Skip to main content

Data Loss Prevention (DLP)

Welcome to the Data Loss Prevention (DLP) documentation. This guide will help you understand how to use Speedscale's DLP feature to automatically discover, mask, and manage Personally Identifiable Information (PII) and sensitive data in your API traffic.

What You'll Learn​

This documentation covers:

  • Setting up DLP in your environment
  • Discovering PII in test environments
  • Creating DLP rules to protect production data
  • Applying rules to production forwarders
  • Generating test data from redacted snapshots
  • Best practices and troubleshooting
  • Troubleshooting common issues

Quick Start​

If you're new to DLP, follow these steps:

  1. Introduction - Understand what DLP is and why you need it
  2. Discovering PII - Start discovering sensitive data in test environments

DLP Workflow​

Documentation Structure​

Getting Started​

Core Workflows​

Advanced Topics​

Reference​

Key Concepts​

Before diving in, familiarize yourself with these key concepts:

  • DLP Rule: A configuration that defines how data should be redacted and transformed
  • PII: Personally Identifiable Information (email, SSN, credit card, etc.)
  • REDACTED Token: A placeholder value that replaces PII in production traffic
  • Transform Chain: A sequence of filters, extractors, and transforms that process data
  • Forwarder: A component that forwards traffic to Speedscale cloud
  • Baseline Rule: The install-wide rule named by the SPEEDSCALE_DLP_CONFIG forwarder setting, applied to all captured traffic (details)
  • Group Rule: A rule scoped to the namespaces and services one group owns, applied on top of the baseline
  • Snapshot: A captured set of API traffic at a point in time

Need Help?​