Open Raven Cloud-Native Data Protection Platform
Open Raven is a cloud-native data security posture management (DSPM) platform that discovers, classifies, and monitors sensitive data across AWS, Azure, and Google Cloud.
Publisher review
Open Raven is a cloud-native data security posture management (DSPM) platform that discovers, classifies, and monitors sensitive data across AWS, Azure, and Google Cloud. Founded in 2019 by former security leaders Dave Cole (ex-CPO at Tenable and CrowdStrike) and Mark Curphey, the platform uses serverless scanning functions—not agents—to identify where sensitive data lives, who can access it, and how it flows across cloud infrastructure. The system classifies data across 200+ predefined categories spanning personal identifiable information, payment card data, API keys, credentials, and metadata-specific combinations that flag risky cross-field patterns.
Open Raven runs with read-only cloud access and requires no compute or software installation, making it lightweight for large-scale scanning. It integrates directly with AWS S3, RDS, Snowflake, BigQuery, and SaaS platforms like Google Drive, providing continuous monitoring of data events and policy violations. In June 2024, Formstack acquired Open Raven, expanding Formstack's workflow platform to include data discovery and compliance controls.
The platform appeals to security teams managing multi-cloud sprawl, data engineers building lakes, and compliance officers navigating HITRUST, GDPR, and similar regulations. Strengths include agentless architecture, serverless efficiency, and out-of-box policy packs. Noted drawbacks include a GUI that some users find less intuitive for non-security teams and pricing that scales with storage volume and data store count rather than transparent per-user tiers.
How it works
-
Multi-cloud data discovery
Automated scanning of AWS S3, RDS, Azure Blob Storage, and Google Cloud Storage using serverless functions to find all data repositories without installing agents.
-
Sensitive data classification
200+ built-in classifiers identify PII, payment cards, credentials, secrets, and custom data types using machine learning, pattern matching, and keyword analysis; custom regex-based rules supported.
-
Data detection and response (DDR)
Real-time monitoring of data access events, with automated triggers to block unauthorized access, revoke permissions, or quarantine exposed files.
-
Data security posture assessment
Policy-driven audits detect misconfigured buckets, overpermissioned identities, unencrypted data, and shadow data stores; compliance templates for HIPAA, GDPR, SOX included.
-
SaaS and unstructured data coverage
Extends scanning to Google Drive, Slack, Zoom transcripts, and other SaaS apps to catch sensitive data leaked or stored outside primary cloud storage.
-
Sampling and incremental scanning
Configurable scan parameters allow organizations to balance coverage depth with scanning speed; incremental updates reduce redundant re-scanning of unchanged data.
-
Role-based access and alerting
Team-level reports, executive dashboards, and granular RBAC controls; Slack/email alerts for critical findings; queryable API for integration into security workflows.
Strengths and trade-offs
Strengths
- Agentless, serverless architecture scales to large datasets without performance penalties or infrastructure overhead.
- Pre-built policy packs and 200+ data classifiers accelerate time-to-value; reduced manual rule authoring for common compliance standards.
- Direct integration with AWS Marketplace and broad cloud-provider support (AWS, Azure, GCP) reduces deployment friction for multi-cloud teams.
Trade-offs
- GUI lacks intuitive navigation for non-security personnel; setup and interpretation of advanced policy rules require security expertise.
- Pricing scales by data volume and storage count rather than per-user seats, making per-department budgeting unpredictable for large estates.
- Acquired by Formstack in mid-2024; product roadmap now folded into Formstack's workflow platform, raising questions about standalone feature velocity and long-term independence.
Pricing context
Open Raven uses consumption-based pricing tied to cloud storage scanned and the number of data stores monitored. The model charges per storage type (e.g., per AWS S3 bucket, RDS instance, or Snowflake cluster), with each data store including 10 GB of scanned data per month. Additional cloud providers and SaaS connectors add to the monthly cost.
No public per-seat or flat annual fees are disclosed; pricing is custom-quoted based on environment size. The platform is available on AWS Marketplace and via direct subscription with annual and multi-year discounts available. A managed service tier adds guided implementation, assisted third-party integrations, expert findings analysis, and quarterly reporting. No free tier is advertised, but Open Raven accepts usage-based pilots.
User reviews
No user reviews yet. Be the first to write one.
Sources
Reporting on this tool draws on these publicly available sources.
- www.openraven.com — Official launch announcement of Open Raven platform, core capabilities, and automation focus.
- www.businesswire.com — Detailed press coverage of platform launch, founders Dave Cole and Mark Curphey, platform architecture and data classification.
- www.formstack.com — Official announcement of Formstack acquisition of Open Raven in June 2024, integration rationale, and Dave Cole's role as CTO.
- tracxn.com — Company profile, founding year (2019), team, funding history, and competitive landscape.
- www.g2.com — User reviews, customer feedback on GUI usability, strengths and weaknesses reported by real users.
- aws.amazon.com — AWS Marketplace listing, deployment model, cloud-native architecture, pricing consumption model, and availability.
- www.businesswire.com — Data detection and response (DDR) capabilities, recent feature expansions, and platform maturity.
- www.g2.com — Competitive landscape, alternative platforms including Polar Security, Qohash, and other DSPM vendors.