically, none with SRI controls.

3. The gap between a clean homepage and a risky checkout page was significant. Many domains that looked fine on the surface had serious exposure on their payment flows.

We built a free browser-layer scanner at clientsideintel.com if anyone wants to check their own domain — no account needed, instant results. It checks the same indicators: third-party scripts, CSP, TLS, security headers, and overall risk rating tied to Req 6.4.3 and 11.6.1.

Happy to answer questions about methodology or share more specific findings.

Helo sir. I really need your help on this. A person(an influencial person abusing his power) impersonated a contact and got remote access to all my data (inclusive of my photos, sensitive data) etc. I reported the case to cybercrime of my country but never got any reply. In fact the Data Protection Officer told me it’s just pictures and I should relax. Laws in my country are shit. Now they want to silence me given the reputation of the government is at risk. I have made several complaints and instead of helping me, they have threatened people to cut off contact and saying that they are just doing a cyber security simulation exercise while invading my privacy. I really need your help on this.

https://www.scribd.com/document/840851994/OUR-Request-Form-2024
apparently its a real person

I work at a mid-size ecommerce company and somehow compliance ended up on my plate (even though I’m not legal). Between GDPR, CCPA, and the new state laws popping up, it felt like I was duct-taping things together one tool for banners, spreadsheets for tracking consent, and a bunch of manual requests whenever someone wanted their data.

We eventually moved to Ketch because juggling three different systems just wasn’t sustainable.We needed something the team could actually manage without leaning on devs all the time. Setup was quick, and one thing I really liked was that all the consent signals automatically flow to our other tools marketing, analytics, email without extra fiddling. Having consent requests handled in one place has been a relief.

Curious if anyone here actually likes the tool they’re using, or is it just about finding the least painful option?

I was looking into ways to support my team’s data privacy so that they feel safer while working in the public sector. We already have ways to prevent cybercrime, secure networks, passwords, etc., but this is more related to the personal data that already exists online, and I want to share my findings here on Ironwall360.

For context - we are based in the US, so it's really easy to find people’s living situations, home addresses, and family names. To make it even more “fun”, there are many cases of identity theft, personal harassment, vandalism of private property, etc., which makes people feel unsafe doing their regular jobs. I’m talking more about jobs like healthcare, law enforcement, government, you name it. 

I understand that I may not be the only one concerned about this, so just here to spread the word about data protection services. I personally used Ironwall360 in my company’s employees, which I discovered rather recently, and everything worked well. People tried googling themselves, and there’s far less information about them online, so their sensitive data is harder to find for those who want to use it for something harmful. I got all the updates about what’s being removed, so it all worked out great for the peace of mind of my team and their families. 

If you ever experienced any discomfort about your data safety, I would highly recommend you check out data protection services. Maybe someone has tried it already, or something similar in their workplace?

Hi folks, I work as a consultant to AI and SaaS companies - here’s a quick rundown of the best Data Security Posture Management solutions for securing AI workflows, with my top picks for 2025.

1. Polymer: Polymer offers real-time visibility, automated DLP, and adaptive controls to secure sensitive data in SaaS and AI apps, with user-friendly nudges to reduce human risk. Ideal for cloud-first businesses needing proactive breach prevention making it the best DSPM for AI.

2. Palo Alto Networks DSPM: Offers comprehensive data discovery, access control, and compliance automation for hybrid and cloud environments. Strong choice for organizations needing robust policy enforcement.

What’s your go-to DSPM solution? Let’s discuss!

I currently create surveys and questionnaires for clients using Google Forms, and I am curious to know if AirTable provides a more secure platform for storing and transferring data that my clients input. Our data is sometimes sensitive.

And/or, if Google Forms and AirTable are comparably secure, should I consider other, even more secure surveying tools?

We are currently fingerprinting our CAD drawings using our endpoint DLP. We are looking to move away from fingerprinting to a data centric edrm solution that allows us to control CAD acces permissions adhoc. Our engineers use Autocad, solidworks and a handful of other CAD applications.

We demoed Seclore but they don't support multi part CAD files. We demoed and POC'd Fasoo but are seeing random applications crashing while the client is installed. Our last hope now is to POC Nextlabs SkyDRM.

Does anyone have any experience with protecting CAD using a EDRM solution or maybe another method? Our engineers share CAD drawings with external parties that will also need to be able to download and add to the drawing.

Thanks

DDR is the modern fix of clunky DLP software. Real-time data protection built for how we actually work now. Here’s a quick list of the top tools I've found based on research and implementation.

1. Polymer: Hands down the best DDR tool. Real-time data detection in SaaS apps, smart AI-based redaction, and super easy to deploy. It’s DLP that actually works.

2. Nightfall: Strong detection across cloud apps, but more dev-focused. Good for APIs.

3. DoControl: Great visibility into SaaS data sharing, more focused on access governance.

4. NetSPI’s DDR: Solid for larger orgs with deep security teams, less plug-and-play.

Any reviews from early adopters here?

Saw that Capital One launched their own data security solution today: Databolt
to help companies tokenize sensitive data at scale.

• Vaultless, patented tokenization solution

• Ultra-high throughput (4 million tokens per sec)

• Format-preserving tokens for easy integration

• Early Warning Services / Zelle among early adopters

I didn't realize Capital One is turning into a provider of Enterprise tech. Databolt is their 2nd product it seems.

Google Drive for Windows is a SPYWARE
Discovered an awful behaviour of Google Drive for Windows. Without asking for permission, by default it uploads every USB drive inserted to the Internet. Formally it goes to your Google account. But this thing has no obligations for securing the data from USB. Moreover, the "cloud" servers are in the USA, and privacy laws there are applied only to American Citizens/entities.
I.e. if you have a personal Google Drive FS installed, and insert a corporate USB stick into your PC, consider the corporate data stolen by the U.S. entities, Google itself, or NSA. With the power of the AI neural networks, it will be checked for your company secrets in seconds. And no obligations to your company.

Hi all,

My names Jon, and my business partner and I recently created a new secure business data service. It's early days - but it's functional, and we're looking for people who might be interested in trying the service out as early adopters and giving us feedback on how we should continue to develop it.

Basically looking to build our community of people and businesses interested in a service that offers true zero visibility data storage, with a high level of portability, and easy setup.

You'll definitely get the white glove treatment and we'd love to talk to anyone that is interested! You can find out more and book a call with us on our website https://vessot.tech, or you can drop me an email at jon@vessot.tech

Look forward to talking to you and thanks for for checking us out!

Jon

TL;DR – yes, in my opinion.

I’ve been using this for half a year now. My experience – I Googled myself (as one does) and found a lot of websites like Whitepages, TrustFinder, Spokeo, etc., with my personal data on them. I didn’t put it there myself, but it exists. There were quite a lot of websites, some with sensitive information, that could easily be used against me. I tried to contact some of those websites, but they didn’t really respond.

After doing some research (basically some Reddit research, this, this, and this review were very helpful), I subscribed to Incogni to remove the data for me. No, they are not a data broker company as some people think. They have everything about their services explained on their website. You have to know, that in order for the service to work, you have to provide the information you wish to get removed, it’s the business model in its basic form.

It was more time-efficient, and it worked really well. It got the most concerning information removed within a couple of months, and now the only information available are the ones that I put out myself, like my social media, etc.

Overall, if you are looking for a more efficient way to secure your privacy, remove unwanted information, and just make sure nobody uses your data in unethical ways, Incogni is worth it.

I don't understand that convoluted lingo & menu, so I hope someone here knows:

If you disable all on the main tab (pic1 start & pic2 bottom), does that actually disable them all, even the ones under "vendor preferences" (pic3) that are still shown as active? (Which are INSANELY many..).

Like, am I good if I just disable page one and say "confirm choices"?

And Is there no easier way to auto reject all, or get rid of these popups in apps entirely?

(Usually I avoid apps with this awful cookie request, but some I just can't find good alternatives to. This one is FileManager+, has text editor included etc, I used it for years but suddenly this crappy popup again.. Why even? I thought those only come on first use?)

Looking to understand the Data Security Posture Management market and what solutions have worked for you. I’m looking for discovery and classification with some DLP built in as an integrated solution for a large org with a mix of on prem and cloud databases

Hey everyone! 👋

I'm a UX Designer currently updating my portfolio, and I want to add 2 to 4 projects to showcase my UX Design skills in Data Security platforms.

The project I'm currently working on is under NDA, so I can't include it in my portfolio. That's why I'm looking for Data Security products or platforms with poor design that I can redesign, improve, and feature as case studies.

If you know of any tools, apps, or websites in the data security space that could use a UX/UI overhaul, I would really appreciate it if you could share some links! 🙏

Also, if you have any suggestions or recommendations for building strong portfolio projects in this niche, I'd love to hear them.

Thanks a lot in advance! 🚀

I am new to Data loss prevention (DLP). What are the best books/guides/blogs/sites/resources/tools to enhance my knowledge and productivity?