Overview
HoundDog.ai automates data flow mapping and detects PII leaks across all stages of development. It starts with IDE plug-ins for shift-left PII prevention, includes daily or weekly repository scans (leveraging the new Managed Scans and Broker), and integrates with CI/CD pipelines for final checks before deployment.
The HoundDog.ai cloud platform provides the following features across all code repositories under management:
- PII leak vulnerability detection and tracking: Detect vulnerabilities exposing PII data through logs, files, third-party systems, and other mediums. Get essential context and remediation strategies, such as omitting sensitive data, applying masking or obfuscation, or using UUIDs instead of PII. File Jira tickets to assign the detected issue to the responsible team. Receive notifications via email and Slack when new vulnerabilities are discovered, based on their severity level.
- Sensitive data flow mapping and alerts: Drill down into individual occurrences where sensitive data is handled, visualize the data flows across your codebase, and receive alerts when new data elements are introduced based on their sensitivity level. Receive notifications via email or Slack when new data elements are detected in a code repository, which is critical for preventing out-of-scope product changes from going live and avoiding costly privacy incidents. View all files and data sinks where sensitive data is collected, processed, or stored. Ignore individual occurrences or complete data elements that may not be deemed sensitive in your organization.
- Proactive prevention of data processing agreement (DPA) violations. Configure scan rules to align with your organization's data processing agreements with third-party integrations and other privacy policies. This allows you to define a whitelist of sensitive data permitted across storage mediums and third-party integrations. For example, Datadog may be allowed to receive emails and usernames, while other PII will be flagged as potential leaks. By aligning with your organization’s policies and data processing agreements, the scanner enables you to identify and address DPA violations caused by PII oversharing. It ensures violations are caught and resolved before code is deployed to production, preventing issues from occurring in the first place.
- Incorporating data sanitizers into detection. The platform includes built-in definitions for data sanitization functions (e.g., masking, obfuscation, encryption, etc.) to prevent violations when detected—ensuring that only plaintext exposure of PII is flagged as a violation. Additionally, users can define custom sanitization functions to align with their organization’s specific standards and policies.
- Generate Records of Processing Activities: Complete a multi-step questionnaire to generate a RoPA report for GDPR compliance. Information about data flows is automatically populated, providing you with an up-to-date data map that always reflects the latest changes in the codebase.