Bedrock Data Automates Data Exposure Remediation with AI-Assisted Tool

Bedrock Data has introduced an AI-assisted remediation tool designed to delegate the critical task of fixing data exposures to the appropriate data owners across an enterprise. This new capability automatically discovers who owns each exposed dataset, then initiates a ticket within the organization's existing Jira or ServiceNow workflows. The tool provides these owners with the necessary context to understand and resolve the exposure efficiently.

Traditionally, centralized security teams struggle to keep pace with the sheer volume of data and the rate at which new exposures can arise. With enterprises managing petabytes of data across millions of records and thousands of data stores, a small security team cannot realistically manage and remediate every identified issue. Data owners within engineering, data, and business teams possess the specific knowledge of data usage and context that security teams often lack, making them the ideal candidates for remediation.

Conventional Data Security Posture Management (DSPM) tools often fall short by providing only visibility into exposures, leaving security teams with an overwhelming backlog and no effective mechanism for resolution. A recent Enterprise Data Security Confidence Index survey revealed that 76% of respondents cited a lack of automation and excessive manual work as major impediments to effective data security. This gap is further exacerbated by the rise of AI agents and copilots, which can access and process data at machine speed, potentially surfacing sensitive information that was previously obscure.

"Every enterprise has far more data issues than its centralized data security team can action. Until now, with data growing exponentially, risk accumulation and risk remediation were divergent curves. Data is the responsibility of the lines of business and the data organization, and remediation only scales when they own the fix," stated Bruno Kurtic, CEO of Bedrock Data. "Bedrock Data finds the owner, sends the issue to the tools they already use, answers their questions inside the ticket and verifies the result. Security teams keep control of the rules and the audit trail, and those curves no longer diverge because remediation now operates at scale."

The federated remediation process leverages existing IT Service Management (ITSM) systems like Jira and ServiceNow, which are already familiar to enterprise teams. This eliminates the need for new tool deployments or extensive training for those responsible for implementing fixes. Security teams retain control, with the ability to define custom routing rules using natural language, such as directing findings related to specific cloud accounts or access permissions to the appropriate teams.

Bedrock Data automates the workflow through three key steps. First, it generates tickets for identified exposures, providing AI-driven context for the owner. Second, its AI can answer questions within the ticket, clarifying access or usage details. Finally, the policy engine tracks the ticket to closure, validating the fix. If an exposure persists, the ticket is automatically reopened. Conversely, if the exposure is confirmed as resolved, the ticket remains closed, or Bedrock Data can automatically close tickets if it observes the exposure has been remediated independently.

For well-defined fixes, Bedrock Data can even apply them directly, with options for automated remediation based on sensitivity and other criteria, notifying the data owner of the action. This approach ensures that remediation efforts keep pace with data creation, transforming data security from a centralized backlog into a scalable, company-wide program. The verified audit trails generated by this process are crucial for compliance with regulations such as PCI DSS 4.0.1, SOC 2, and NYDFS Part 500, providing essential evidence for auditors and regulators.

Manish Chandela, EVP Information Security, Risk and Privacy at Sportradar, commented on the solution's impact: "Seeing the risk is table stakes. Reducing it means getting thousands of issues fixed without breaking the business. Bedrock Data puts each issue in front of the right owner, with the context to fix it, inside the tools they already use, and then proves the fix held. Remediation stops being a backlog my security team carries and becomes a program the whole company runs, with the evidence our board and auditors expect."