Welcome to the inaugural edition of Dispatch, our monthly product breakdown where we share everything we’re building at Matters.AI.
In our July episode, host Sony Gupta and Product Manager Jeevanth walked us through our latest platform release. The focus for July was simple, we wanted to bring dark data hiding in hard-to-reach places into full view, and give security teams fast, surgical ways to neutralize risks right from the console.
Here is the complete, detailed breakdown of everything we released in July.
1. Surgical SaaS Control & Enterprise Platform Security
Finding a risk in a SaaS app is only half the battle. The real challenge is fixing it quickly without breaking business workflows or annoying employees.
File-Level Remediation for SaaS
Previously, remediating SaaS risks often required broad, sweeping policy changes across an entire tenant. Now, analysts can take surgical action on individual exposed files in Google Drive, OneDrive, and SharePoint, directly inside the Matters.AI finding view.
- Instant One-Click Fixes: If a document containing confidential PII or IP is exposed, you can revoke external access, pull public sharing links, or transfer ownership with a single click.
- Reduces Operational Friction: You fix the exact security flaw on the specific file without restricting normal collaboration across the rest of the company.
- Audit-Ready Logging: Every action taken in the console automatically generates an immutable audit record, making it easy to prove compliance during security reviews.
2. Endpoint Protection: MIP Integration & Expanded File Scans
Employee laptops and desktops quietly accumulate sensitive data—often outside centralized cloud storage. In July, we significantly upgraded our endpoint discovery and classification capabilities.
Native MIP Label Support for Windows Endpoints
Many enterprises rely heavily on Microsoft Purview Information Protection (MIP) to tag sensitive data. Matters.AI now natively reads and respects existing MIP labels on Windows, Mac, Linux, endpoints during automated classification scans.
- Zero Wasted Effort: Your existing investments in labeling taxonomies are instantly preserved and utilized during risk evaluations.
- Fills Microsoft’s Coverage Gaps: Matters.AI extends the ability to apply MIP labels to file types that aren’t natively supported by Microsoft Purview, creating a unified governance framework across all endpoint files.
Expanded File Format Coverage
Legacy archives and email exports are notorious hiding spots for dark data. We expanded our classification engines to natively parse and scan four new key file types:
- PST Archives: Scans full Outlook email backup archives, unlocking visibility into years of historical emails and attachments.
- EML Files: Inspects exported individual email messages.
- HTML Pages: Scans saved web pages and browser downloads that may contain sensitive session data or customer info.
- HEIC Images: Parses mobile photo formats, catching PII or credentials captured in photos and uploaded to local drives.
3. Database Security: Self-Hosted Oracle & Distributed SQL
As data environments grow, security teams are forced to protect a mix of traditional legacy databases and modern cloud-native systems. July brought major expansions to both ends of the spectrum.
Database Activity Monitoring (DAM) for Self-Hosted Oracle
On-premises and self-hosted Oracle databases often hold an enterprise’s most critical core data, yet monitoring them usually introduces heavy performance lag. We brought full, zero-impact DAM to self-hosted Oracle deployments:
- Continuous Audit Log Ingestion: Collects native Oracle audit logs automatically without inline proxies or heavy software agents.
- Out-of-the-Box Detection Rules: Automatically flags suspicious behaviors in real time, such as unauthorized privilege escalation, dormant account activity, or unusual bulk data exports.
DSPM for Distributed SQL: CockroachDB
For organizations running modern, multi-node cloud workloads, Matters.AI Data Security Posture Management (DSPM) now natively supports CockroachDB.
- Deep Granular Scans: Automatically discovers and classifies sensitive data down to the specific schema, table, and column level.
- Multi-Node Visibility: Gives you complete visibility into where regulated data lives across every cluster node without needing complex manual configurations.
4. Command Center Overhaul
We didn’t just expand what we monitored, we completely redesigned how security analysts interact with their findings.
The Redesigned Exposures Page
The Exposures view is now an operational command center built for fast triage:
- Top Exposure Category Cards: Quickly highlights your biggest threat vectors at a glance (e.g., exposed PII, unencrypted local folders, over-privileged users).
- Trend & Velocity Charts: Tracks open vs. closed risks with 7-day change indicators, letting managers easily measure how fast their team is resolving threats.
5. Meet SAM Co-Pilot: Your AI Security Engineer
The flagship highlight of our July release is the Matters.AI SAM Co-Pilot.
Instead of requiring analysts to write complex query language or manually stitch together logs from three different tools, SAM allows you to chat with your entire security posture in plain English.
You ask: “Hey, what are the top 5 risk gaps I should fix today?”
SAM immediately analyzes your data estate by evaluating:
- Data Sensitivity: What type of data is involved (e.g., credit card numbers vs. internal docs)?
- Exposure Scope: How widely accessible is it (e.g., public link vs. internal team share)?
- Identity & Privileges: Who has access and what can they do with it?
It then synthesizes this raw telemetry into a prioritized list complete with step-by-step remediation instructions, effectively acting as an on-demand AI security analyst on your team.
6. Centralized Access with SAML SSO
To keep the Matters.AI console itself secure and aligned with enterprise access standards, we rolled out SAML SSO support.
- Unified Access Control: Centralize user sign-ins through your primary identity provider, including Okta, Azure AD (Microsoft Entra ID), or Google Workspace.
- Strengthened Admin Security: Enforce multi-factor authentication (MFA) and access policies configured in your IdP before anyone can log into the security console.
July Updates at a Glance
- SaaS Security: One-click file-level remediation for Google Drive, OneDrive, and SharePoint.
- Platform Security: Centralized SAML SSO authentication via Okta, Azure AD, and Google Workspace.
- Endpoint Protection: Reads and applies MIP labels; scans .PST, .EML, .HTML, and .HEIC files.
- Database Security: Real-time DAM for self-hosted Oracle; schema-and-column DSPM for CockroachDB.
- Console UX: Updated Exposures command center with 7-day trend tracking.
- SAM Copilot: Official launch of the SAM Co-Pilot for natural-language risk queries and guided fixes.
All of these capabilities are live in your Matters.AI console today. Log in, ask the SAM Co-Pilot a question about your security posture, and experience the new updates firsthand!
