Next Generation API Data Protection Dashboard

You can download or email a PDF report from the API-enabled Protection > SAAS (NEXT GEN) > Dashboard page.

You can select the desired application and click the PDF REPORT drop-down and select:

• Download: On selecting this option, the UI generates a PDF report for all instances of the selected application.

• Email: On selecting this option, you can email the PDF report to a user.

• Schedule: On selecting this option, you can schedule and email the PDF report to a user. A new pop-up window opens, enter the following details:

  1. Select New Report.

  2. Enter the name of the report.

  3. Enter the recipient’s email address.

  4. Select the frequency – Daily, weekly, or monthly.

  5. Select the time and timezone and click Schedule.

  

  To view a list of scheduled reports, click the PDF REPORT drop-down, click Schedule. A new pop-up window opens. Click the New Report drop-down to view the scheduled reports. Select an existing report to view the details. You can delete an existing report too by clicking the DELETE button on the top-right.

Next Generation API Data Protection has introduced a new dashboard page for Anthropic Claude Enterprise. This page provides a high-level overview of the total number of DLP incidents, broken down by whether they originated from user prompts or Anthropic Claude responses, along with violated chat messages in the last 24 hours. The dashboard also displays user prompt and AI response DLP violations categorized by DLP profile or rule, user insights including total users, users with DLP violations, and total conversations, and file-level data covering total files, files with DLP violations, malware-infected files, file exposure, and file DLP violations categorized by DLP profile.

The dashboard page displays the following statistics:

• Total DLP Incidents: Count of total DLP incidents from Anthropic Claude Enterprise usage.

• DLP Incidents from User Prompts: Count of Claude-related DLP incidents arising out of user prompts.

• DLP Incidents from Anthropic Claude Responses: Count of Claude-related DLP incidents arising out of ChatGPT responses.

• Violated Chat Messages (24H): Count of policy violations detected in the last 24 hours for the selected Anthropic Claude Enterprise application instance, aggregated across both user prompt and AI response message types.

• User Prompt DLP Violation: Total number of user prompts with DLP violations based on DLP profiles or rules.

• AI Response DLP Violation: Total number of AI responses with DLP violations based on DLP profiles or rules.

• User Insights: Total number of Anthropic Claude Enterprise users, user with DLP violations, and total conversations.

• Files: Total number of files, files with DLP violation, malware-infected files, total internal users scanned in the GenAI app account.

• File Exposure: Total number of files based on exposure. Currently, Claude categorizes all file exposure under Owner or Internal.

• File DLP Violations: Files that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

Next Generation API Data Protection has introduced a new dashboard page for Next Generation API Data Protection Atlassian Jira. This page provides a high-level overview of the total number of tickets and tickets with DLP violations, number of malware files, number of internal users, breakdown of DLP violations based on the project, and files with DLP violations.

The dashboard page displays the following statistics:

• Total projects: The total number of external and internal projects.

• Total external projects: The total number of projects exposed externally.

• Ticket incidents w/ DLP violations: Total number of ticket incidents.

• External ticket incidents w/ DLP violations: Total number of external ticket incidents with DLP violations.

• Malware Files: Total number of files infected with malware.

• Internal users: Total number of internal users.

• File DLP Violations: Files that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

Next Generation API Data Protection has introduced a new dashboard page for Box, Egnyte, Google Drive, Microsoft 365 OneDrive, ShareFile, and SharePoint Sites. This page provides a high-level overview of total number of files, files with DLP violations, malware-infected files, internal and external users, file exposure, and file DLP violations widget categorized by DLP rule or profile.

The dashboard page displays the following statistics:

• Total Files: Total number of files scanned in SaaS app account.

• Files with DLP Violations: Total number of files with DLP violations.

• Malware Files: Total number of files infected with malware.

• Internal Users: Total number of internal users within the organization.

• External Users: Total number of external users outside the organization.

  In the current release, Netskope does not display the number of external users for Box and Google Drive. Box and Google Drive do not provide related information when a external user does not have any access to files in the organization. This is a known issue and a fix is due soon.

• File Exposure: Total number of files, and the number of anonymous, owner, internal, external, private, public, organization-wide, internal cross-domain, and unknown shared files.

• File DLP Violations: Files that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

  This dashboard page for Microsoft 365 OneDrive and SharePoint Sites does not display the File Types widget.

  The following two fields are available on the dashboard when multi-geo is enabled for Microsoft 365 OneDrive & SharePoint.

  The following values represent estimates, not exact metrics.

• Files by Region: Total number of files by multi-geo region on-boarded during instance setup.

• Users by Region: All users across all multi-geo regions irrespective of the on-boarded regions during instance setup.

Next Generation API Data Protection has introduced a new dashboard page for ChatGPT Enterprise. This page provides a high-level overview of the total number of files/messages with DLP violations, message DLP violations widget categorized by DLP rule or profile, total number of users and conversations, and fine tuning files with DLP violations and malware-infected files.

The dashboard page displays the following statistics:

• Total DLP Incidents: Count of total DLP incidents from ChatGPT Enterprise usage.

• DLP Incidents from User Prompts: Count of ChatGPT-related DLP incidents arising out of user prompts.

• DLP Incidents from ChatGPT Responses: Count of ChatGPT-related DLP incidents arising out of ChatGPT responses.

• Violated Chat Messages (24H): Count of policy violations detected in the last 24 hours for the selected ChatGPT Enterprise application instance, aggregated across both user prompt and AI response message types.

• User Prompt DLP Violation: Total number of user prompts with DLP violations based on DLP profiles or rules.

• AI Response DLP Violation: Total number of AI responses with DLP violations based on DLP profiles or rules.

• User Insights: Total number of ChatGPT Enterprise users, user with DLP violations, and total conversations.

• Files: Total number of files, files with DLP violation, malware-infected files, total internal users scanned in the GenAI app account.

• File Exposure: Total number of files based on exposure. Currently, ChatGPT categorizes all file exposure under Owner.

• File DLP Violations: Files that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

• Fine-tuning Files are structured datasets containing prompt–response pairs used to train ChatGPT for specific tasks or domains.

  The fine-tuning widget is populated only when a ChatGPT organization project has been onboarded.

  • Files with DLP Violations: Total number of fine-tuning files with DLP violations.

  • Malware Files: Total number of fine-tuning files infected with malware.

  • File DLP Violations: Fine-tuning files that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

Next Generation API Data Protection has introduced a new dashboard page for Cisco Webex, Microsoft 365 Teams (commercial), and Slack Enterprise. This page provides a high-level overview of the total number of messages with DLP violations based on exposure, message DLP violations widget categorized by DLP rule or profile, and the total number of users and conversations based on exposure.

The dashboard page displays the following statistics:

• Messages with DLP Violations: Total number of messages with DLP violations.

• Message Exposure: Total number of messages with DLP violations based on exposure.

• Message DLP Violations: Total number of messages with DLP violations based on DLP profile or rule.

• Total Users: Total number of users in the organization.

• Users with DLP Violations: Total number of users with DLP violations.

• Internal/External Conversations: Total number of internal and/or external conversations.

• User Type: Total number of users based on exposure.

• Channel Type: Total number of conversations based on exposure. It includes different conversation types like channel (standard, private, shared), public/private/team spaces, and chat (1:1, group chat, meeting chat).

Next Generation API Data Protection has introduced a new dashboard page for Google Calendar. This page provides a high-level overview of total number of calendars and meetings with DLP violations, calendar exposure like internal or external users, meetings with sensitive exposure, DLP profile/rule violations, meeting invitations sent to public email domains, and more.

The dashboard page displays the following statistics:

• Total Calendar: Total number of calendars scanned by Netskope.

• Calendars with DLP violations: Total number of calendars with DLP violations.

• Meetings incidents with DLP violations: Total number of meeting incidents with DLP violations.

• Internal Users: Total number of internal users within the organization.

• External Users: Total number of external users outside the organization.

• Meetings incidents matching DLP or threat policies – Breakup by exposure: A pie chart displaying the total number of meeting incidents and a slice of meeting exposure.

• Meetings DLP Violations: Meetings that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

• Meetings exposed with public email having DLP violations: Violating emails received from external/public email domains.

Next Generation API Data Protection for GitHub introduces a dedicated GitHub dashboard that provides centralized visibility into repository activity, exposure risks, and policy violations across your GitHub environment.

This dashboard helps security and compliance teams quickly assess:

• Repository inventory and exposure posture

• Internal vs. external collaboration trends

• Data Loss Prevention (DLP) violations detected in repositories

• Alert activity generated from GitHub scans and policies

It is especially useful for monitoring repository governance and identifying potential risks introduced through external access or sensitive data exposure.

The dashboard page displays the following statistics:

• Total Repositories: Total repositories discovered.

• Repositories with DLP Violations: Repositories containing sensitive data violations.

• Internal Users: Internal collaborators with repository access.

• External Users: External collaborators with repository access.

• Repository Exposure: Shows repository access distribution (Anonymous, Internal, Owner, External) to help identify overexposed repositories. This visualization helps identify repositories that may be overexposed or shared outside the organization.

  • Anonymous: Repositories accessible publicly or without authenticated restrictions.

  • Internal: Repositories accessible only within the organization.

  • Owner: Repositories primarily managed or owned by internal repository owners.

  • External: Repositories involving external users or collaborators.

• Repository DLP Violations: Repositories that have sensitive data and are scanned by the Netskope DLP engine. This information is gathered by both DLP profiles and rules.

• Repos with External Collaborators: Repositories shared externally.

• Private Repos with External Collaborators: Private repositories with external access.

• Alert Counts: Displays the total number of alerts generated from GitHub scanning activity over the last 30 days.

Next Generation API Data Protection has introduced a new dashboard page for Gmail and Microsoft 365 Outlook. This page provides a high-level overview of total number of emails with violations, email exposure like internal or external, DLP profile/rule violations, user data like sender of violating email, external recipients of violating email, sender of violating email (sorted by any or external recipients), and external recipient domain names.

The dashboard page displays the following statistics:

• Emails with Violation: Total number of emails with DLP violations.

• DLP Violations: Total number of DLP violation per DLP profile or rule.

• Sender of violating emails: Total number of unique senders that sent violating emails.

• External recipients of violating emails: Total number of external users that received the violating emails.

• Sender of violating emails: Total number of violating emails sent by sender. You can filter by any or external recipients.

• External recipients of violating emails: Total number of violating emails received by external users.

• External Recipient Domains: Total number of violating emails received by external domain.

Next Generation API Data Protection has introduced a new dashboard page for Microsoft Copilot. This page provides a high-level overview of the total data over-shared insights, DLP incidents, broken down by whether they originated from user prompts, or by Copilot responses, and Purview data classification insights.

Next Generation API Data Protection has expanded the Microsoft 365 Copilot integration with a new Data Over-Shared Insights widget. This enhancement gives security teams a clear, consolidated view of overshared SharePoint content that Copilot may be grounding its responses on.

Next Generation API Data Protection now includes a new Purview Data Classification Insights section in the Microsoft 365 Copilot dashboard, providing visibility into Microsoft Purview Information Protection (MPIP)–labeled content in Copilot grounding data across SharePoint.

The dashboard page displays the following statistics:

• Total DLP Incidents: Count of total DLP incidents from Microsoft Copilot usage.

• DLP Incidents from User Prompts: Count of Microsoft Copilot-related DLP incidents arising out of user prompts.

• DLP Incidents from Copilot Responses: Count of Copilot-related DLP incidents arising out of Copilot responses.

• Violated Chat Messages (24H): Count of policy violations detected in the last 24 hours for the selected Microsoft Copilot application instance, aggregated across both user prompt and AI response message types.

• User Prompt DLP Violation: Total number of user prompts with DLP violations based on DLP profiles or rules.

• AI Response DLP Violation: Total number of AI responses with DLP violations based on DLP profiles or rules.

• User Insights: Total number of Microsoft Copilot users, user with DLP violations, and total conversations.

• Data Over-Shared Insights widget.

• Purview Data Classification Insights

Data Over-Shared Insights Widget

This widget gives administrators stronger visibility into how Microsoft 365 Copilot interacts with enterprise data, helping them detect oversharing, reduce exposure, and maintain a secure Copilot deployment. You can:

• Identify over-shared sites at a glance using a high-level counter that surfaces how many sites contain overshared content relative to your total SharePoint sites.

  Over-shared refers to files or sites that are exposed beyond their intended audience, such as being shared with Everyone Except External Users (EEEU), or the entire organization. These exposures increase the likelihood of unauthorized access and data leakage.

• Pinpoint risk-prone files through dedicated columns for:

  • Files Exposed to GenAI – These are files having an Everyone Except External Users (EEEU) exposure.

  • Files with Organization-Wide Exposure – These are files that have a organization-wide link exposure.

• View site owner information and DLP incidents from each site that has over-shared entities.

• Drill down seamlessly into detailed inventory or DLP incidents for deeper investigation.

• Export insights to CSV for audits, reporting, and compliance workflows.

  

Microsoft Purview Data Classification Insights

Next Generation API Data Protection now includes a new Purview Data Classification Insights section in the Microsoft 365 Copilot dashboard, providing visibility into Microsoft Purview Information Protection (MPIP)–labeled content in Copilot grounding data across SharePoint.

Prerequisites

This widget is available only when the following prerequisites are met:

• SharePoint instances must be connected to Next Generation API Data Protection.

• An MPIP instance must be configured for the tenant.

Once enabled, administrators can view the proportion of MPIP-labeled files, analyze labeled content by classification, and understand exposure levels for labeled files. The widget also surfaces site-level insights for SharePoint locations containing labeled files, with support for drill-down and CSV export for reporting.

Next Generation API Data Protection has introduced a new dashboard page for Smartsheet. This page provides a high-level overview of entities in the Smartsheet account, along with incident statistics and exposure insights.

The dashboard page displays the following statistics:

• Entities: Total number of entities scanned in the Smartsheet account. These entities include sheets, workspaces, attachments, reports, dashboards, and comments.

• Total Users: Total number of users in the organization.

• Groups: Total number of groups in the organization.

• Entity Exposure: This widget displays the total number of entities based on exposure and categorizes them by violation type. These entities can include sheets, attachments, reports, and dashboards. You can select from the following drop-down options:

  • DLP Violation: Displays exposure-based violations triggered by DLP policies.

  • Threat Violation: Displays exposure-based violations triggered by threat/malware policies.

  This widget provides visibility into how entities are exposed and helps administrators assess potential risk areas.

• Incident Counts: This widget provides a breakdown of the total number of incidents by object type. The incidents are categorized as sheet, attachment, report, and dashboard. This widget helps administrators quickly identify which object types are generating the highest number of incidents.

Next Generation API Data Protection has introduced a new dashboard page for ServiceNow. This page provides a high-level overview of total files, files w/ DLP violations, malware files, internal and external users, total objects, objects with DLP violations, malware-infected objects, type of object includes default and custom tables that have violations, and DLP violations widget categorized by DLP rule or profile.

The dashboard page displays the following statistics:

• Total Files: Total number of files with violations.

• Files with DLP violations: Total number of files with DLP violations.

• Malware Files: Total number of files infected with malware.

• File DLP Violations: Total number of file DLP violations per DLP profile or rule.This widget displays the top DLP profiles/rules that triggered the violations for files.

• Total Objects: Total number of objects^* with violations.

• DLP violations: Total number of objects with DLP violations.

• Malware Objects*: Total number of objects infected with malware.

• Object Types: Top 10 tables (default and custom) with violations.

• DLP Violations: Total number of object DLP violations per DLP profile or rule.This widget displays the top DLP profiles/rules that triggered the violations for objects.

^*Objects include records and files.