DoControl

DoControl automates the discovery, monitoring, and remediation of data access across an organization’s SaaS applications — Google Drive, Box, Microsoft OneDrive, Salesforce, Slack, Jira, BambooHR, GitHub, and similar tools. The core problem it targets is SaaS data sprawl: files and records shared too broadly, stale third-party app permissions, and overprivileged access that traditional network-centric security tools and generic CASB products don’t reliably catch or auto-remediate.

Founded in 2020 and headquartered in New York, DoControl raised $13.35 million across its earliest rounds before closing a $30 million Series B in 2022 led by Insight Partners, with participation from CrowdStrike’s early-stage investment arm, the CrowdStrike Falcon Fund. That strategic backing turned into a real product integration: DoControl’s application is listed in the CrowdStrike Store, where it ingests Falcon endpoint telemetry to cross-reference CrowdStrike detections against the same files sitting in corporate SaaS applications, enabling automated remediation when a flagged file shows up somewhere it shouldn’t.

The CrowdStrike ecosystem tie-in is a genuine differentiator versus SaaS security posture management (SSPM) tools that operate purely on their own telemetry, giving DoControl a credible technical hook beyond typical vendor messaging. Independent, third-party efficacy testing of its detection and remediation accuracy is still limited, but the combination of institutional and strategic cybersecurity-vendor investment is a meaningful signal in a still-maturing SaaS security subcategory.