Why EmberHound
This page sets out the choices behind EmberHound and what each one gives up. If a trade-off here is wrong for you, it's better you find out now than in month three.
The decisions
Files are matched on the endpoint. What leaves is a masked preview, a fingerprint hash, and the metadata needed to act on the finding. The platform never holds your file content, so a breach of us is not a breach of your data.
What it gives up
We only see devices you've enrolled. There's no agentless discovery, and no cloud or SaaS scanning today.
Where material questions are unanswered, or a rule doesn't cover your case, the result says so. Incomplete information doesn't quietly become a reassuring answer.
What it gives up
You get a clean answer less often. Some results need a person to look at them before they mean anything.
No percentage, no traffic light. The product shows what was found, where it was found, and what was done about it.
What it gives up
There's no single number for a board slide. You'll have to describe your position rather than display it.
EmberHound reports. Your team decides what to delete, move, or protect. It never modifies the files it scans.
What it gives up
This isn't data loss prevention. If you need to block data at the point it leaves, that's a different category of product.
Fingerprint deduplication collapses the same value across scans and devices into one entry with a confidence score, so a triage queue stays a size one person can work through.
What it gives up
Grouping is a judgement. Two separate copies holding identical content read as one entry until you open it.
Deploy through the MDM you already run. There's no professional services engagement, and no dedicated analyst assumed.
What it gives up
If you have a security team of 15 and want deep SIEM integration and a custom workflow engine, this is the wrong shape.
The alternatives
Each of these works for somebody. What separates them is what they ask of you in return, so all three are set out the same way.
Interviews and a maintained inventory
Prevention across a whole estate
Endpoint discovery for lean teams
We built the third one because the first is what most lean teams can actually staff, and it doesn't produce anything you can hand an auditor.
What you can buy
The discovery plans differ by what they search for. Everything else about them is the same: the agent, the findings, the dashboard, and the evidence you can export.
Contact details, UK identifiers, and financial identifiers in files on enrolled devices, plus the subject search that finds a person's information when a request arrives.
GDPRCard numbers, security codes, and expiry dates stored outside your payment systems, with Luhn validation before anything becomes a finding.
PCI DSSPersonal data and card data searched together in a single pass, rather than running two scans and reconciling the results afterwards.
CombinedA separate product line rather than a scanning policy. Register each AI system your organisation uses, complete a guided EU AI Act assessment, and manage the obligations, evidence, and decisions that follow.
EU AI ActOne device and one user, with no card details, on either discovery plan. It covers the everyday identifiers rather than the full detection set, which is the honest way to see what a scan of your estate would return.
One deviceOCR reads image-based documents and scans. Mailbox scanning extends what the endpoint agent looks at. Cloud and external drive scanning widen it further. Each is priced separately, and we'll quote against your estate rather than a list. See what each plan includes.
Scan one device, look at what comes back, and decide whether the trade-offs above are the right ones for you.
No card details required. One device, one user.
We use cookies to run this site, measure how it is used, and to advertise on other platforms. You can accept or refuse each purpose separately.
Keeps you signed in and remembers this choice. Always on.
Google Analytics, Sentry and Vercel. Which pages are used, and what breaks.
LinkedIn, X and Meta pixels, loaded through Google Tag Manager.
