1touch.io

We've spent this week breaking down our Strong Performer recognition in the Forrester Wave for Sensitive Data Discovery and Classification, Q2 2026. Before we close it out, here's what we think security practitioners should actually take away from this report. The category is now official. This was the first time Forrester, or any major analyst firm, has evaluated sensitive data discovery and classification as a standalone category. Ten vendors. Sixteen criteria. That's a signal that organizations are no longer treating this as a checkbox feature inside a broader platform. It's a primary purchasing decision now. Quadrant position isn't the whole story. The Wave graphic is the first thing everyone looks at. It shouldn't be the last. The criteria scores underneath it tell you far more about whether a product will actually perform in your environment. Questions worth asking any vendor: How do they score on performance at scale? Do they cover your full environment, cloud, on-prem, and mainframe, under a single policy? How does their current offering score compare to their strategy score? Scale separates vendors fast. Of the ten vendors evaluated, only two scored 5/5 on both Performance and Scalability simultaneously. In petabyte-scale environments, that gap between 3/5 and 5/5 isn't academic. It shows up in scan cycle times, time to first value, and how much your team is babysitting the platform versus acting on its outputs. Hybrid coverage is still a meaningful differentiator. Cloud-native is not the same as cloud-and-on-prem. Only three of the ten evaluated vendors scored 5/5 on both cloud and on-premises coverage simultaneously. If your environment spans NAS, mainframe, and multiple cloud providers, that distinction matters more than any positioning label. Vendor stability is part of the evaluation. Several vendors in this Wave are VC-backed at Series A through F. That's worth factoring into your risk posture alongside the technical scorecard. The question isn't just who has the best product today, it's who will be accelerating their roadmap in 18 months. For us, the Wave validated what we've been proving in production for years. 5/5 on Performance, the highest mark in the entire evaluation. 5/5 on Scalability, Data Risk Visibility, Cloud Coverage, On-Prem Coverage, and Tuning Accuracy. And with the Pure Storage acquisition through Everpure now complete, the strategy gaps Forrester identified are already being addressed. If you're currently evaluating SDDC vendors or building out your data security program, we'd welcome the conversation. Reach out directly or drop a comment below. Full report: https://lnkd.in/eNygftUd (Subscription may be required) #DataSecurity #DSPM #DataClassification #ForresterWave #SensitiveData #DataGovernance #Cybersecurity #AIGovernance #1touchio #Everpure

Let's talk numbers. In the Forrester Wave for Sensitive Data Discovery and Classification Q2 2026, 1touch.io scored 5/5 on six capabilities: Performance — highest in the entire Wave Scalability — tied highest, with only one other vendor Data Risk Visibility — tied highest alongside two Wave Leaders Cloud Source Coverage — tied the highest On-Premises Source Coverage — tied highest Tuning Accuracy — tied highest 1touch.io and one other vendor were the only two in the entire evaluation to achieve 5/5 on both Performance and Scalability at the same time. That's what the scorecard says. Not marketing. Analyst validation. Interested in hearing more? Contact us to chat or set up a demo here: https://lnkd.in/eQEuGJ5y #forresterwave #1touch #5stars #datasecurity

Forrester scores are one thing. Production deployments are another. 1touch.io powers IBM Security Discover & Classify. That means our engine is running in some of the most complex, regulated, and data-heavy enterprise environments in the world, including mainframes. When Forrester scored us 5/5 on Performance and Scalability, it wasn't a surprise to us. We've been proving it at the petabyte scale for years. The Wave just made it official. If you're evaluating sensitive data discovery for a complex environment, we'd love to show you what that looks like in practice. Drop a comment or reach out directly. #DataSecurity #DSPM #DataClassification #SensitiveData #ForresterWave

Last week Forrester published something worth paying attention to. It's the first time any analyst firm has done a dedicated evaluation specifically for sensitive data discovery and classification. Not bundled into a broader security report. It wasn't tucked inside a data governance wave, it was it's own category. That matters. It means the market is real, the problem is serious, and organizations are prioritizing it. We were proud to be one of ten vendors evaluated, and even prouder of where we landed. This week we will be diving into the report, what it means, and key takeaways. Stay tuned! View the report here: https://lnkd.in/eNygftUd (Subscription may be required) #forresterwave #1touch #datasecurity #2026

1touch.io was named a Strong Performer in The Forrester Wave for Sensitive Data Discovery and Classification, Q2 2026. Forrester awarded 1touch.io 5/5 on Performance, the highest mark in the entire Wave. On Scalability, the same story. On Data Risk Visibility, same. No other vendor in the evaluation achieved 5/5 on both Performance and Scalability simultaneously. Forrester said it best: 1touch.io is "a compelling choice for large organizations with complex data environments and mature data security programs." You can read the report here: https://lnkd.in/eNygftUd (Subscription may be required) #forresterwave #highestrank #5stars #1touch #datasecurity

AI just changed the cybersecurity threat landscape overnight. Yesterday, Anthropic published a technical breakdown of their new model, Claude Mythos Preview. It found and exploited a 17-year-old vulnerability in FreeBSD. Autonomously. No human is involved after the initial prompt. It did the same with bugs that had gone undetected for 27 years in OpenBSD and 16 years in FFmpeg. The part that should make every security leader pause: their own engineers with zero formal security training asked it to find vulnerabilities overnight and woke up to complete, working exploits. The window between a vulnerability being disclosed and an attacker building a working exploit just collapsed. What used to take skilled researchers days or weeks now happens in hours, with no one in the loop. Here is the thing, though. The organizations that weather this transition will be the ones who already did the foundational work. Knowing what data they have, where it lives, how it's classified, and who has access to it. You cannot shorten your patch cycle if you don't know which systems hold sensitive data. You cannot triage a breach if your data landscape is a black box. You cannot build AI into your security workflows if the data feeding them is ungoverned. Data security posture is not downstream of AI readiness. It is AI readiness. The right response is not to wait and see. It is to get your house in order while there is still runway. That is exactly what 1touch is built for. Happy to talk if you want to understand your data exposure before the next wave arrives. #DataSecurity #DSPM #AIReadiness #CyberSecurity #CISO #AIGovernance #InfoSec

Honest question for anyone running AI initiatives right now: do you actually know what data your models are learning from? Because in most organizations, nobody does. We've seen it firsthand: Customer PII ends up inside an internal LLM, regulated financial records get ingested without any classification, and employee data sits in a training pipeline with no one watching it. This isn't because teams are careless, but because AI moves fast and data governance usually doesn't keep up. Regulators are starting to notice. And the exposure is real. Somewhere north of half of organizations still have no formal policy on the use of generative AI. Worse still, most wouldn't have the visibility to enforce one even if they did. You can't govern what you can't see. Before any AI initiative can be deployed responsibly, there's some basic groundwork that has to happen first. What sensitive data do you have? Where does it actually live? Who has access to it? Without answers to those questions, every AI project your org launches carries compliance and security risks that leadership probably isn't even tracking. That's what Kontxtual™ is built for. Giving teams real visibility across cloud, on-prem, and mainframe so AI can move forward without flying blind. If this is something your team is working through, we're always happy to talk. Book a Demo with us here🔗 https://lnkd.in/eQEuGJ5y #AIGovernance #ResponsibleAI #DataClassification #EnterpriseAI #DataSecurity #DataPrivacy #Kontxtual #Cybersecurity

Most organizations can now find their sensitive data. The problem is they stop there. Knowing where data lives doesn't tell you what it means, who has access to it, or whether it's actually exposed. That gap between discovery and enforcement is where breaches happen. It's also where compliance programs quietly fall apart. We talk to security teams all the time who have invested heavily in DSPM tools, and they're still drowning in alerts they can't prioritize. Data catalogs that nobody uses. DLP rules that fire constantly but don't have any real intelligence behind them. Meanwhile, sensitive data keeps sprawling across cloud environments, on-prem systems, and mainframes while the team tries to piece together a coherent picture from fragmented signals. That's the exact problem we built Kontxtual™ to solve. It doesn't just show you where your data is. It tells you what it means and what to do about it, using contextual intelligence to take you from passive visibility all the way to active enforcement. We put together a tool to help teams figure out where they stand today and what the right next step looks like. If you’re interested, you can find our Benchmarking Assessment here 🔗 https://lnkd.in/e_fkRw_2 Where does your organization fall on the discovery-to-enforcement spectrum? Curious to hear what others are running into. #DSPM #DataSecurity #DataDiscovery #DataClassification #SensitiveData #Kontxtual #DataGovernance #Cybersecurity

AI risk is moving fast right now. In the last 30 days: -The U.S. is pushing toward federal AI regulation -AI infrastructure is being treated like a national asset -Supply chain risk is back in focus It is not just about models. It is infrastructure, policy, and security all at once. #AI #Cybersecurity #DataSecurity #AIGovernance #RiskManagement