Thales has introduced a new File Activity Monitoring (FAM) capability as part of its CipherTrust Data Security Platform, aimed at enhancing real-time visibility and control over unstructured data. This new feature helps organisations detect potential misuse, enforce compliance, and strengthen their overall data security posture across on-premises, hybrid, and multicloud environments.
The launch marks an expansion of Thales’ existing expertise in securing structured data, extending its platform to support the growing volume of unstructured data — which, according to IDC, now accounts for 90% of all global data. With increasing risks from data exposure and regulatory scrutiny, the ability to monitor file activity and respond quickly to threats is becoming essential for security teams.
Monitoring sensitive data across complex environments
Thales File Activity Monitoring allows organisations to track how unstructured data such as emails, chat logs, media files, and application logs is accessed, copied, downloaded or shared. It provides real-time alerts and analytics that help detect anomalies, enforce policy controls, and ensure compliance with global regulations like GDPR, HIPAA, and PCI DSS.
The platform gives enterprises centralised visibility across their data estate, enabling security teams to understand where sensitive data is located, who has access to it, and whether it is properly secured. This reduces risk exposure and supports proactive data protection strategies.
Leila Kuntar, Principal Information Security Engineer at Amadeus, said, “Thales’ innovative approach to File Activity Monitoring tackles key challenges like blind spots in hybrid environments, offering real-time visibility and smart anomaly detection — a potential game-changer for teams overwhelmed by false positives. By striking the right balance of depth and simplicity, FAM shows promise in helping us strengthen the SOC without added complexity. With tighter SIEM integration, it can sharpen response and let teams focus on what matters most. We’re excited to see how FAM evolves and enhances our data security.”
Enhancing DSPM through behaviour-driven insights
The FAM feature is designed to improve Data Security Posture Management (DSPM) by transforming static classification into dynamic risk intelligence. By observing behavioural context in how files are used, security teams can detect unusual activity and apply appropriate remediation — including encryption, user access controls, and audit logging for incident reconstruction in the event of a breach or policy violation.
Thales’ long-standing leadership in database security provides a solid foundation for its move into unstructured data monitoring. “As unstructured data grows rapidly across distributed environments, organisations need more integrated ways to track and safeguard their most sensitive information,” said Todd Moore, Vice President of Data Security Products at Thales. “With File Activity Monitoring, Thales reinforces its leadership in enterprise data security by delivering real-time insight, intelligent automation, and unified visibility through a single, powerful platform.”
Integrated generative AI tools to simplify operations
To reduce operational complexity and support audit readiness, the solution includes a Generative AI-powered Data Security Assistant. This built-in chatbot allows users to generate audit reports, query security logs, and manage compliance tasks through natural language commands.
“As technology evolves rapidly, our controls must be flexible enough to keep pace without adding complexity,” Moore said. “Automation and intelligence help overwhelmed security teams scale operations and focus on what matters most. With tools like our chatbot, they can ask natural language questions and get instant, actionable answers, accelerating response times and improving operational efficiency.”
File Activity Monitoring is now available as part of the CipherTrust platform, offering enterprises a more streamlined way to safeguard their growing volumes of unstructured data.
