Cyberhaven CISO: Aman Sirohi

What the company sells

Cyberhaven sells a data security platform that traces the full lifecycle of data and adapts protection as context changes, covering data loss prevention, data security posture management, insider risk management and AI security.

Cyberhaven Flow traces the full lifecycle of data and adapts protection to changing context. Cyberhaven says Flow protects data across human and agentic workflows and connects lineage, identity, and behavior to secure data as it moves across endpoints, browsers, and the cloud. Agentic Data Security, Human Data Security, and DSPM work together in one unified platform.

Data lineage is the technology at the center of the platform. Cyberhaven says its data lineage technology maps the full journey of sensitive data, from creation to every movement, transformation, and fragmentation. Cyberhaven records every event for every piece of data, including every move, copy, edit, and share. Cyberhaven says data lineage traces data from its origin, providing the context used to classify what type of data it is. Cyberhaven says specific types of data start their journey in specific places, such as the customer database in Snowflake or the source code repository in Github. Cyberhaven extracts text content from data and performs optical character recognition (OCR) on images to pull additional text content.

On the data loss prevention side, Cyberhaven says it combines content analysis with data lineage to reduce false positives. Cyberhaven says it protects data across all exfiltration channels with one product and one policy. Cyberhaven can block exfiltration of sensitive data, educate users, and allow override with justification. Cyberhaven offers a visual builder for creating and editing policies. Cyberhaven lets administrators see how a policy would apply to historical data without deploying it in production. Cyberhaven tracks what type of data was encrypted or compressed, so the data can still be tracked after it can no longer be scanned.

For insider risk, Cyberhaven says it combines data awareness and behavioral signals to detect and stop insider threats. Cyberhaven blocks data exfiltration across cloud, email, websites, removable storage devices, Apple AirDrop, and more. Cyberhaven stores a record of events indefinitely and can correlate events occurring weeks or months apart. Cyberhaven scores users on the actions they take and on the type of data affected. Users with a history of risky behavior can be added to a user group that has elevated remediation. Cyberhaven flags when a user changes the extension or name of a file that contains sensitive data and can block subsequent exfiltration. Cyberhaven remotely captures user actions related to data and stores them in its cloud, so investigations do not need physical possession of a device.

For data posture, Cyberhaven says it discovers and classifies data, detects vulnerabilities as it flows across environments, then secures it automatically. Cyberhaven's data provenance categorizes data as Corporate, Personal, or Public. Cyberhaven reads Microsoft Information Protection labels and other third-party labels. Cyberhaven inspects data stored on user devices, complementing cloud data discovery. Cyberhaven can distinguish between the corporate instance of an approved cloud application and a personal instance of the same application. Cyberhaven detects and tracks usage of new cloud apps employees try to use with company data.

Cyberhaven tracks what data each agent accesses, what actions it takes, and how sensitive data moves through its workflows. Cyberhaven discovers and monitors Model Context Protocol servers and AI connectors across the enterprise. Cyberhaven gives every AI tool and agent a risk score across five dimensions: data sensitivity, model integrity, compliance adherence, user access controls, and security infrastructure. Cyberhaven enforces runtime guardrails at the prompt and response level, blocking high-risk data movement and redirecting users to sanctioned tools. Cyberhaven says it governs coding agents like Claude Code and Cursor. Linea AI is described as an AI agent that detects and stops the most critical risks to important data, and Linea AI is powered by the Large Lineage Model.

Cyberhaven delivers its service from the cloud, so there are no databases or application servers to manage. Cyberhaven connects to sanctioned applications such as Office 365 and Google Workspace to see content created and shared in the cloud. Cyberhaven's endpoint agent supports Windows, macOS, and Linux. Cyberhaven's browser extension supports all major browsers and collects telemetry for web-based cloud applications. Cyberhaven streams incidents, events, and audit logs into SIEM, SOAR, or AI SOC platforms, with purpose-built integrations for Splunk, Cortex XSOAR, and ServiceNow. Cyberhaven connects to ChatGPT Enterprise and Claude Enterprise directly. Cyberhaven can store incident screenshots, match highlighting excerpts, and other evidence in a cloud bucket the customer owns and controls.

Cyberhaven says it meets internationally recognized standards for security, cloud, and privacy. Cyberhaven provides audit evidence for frameworks like CMMC, HIPAA, PCI, and ISO. Cyberhaven consolidates endpoint agents while coexisting with Microsoft Purview and existing EDR. Cyberhaven analyst services provide a dedicated data protection analyst who continuously tunes the customer's environment. Cyberhaven onboarding services deploy Cyberhaven, integrate it with the customer's environment, and align it to the customer's use cases from day one. Cyberhaven describes a technical account manager who combines deep product expertise with a clear view of the customer's goals.^{[1][2][3][5][6][8][9][10][12][13][14][15][16][17]}

Categories

• Data loss prevention (primary category)
• Data security posture management
• Insider risk management
• Compare Cyberhaven with companies in the same categoryside by side

Headquarters

United States

Founded

Not established from our sources

Ownership

Privately held^[4][7][11]

CISO on record

Aman Sirohi, Chief Information Security Officer (appointment announced on August 19, 2025)

Website

cyberhaven.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Cyberhaven Flow^[8][21]

  Protects data across human and agentic workflows.

  Flow connects lineage, identity, and behavior to secure data as it moves across endpoints, browsers, and the cloud. Agentic Data Security, Human Data Security, and DSPM work together in one unified platform.

• Data Detection and Response^[17]

  Finds and follows sensitive data to protect it everywhere it goes.

  Cyberhaven analyzes billions of events surrounding every piece of data at the customer's company to classify and protect a much broader range of sensitive information. Cyberhaven tracks data at a granular level as it moves between files and apps. Cyberhaven can replay an incident with screen recordings and forensic file capture.

• Insider Risk Management^[1][8]

  Combines data awareness and behavioral signals to detect and stop insider threats.

  Cyberhaven stores a record of events indefinitely and can correlate events occurring weeks or months apart. Users can be added to watchlists with elevated response actions such as blocking uploads without end user override. Cyberhaven integrates with directory services to pull user details such as department, manager, and departure date.

• AI Security^{[1][3][8][13][16]}

  Gives visibility into AI usage and enforces risk-based controls.

  Cyberhaven inventories sanctioned and unsanctioned AI apps as they appear across the organization. Cyberhaven discovers and monitors Model Context Protocol servers and AI connectors. Cyberhaven gives every AI tool and agent a risk score across five dimensions.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Cyberhaven's categories, then alphabetical. A list from the record, never a ranking.

• On data loss prevention, Cyberhaven competes with Fasoo, Forcepoint, Hilt, Jazz, Next DLP, BigID, Code42, Concentric AI, Cyera, DTEX Systems and 19 more.

• On data security posture management, Cyberhaven competes with BigID, Concentric AI, Cyera, Polymer, Arexdata, IBM, Immuta, Securiti, Sentra, Symmetry Systems and 10 more.

• On insider risk management, Cyberhaven competes with Code42, DTEX Systems, Teramind, Hilt, Jazz, Next DLP, Archipelo, Gurucul, Mimecast and Proofpoint.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · no rating shown · 18 reviews^[7]seen November 3, 2026

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• July 28, 2026

  Cyberhaven introduced Cyberhaven Flow, an AI-native data security platform built to protect data across human and AI workflows. Cyberhaven^[21]

• March 11, 2026

  Cyberhaven announced a distribution agreement with Ignition Technology to bring its unified AI and data security platform to the United Kingdom. Cyberhaven^[20]

• February 10, 2026

  Cyberhaven announced business results for the fiscal year ending January 31, 2026, reporting record growth in revenue, customers and platform adoption. Cyberhaven^[19]

• February 5, 2026

  Cyberhaven Labs released its 2026 AI Adoption & Risk Report, based on data movements around generative AI applications, endpoint AI applications and AI agents. Cyberhaven^[18]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]cyberhaven.comCyberhaven · cyberhaven.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Stop Data Loss with Modern, Reimagined DLP | CyberhavenCyberhaven · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Cyberhaven solves the 509 surge in shadow ai 302762144Cyberhaven via PR Newswire · prnewswire.com · published May 5, 2026 · Tier A: the company, a regulator or a filing
4. [4]Cyberhaven raises 100 million series d at 1 billion valuation 302418497Cyberhaven via PR Newswire · prnewswire.com · published April 2, 2025 · Tier A: the company, a regulator or a filing
5. [5]Privacy policyCyberhaven · cyberhaven.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
6. [6]AI & Data Security Platform for the Agentic Enterprise | CyberhavenCyberhaven · undated page, accessed October 24, 2026 · Tier A: the company, a regulator or a filing
7. [7]Cyberhaven Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 24, 2026 · Tier C
8. [8]Agentic Data Security, Human Data Security, and DSPM | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
9. [9]Trace Data from Origin to Exfiltration with Lineage | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
10. [10]Insider Risk Management: Beyond Detection to Action | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
11. [11]DSPM That Goes Beyond Discovery to Real Protection | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
12. [12]Cloud Data Security: Protection Beyond the Cloud | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
13. [13]AI Security for Autonomous Agents | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
14. [14]AI That Thinks Like Your Best Security Analyst | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
15. [15]Cyberhaven Integrations: SIEM, SOAR, Identity, Cloud, and AI ToolsCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
16. [16]Cyberhaven Professional Services | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
17. [17]Data Detection & Response: Reimagined DLP & IRM | CyberhavenCyberhaven · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
18. [18]2026 AI Adoption & Risk Report: Data Governance Gaps Widening | CyberhavenCyberhaven · published February 5, 2026 · Tier A: the company, a regulator or a filing
19. [19]Cyberhaven Reports Record Growth in FY 2026 | AI Data SecurityCyberhaven · published February 10, 2026 · Tier A: the company, a regulator or a filing
20. [20]Cyberhaven Partners with Ignition Technology to Expand AI & Data Security in the UKCyberhaven · published March 11, 2026 · Tier A: the company, a regulator or a filing
21. [21]Cyberhaven Launches Flow: AI-Native Data Security PlatformCyberhaven · published July 28, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Cyberhaven? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.