ProLion Platform

Industries

Manufacturing

The design data is the company.

A press shop can lose a shift to ransomware. Losing the CAD archive is a different order of problem — and so is explaining to an OEM how a prototype folder ended up readable by a supplier.

ProLionOct 29, 2026

Book a Demo

NetApp

Syslog CEF and REST, into the tool you already run

See it running

The last week of an engineer who is leaving.

0:58

The supplier account somebody else is using now.

Design data rarely walks out. It is left somewhere an attacker — or a competitor’s new hire — can pick it up. Here is what that costs you, and what stops it.

Without

The folder changes purpose. The access does not.

2021 A supplier is given access to one project folder for a tender.
2024 The folder is re-used for the next model generation. The supplier account is still in the group.
2026 Prototype drawings turn up with a competitor. The OEM asks how.
+6 weeks The TISAX assessment finds no record of who could open the folder, and the firm cannot show it took reasonable steps.

Outcome

A prototype protection finding, a trade-secret claim that is hard to make once the files are already out, and a conversation with your customer you do not want to have.

With ProLion

The stale account is closed before the new generation lands in that folder.

2021 The same access is granted.
Monthly The exposure report lists external accounts on project shares, ranked by the sensitivity of the data behind them.
2024 The supplier account is found and removed before the folder is re-used.
Assessment The access history and the permission changes are produced in the form the assessor expects.

Outcome

Prototype folders that only the project can open, and the evidence to show it was always that way.

A scenario, not a case study — built from the way these incidents actually run.

What the rules ask for.

Manufacturing sits in the NIS2 scope for several product categories, and the automotive chain adds its own assessment on top.

NIS2

Manufacturing in scope

Risk-management measures including access control, with incident reporting on the 24-hour, 72-hour and one-month cascade

TISAX

The automotive information-security assessment

Built on the VDA ISA and aligned to ISO 27001, with prototype protection as its own module — assessments typically require maturity level 3

Prototype protection

Parts not yet shown in public

Access restricted to the people who need it, and the ability to show that it was

Trade secrets

Protection depends on protection

A secret is only protected if you took reasonable steps to keep it one — an open share is evidence that you did not

Orientation, not legal advice. NIS2 applies through national transposition, so sector scope, thresholds and deadlines differ per country — check yours.

Where it goes wrong on the shares.

Engineering shares grow by project. Every project adds a group, every group adds members, and nothing is ever removed because nobody knows what depends on it.

Who can open the CAD archive

Effective permissions through every nested group, including the supplier accounts somebody added for one project in 2021.

Find the prototype folders

Classification recognizes what is sensitive in the file itself, so a drawing exported into a general share does not stay invisible.

Contain without stopping production

The responsible account is blocked in seconds. The line keeps running and the other shifts keep working.

Restore the files, not the week

Single-file restore from existing snapshots, scoped to exactly what was touched.

Evidence for the OEM assessment

The access record and the permission history, in the form an assessor expects.

Dark sites included

The appliance runs fully on-premises, including plants with no outbound connection.

What this looks like in practice

“Without these solutions, I would feel less comfortable.”

Ivo Dissel

IT & System Admin, OLVG Amsterdam

Talk to us All industries

Let’s solve your data challenges.

Connect with our engineers to find the right approach for your infrastructure.

Book a Demo Talk to an expert

What you would be running

One platform, two packages.

One appliance on your own hardware, in two feature packages. DataGovernance contains everything in DataDefense.

One Platform

Two Packages

ProLion DataDefense

Base

For IT teams who need critical data up, recorded and recoverable.

File visibility, who did what and when
Ransomware containment in four seconds
Single-file restore from snapshot
Capacity, growth and hot/cold reports
Permission insight and broken inheritance
Four-eyes principle
SIEM, SOAR and ITSM integration
SSO via Entra ID, Okta, SAML, OIDC

Find out more

ProLion DataGovernance

DSPM

For security, compliance and AI teams who have to prove and control who reaches what.

Everything in DataDefense, plus:

Access analytics — effective permissions
Real-time permission audit log
Activity Zones and quarantine
Active Directory security
Unlimited file activity retention
SharePoint Online and OneDrive
Classification of sensitive data
Remediation of permissions and labels

Find out more

Wherever your data already sits — NetApp, Lenovo, Dell and Microsoft, read at the data layer itself, with no agent on the file server.

Talk to an engineer who knows your data.

Four fields, and somebody who knows ONTAP, PowerScale and what FPolicy does. Not a qualification call.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.