Box Shield | AI-Powered Threat Detection & Data Classification
Intelligent, frictionless security to protect the flow of content
Leading organizations protect their data with Box Shield
Box Shield has become a vital part of our security posture. We’re excited to see how new capabilities will further strengthen our ability to meet these responsibilities.
— Deepak Budwani, Chief Financial and Administrative Officer at the Santa Barbara County Office of the Public Defender
Automatically classify sensitive data
Classify new and historical content your way, both manually and automatically. Box Shield's native capability helps you identify regulated data and proprietary information when content is considered "active" — when it's uploaded, shared, previewed, edited, downloaded, and more. Whether created locally, migrated via Box Shuttle, or even generated with AI, Box Shield helps you classify your content automatically and at scale.
Add context with the AI Classification Agent
Available with Shield Pro
Leverage intelligent, context-driven analysis to automatically identify and classify sensitive content, from movie scripts to design documents. Our AI Classification Agent pinpoints files by patterns, context, and organizational requirements to classify content faster and at scale.
Protect your content against advanced malware attacks
Box Shield's native threat-detection capabilities help you reduce content-centric risks. With additional built-in, deep learning-based malware detection, you can discover and contain malware spread before it becomes a data breach. Box Shield scans active content and provides broader coverage for sophisticated malware, including ransomware.
Shut down threats and take action quickly
Available with Shield Pro
Expanding on Shield’s native threat-detection, Ransomware Activity Detection helps protect your organization against the threat of ransomware-compromised endpoint devices. With our proprietary ransomware detection algorithm, admins can quickly identify incidents and terminate compromised sessions at the push of a button.
Power your security team with automated controls
Placing controls close to your content helps prevent leaks in real time and powers a seamless user experience. Configure access policies within minutes to keep your data secure while letting people continue their mission-critical work. Frictionless controls — like allowing end users to make one-time exceptions to Box Shield's access restrictions with admin-defined business justifications — let you collaborate safely.
Govern external AI agents' access to classified content
Box Shield now extends classification policies to restrict external AI agents from extracting sensitive data. Easily control exactly what information external AI tools can search or read based on how that data is classified. By automatically blocking unauthorized access, Box Shield ensures your sensitive business information remains completely secure while allowing agents to safely work only with the content they are permitted to see.
Streamline threat handling with AI-powered analysis
Available with Shield Pro
Taking actionable alerts to the next level by leveraging Box AI to summarize threat alert details into easily understood language. With AI Threat Analysis, your security team can accelerate threat remediation without sacrificing security, more easily prioritizing critical threats and making it simple to communicate the essentials.
Integrate with your cloud security portfolio
Box security products work with the best-of-breed security tools you already have in place. Alerts containing more insights than ever before can be integrated with your SIEM and CASB for a unified view. That way, Box Shield's native controls and alerts serve as a valuable complement to your overall security portfolio.
IRC protects critical data with Box and Box Shield
Key features of Box Shield
Content classification Define and manage security classification labels for your organization.
Classification-based access controls Box Shield classification features enable you to control access across native Box apps and third party AI agents and integrations.
Deep-learning based malware detection Detect sophisticated malware for new and historical content in near real time, automatically restricting downloads while still allowing for preview.
Automated classification Natively and automatically classify new and historical content based on PII, custom terms, and file types at scale.
Last-mile security for online editors Extend download and print restrictions in online editors like Microsoft Office Online.
Anomaly detection Spot anomalous user behaviors signaling compromised accounts or data exfiltration with the ability to train machine-learning algorithms specific to your company.
Imported third-party classification Automatically import Microsoft Information Protection (MIP) sensitivity labels when files are uploaded to Box.
One-time exceptions Admins can allow users to make one-time access exception restrictions with a business justification.
Context-rich alerts Investigate prioritized, context-rich alerts in the Admin Console, or forward alerts to SIEM.
FAQ
What is Box Shield Pro?
Box Shield Pro is an add-on to Box Shield that brings AI-powered content protection to enterprise security teams. It includes three core capabilities: an AI Classification Agent that labels sensitive content based on context, an AI Threat Analysis Agent that summarizes security alerts in plain language, and Ransomware Activity Detection that catches mass encryption events before they can spread. Think of it as an amplifier for your existing Box Shield investment, extending your coverage to content that's harder to classify and threats that are harder to catch.
How is AI-based content classification different from Microsoft's sensitivity labels?
Microsoft's classification tools are primarily keyword and pattern-based, working fine for content that contains clear identifiers, but struggling with documents that lack those clear indicators. Context-driven AI classification analyzes the meaning and intent of a document, not just its surface-level patterns. That distinction matters a lot for content like internal memos, strategic plans, or creative assets, where sensitivity isn't signaled by a credit card number or a Social Security format.
Does Box Shield Pro work with SIEM and CASB tools?
Box broadly supports integration with SIEM and CASB platforms, giving security teams a unified view of threats across their environment. Because AI Classification leverages existing Box Shield classification labels, it works with all our existing integrations. Ransomware Activity Detection also integrates just as the other Box Shield detection rules do, making it simple to integrate into your overall security architecture.
How does Box Shield Pro detect ransomware activity?
Box Shield Pro uses a proprietary detection algorithm that monitors for patterns consistent with ransomware. Specifically, it looks for mass encryption of content being synced back to Box via Box Drive from a compromised endpoint. When suspicious activity is detected, it generates a detailed alert that lets admins terminate the compromised session with a single click and launch targeted content recovery with the affected user and timeframe already pre-set. It’s also not limited to internal managed users, it can detect compromised endpoints for external users as well, which is useful for organizations that collaborate heavily outside their own network.
What industries benefit most from AI-powered document classification?
Any industry that handles large volumes of sensitive documents will see major gains from AI-powered classification. Financial services, insurance, healthcare, legal, and media and entertainment are among the most common use cases. Insurance companies, for example, deal with a constant inflow of client documents containing personal and financial data that needs to be classified on ingest. Media companies have scripts and creative assets that are highly sensitive but contain no obvious PII. The common thread is content that carries real risk but doesn't fit neatly into keyword-based classification rules.
Learn more about securing your data
Get to know Box Shield
Learn more about Shield's capabilities with this quick-reference resource.
####### Download datasheet
Revolutionizing data classification with Box
See how our latest innovation helps you classify content at scale, featuring a customer spotlight.
####### Watch webinar
Ready to get started?
####### Watch webinar
####### Contact us