Nightfall Documentation

Data Detection and Response

• Welcome to Nightfall Documentation: Nightfall Documentation landing page
• Release Notes 2025-2026: This document lists all the features released by Nightfall in 2025 and 2026.
• Release Notes 2021-2024: Nightfall Release Notes for the features released in 2024, 2023, 2022, and 2021.
• Why Cloud DLP?: Advantages of a Cloud DLP and introduction to Nightfall cloud DLP
• Introduction to Nightfall: An introduction to the Nightfall Cloud DLP
• Nightfall Overview: Learn more about Nightfall Cloud DLP from this brief document
• Cloud-native DLP vs. CASB: A comparison between Cloud-native DLP and CASB
• How Nightfall Works: Learn more about the Nightfall Cloud DLP
• Reasons to Choose Nightfall: Understand the reasons to choose Nightfall DLP.
• Benefits of Nightfall: Learn how Nightfall benefits your organization
• How Nightfall Fits into Compliance Frameworks: Learn how Nightfall AI-powered data leak prevention (DLP) for SaaS and Cloud can help organizations maintain compliance with various global compliance frameworks across different industries.
• ISO 27001 Compliance + DLP: Learn more about ISO 27001 and how Nightfall helps you with it.
• SOC 2 Compliance + DLP: Learn more about SOC 2 compliance and how Nightfall helps with it.
• PCI Compliance + DLP: Learn more about PCI compliance and how Nightfall helps with it.
• PHI Detector - More on Nightfall's HIPAA Compliance Detector: Learn how to ensure HIPAA compliance in your collaborative cloud applications
• Installing Nightfall: Learn how to onboard and start using the Nightfall AI platform.
• Overview: An introduction to the Nightfall Detection Platform.
• Detectors: Learn about Nightfall detectors.
• Choosing a Nightfall Detector: Learn about various factors to be considered while choosing a Nightfall detector.
• Compliance Use Cases: Organizational compliance is one of the leading drivers that require DLP tooling such as Nightfall. These are the recommended configurations for each compliance framework.
• Data Protection Use Cases: Organizations may need to protect specific data types either by contractual obligation or to protect intellectual property. These are the recommended configurations to protect these data types.
• Nightfall Detector Glossary: Learn about the various out-of-the-box detectors provided by Nightfall.
• Secrets Detection: Learn about Nightfall secret detection.
• Creating Custom Detectors: Learn how to create custom detectors in Nightfall.
• Creating Dictionary Detector: Learn how to create a Dictionary detector in Nightfall.
• Create File Type Detector: Learn how to create a File Type detector in Nightfall.
• Create File Fingerprint Detector: Learn how to create a File Fingerprint detector in Nightfall.
• Create Regular Expression Detector: Learn how to create a Regular Expression detector in Nightfall.
• Create Microsoft Purview Sensitivity Labels (MIP) detector: Scan Microsoft Purview Sensitivity Labels with Custom Regex Detectors
• Create an Entity Detector using a Prompt: ⭐ Define a detector to detect custom sensitive entities using natural language instead of regex
• Create a Prompt-based File Classifier: Define a file classifier using natural language. No training required.
• Extend a Nightfall Detector: Learn how you can extend the functionality of an existing Nightfall detector.
• Create Detection Rules: Learn the process of creating detection rules in Nightfall.
• Detection Platform Overview: Understand how detection works in Nightfall.
• Evaluating Detection: Learn how to evaluate detection rules in Nightfall.
• Creating Policies: Learn how to create policies in Nightfall.
• Selecting Integration
• Scope of the Policy
• Detection Rules
• Advanced Settings
• Name and Risk Score
• Historical Scan Detection Rules
• Regex Library: Regular expressions for unique situations
• Detection Platform FAQs
• How can I reduce false positives in my findings?: Tips for improving finding accuracy.
• What do different “Confidence Levels” mean?: Learn how Nightfall assigns confidence levels to sensitive data classifications.
• What file types will Nightfall scan for sensitive data? What are the limitations?: Nightfall scans for sensitive data in a broad range of file types
• How do I use Context Rules?: Customize finding confidence to suit your business logic
• How do I use Exclusion Rules?: Exclude certain tokens from detection to suit your business logic
• Does Nightfall have a regex library I can choose from?: Select from an aggregated library of regexes
• Why does Nightfall sometimes miss to report SSN, credit card number, and so on?: Learn about typical cases of Nightfall
• Why does the Password Detector Report False Positive Zoom Password Findings?: Zoom Password Findings
• Detection Rules: Use pre-defined templates to get started quickly with policies.
• Sample Datasets: Use sample data sets provided by Nightfall to test Nightfall's detection capabilities.
• Nightfall Dashboard: Learn how to use the Nightfall Dashboard.
• Data Detection and Response Events: Learn about the Events page in Nightfall
• Filtering Events: Filter Nightfall Events based on parameters.
• Event Filter Operators: Learn more about the search operators provided by Nightfall, to filter Events.
• Applying Actions on Events: Learn how to apply actions on Nightfall Events.
• Applying Bulk Actions on Events: Learn how to apply bulk actions on Nightfall Events.
• Event Status: Learn more about various status of Nightfall Events.
• Deduplication and Automatic Resolution of Events: This document explains the Deduplication and Auto resolve features for Nightfall Events.
• Nightfall Alert Platforms: Learn about the Nightfall alert platforms
• Setting up Slack as an Alert Platform: Learn how to use Slack as an alert platform in Nightall.
• Setting up Jira as an Alert Platform: Learn how to use Jira as an alert platform in Nightall.
• Setting up MS Teams as an Alert Platform: Learn how to use MS Teams as an alert platform in Nightall.
• Playbook: Learn how to operationalize NIghtfall Playbook.
• Informing & Coaching Business Users: Learn the process of informing and teaching users about Nightfall platform.
• Alert Management Guiding Principles: Follow Nightfall's best practices for Alert Management and Remediation
• Integrating with Security Tools: Learn how you can integrate Nightfall with various security tools.
• Integrating with SIEM: Learn how to integrate Nightfall with a SIEM or push violations downstream to any alert drain, SOAR tool, BI tool, and more.
• Integrating with Microsoft Sentinel: Learn how to integrate Nightfall with Microsoft Sentinel.
• Creating Dashboards for Nightfall Alerts in Splunk: Learn how to start creating a dashboard of Nightfall alerts/actions in your Splunk Enterprise/Splunk Cloud environment.
• Creating Dashboards for Nightfall Alerts in Sumo Logic: Learn how to start creating a dashboard of Nightfall alerts/actions in your Sumo Logic environment.
• Sending Alerts to Microsoft Teams: Learn how to configure Nightfall to send alerts to Microsoft Teams using email.
• Frequently Asked Questions (FAQs) for End-Users: Nightfall FAQs for end-users
• Nightfall Integrations: Links to all the Nightfall integrations
• Nightfall for Slack: Quick Start: Learn how to set up your integration with Slack so that you can scan and protect sensitive data across your Slack workspace.
• Getting Started With Nightfall for Slack: Get started with installing and integrating Nightfall for Slack.
• Requirements: Make sure the following requirements are fulfilled before you get started.
• Requirements for Nightfall DLP for Slack Enterprise: Understand the requirements for Nightfall DLP for Slack Enterprise.
• Requirements for Nightfall DLP for Slack Pro and Slack Business+: Understand the requirements for Nightfall DLP for Slack Pro.
• Installing Nightfall for Slack: Learn how to install Nightfall for Slack
• Installing Nightfall DLP for Slack Enterprise: Learn the process of installing Nightfall DLP for Slack enterprise.
• Installing Nightfall DLP for Slack Pro and Business+: Learn the process of installing Nightfall DLP for Slack Pro and Slack Business+.
• Configure Alerts for Slack: Learn the process of configuring alerts for Slack.
• Configuring Policies for Slack Pro and the Slack Business+ Editions: Learn how to configure Nightfall policies for Slack Pro and Slack Business+
• Slack Pro and Business+ App Selection: Learn the process of selecting the Slack integration while creating a Nightfall policy.
• Configure Scope for Slack Pro and Slack Business+: Learn the process of configuring the Scope in the Slack Pro and Business+ editions while creating a Nightfall policy.
• Configure Detection Rules for Slack Pro and Slack Business+: Learn the process of selecting the Detection rules in the Slack Pro and Business+ editions while creating a Nightfall policy.
• Configure Automated Actions in Slack Pro and Slack Business+: Learn the process of configuring automated actions in the Slack Pro and Business+ editions while creating a Nightfall policy.
• Configure Advanced Settings in Slack Pro and Slack Business+: Learn the process of configuring the advanced settings in the Slack Pro and Business+ editions while creating a Nightfall policy.
• Risk Configuration in Slack DLP for Slack Pro and Slack Business+ Editions: Learn the process of configuring the Risk Score and naming the policy while creating a Nightfall policy for the Slack Pro and Slack Business+ editions.
• Manage Events for Slack: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Nightfall for Slack Pro and Slack Business+ editions.
• Configuring Policies for the Slack Enterprise Edition: Learn the process of creating of Nightfall policies for the Slack Enterprise edition.
• Slack App Selection: Learn the process of selecting the Slack Enterprise integration while creating a Nightfall policy.
• Configure Scope for Slack Enterprise: Learn the process of configuring the Scope section while creating a Nightfall policy for the Slack Enterprise edition.
• Select Detection Rules for Slack Enterprise: Learn the process of selecting detection rules while creating a Nightfall policy for the Slack Enterprise edition.
• Configure Automated Actions in Slack Enterprise: Learn the process of configuring automated actions while creating a Nightfall policy for the Slack Enterprise edition.
• Configure Advanced Settings for Slack Enterprise: Learn the process of configuring advanced settings while creating a Nightfall policy for the Slack Enterprise edition.
• Risk Configuration for Slack Enterprise: Learn the process of configuring the Risk Score and naming the policy while creating a Nightfall policy for the Slack enterprise edition.
• Manage Events for Slack Enterprise: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Slack Enterprise.
• FAQs
• Can I redact sensitive message content in Slack?: Redacting Sensitive Messages in Slack
• Nightfall for Slack Pro vs Enterprise: Understand the differences between Slack pro and Slack enterprise editions.
• Upgrading from Slack Pro to Enterprise: Learn how to migrate from Slack Pro to Slack Enterprise edition
• Can we customize the alert messages sent in Slack?: Learn how to customize the alert messages sent in Slack alerts
• Can I Disable Detection in Private Channels or DMs?: Turn off the Nightfall bot in secure private communications
• What types of channels does Nightfall scan? Does Nightfall scan shared channels?
• I am unable to view a sensitive message or file from the Nightfall alert channel.: Learn why you might not be able to view sensitive messages or files in Nightfall alert channel.
• Upon Slack installation, why am I seeing a 400 error mentioning a "Restricted Action"?: Understand why Channel Management Restrictions in your Slack Workspace settings may be causing Slack 400 error.
• I send a sensitive message, edit it, and then admin applies the Redact action. What is the outcome?: Learn what happens when both, end-user and admin apply action on sensitive data.
• How do I re-install Nightfall DLP for Slack Pro Edition?: Learn the process of reinstalling Slack pro edition.
• How do I re-install Nightfall DLP for Slack Enterprise Edition?: Learn the process of reinstalling Slack enterprise edition.
• Our Slack Admin has Quit. Will it impact Nightfall Scan?
• Getting Started: Learn the basics of Nightfall DLP for GitHub.
• Requirements: Make sure the following requirements are fulfilled before you get started with the installation of Nightfall DLP for GitHub.
• Install Nightfall for GitHub: Learn how to install Nightfall DLP for GitHub.
• Configure Alerts for GitHub: Understand the process of configuring integration alerts for Nightfall for GitHub.
• Configure Policies for GitHub: Learn how to configure a detection policy for Nightfall DLP for GitHub
• GitHub App Selection: Learn how you can select the GitHub integration in a Nightfall policy.
• Configure Scope for GitHub: Learn the process of configuring the Scope section while creating a Nightfall policy in Nightfall or GitHub.
• Use Regular Expressions to Exclude GitHub Directories: Learn how to use regular expressions to exclude specific GitHub repositories, while configuring the scope section in Nightfall for GitHub.
• Configure Detection Rules for GitHub: Learn the process of selecting detection rules while creating a Nightfall policy in Nightfall for GitHub.
• Configure Advanced Settings for GitHub: Learn the process of configuring advanced settings while creating a Nightfall policy in Nightfall for GitHub.
• Configure Risk Score for GitHub: Learn the process of configuring the Risk Score and naming the policy while creating a Nightfall policy in Nightfall for GitHub.
• Manage GitHub Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in GitHub.
• Remediation on Nightfall for Github: Sensitive data like credentials pose a large risk when found in code repos. Read our guide to remediating these DLP risks in GitHub.
• Getting Started: Learn how to get started with Nightfall DLP for Google Drive.
• Requirements: Learn what requirements must be fulfilled to install Nightfall for Google Drive.
• Install Nightfall for Google Drive: Learn how to install Nightfall for Google Drive.
• Enable Google Drive Labels: Learn how you can enable Google Drive Labels in Nightfall for Google Drive.
• Configure Alerts for Google Drive: Learn the process of configuring integration level alerts in Nightfall for Google Drive.
• Configure Policies for Google Drive: Learn to configure Nightfall policies to monitor sensitive data from your Google Drive instances.
• Google Drive App Selection: Learn how you can select the Google Drive integration in a Nightfall policy.
• Configure Scope for Google Drive: Learn how you can configure the Scope section in a policy, created in Nightfall for Google Drive.
• Configure Detection Rules for Google Drive: Learn how to select the required detection rules while creating a Nightfall policy for Google Drive.
• Configure Advanced Settings for Google Drive: Learn how to configure the advanced settings section in a Nightfall policy for the Google Drive.
• Risk Score for Google Drive: Learn how to configure risk score and name a Nightfall policy created for the Google Drive.
• Manage Google Drive Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Google Drive.
• Getting Started: Learn how to get started with Confluence.
• Install Nightfall for Confluence: Learn how to install Nightfall DLP for Confluence.
• Configure Alerts for Confluence: Learn how you can configure the integration level alerts in Confluence
• Configuring Policies for Confluence: Learn how to configure policies in Nightfall DLP for Confluence.
• Confluence App Selection: Learn how to select the Confluence integration while creating a policy in Nightfall.
• Configure Scope for Confluence: Learn how you can configure the Scope section in a Nightfall for Confluence policy.
• Configure Detection Rules for Confluence: Learn how you can select the required detection rules while creating a policy in Nightfall for Confluence.
• Configure Advanced Settings for Confluence: Learn how to configure advanced settings in Nightfall for Confluence.
• Configure Risk Score for Confluence: Learn how you can configure risk score and name a policy in Nightfall for Confluence.
• Manage Confluence Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in Confluence.
• FAQs: FAQs on Nightfall for Confluence
• Page Restrictions: Note the current issue that we have with scanning for Confluence pages with Page Restrictions set
• Getting Started: Learn how to get started with Nightfall DLP for Jira.
• Install Nightfall for Jira: Step by step instructions on installing the Nightfall for JIRA integration
• Configuring Alerts for Jira: Learn how you can configure integration level alerts in Nightfall for Jira.
• Configure Policies in Nightfall for Jira: Learn how to configure policies in Nightfall for Jira.
• Jira App Selection: Learn how you can select the Jira integration while creating a policy in Nightfall.
• Configure Scope in Nightfall for JIRA: Learn how you can configure the Scope section while creating a policy in Nightfall for JIRA.
• Select Detection Rules in Nightfall for JIRA: Learn how you can select the required detection rules while creating a policy in Nightfall for JIRA.
• Configuring Advanced Settings in Nightfall for JIRA: Learn how you can configure the advanced settings section in a Nightfall policy created for the Nightfall for JIRA integration.
• Configure Risk Score for Jira: Learn how you can configure risk score and name a policy in Nightfall for Jira.
• Manage Jira Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the JIRA DLP.
• Getting Started: Learn the basics of Nightfall DLP for Microsoft 365
• Microsoft 365 Requirements: Make sure the following requirements are fulfilled before you get started with Microsoft 365.
• Setting up Directory Sync: Learn how you can setup directory sync for Microsoft 365.
• Setting up Microsoft Tenant: Learn how to setup Microsoft Tenant for Nightfall
• Update App Selection for a Registered Tenant: Learn how you can update the app selection in Microsoft 365.
• Nightfall for OneDrive
• Configure Alerts for OneDrive: Learn how to configure integration level alerts in Nightfall for OneDrive.
• Nightfall Policies for OneDrive: Learn how to configure OneDrive policies
• OneDrive App Selection: Learn how you can select the OneDrive integration while creating a Nightfall policy.
• Configure Scope for OneDrive: Learn how to configure the scope section in Nightfall policies created for Microsoft OneDrive.
• Configure Detection Rules for OneDrive: Learn how to configure the detection rules section in Nightfall policies created for Microsoft OneDrive.
• Configure Advanced Settings for OneDrive: Learn how to configure the advanced setting section in Nightfall policies created for Microsoft OneDrive.
• Risk Score for OneDrive Policies: Learn how to configure risk score and name a Nightfall policy created for Microsoft OneDrive.
• Manage OneDrive Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Microsoft OneDrive.
• Nightfall for Microsoft Teams: Learn how to get started with Nightfall for Microsoft Teams
• Configure Alerts for Microsoft Teams: Learn how you can configure integration level alerts in Microsoft Teams.
• Configure Policies for Microsoft Teams: Learn how to configure a detection policy for Nightfall for Microsoft Teams.
• Select Integration in Microsoft Teams: Learn how you can select the MS Teams integration in a Nightfall policy.
• Configure Scope for Microsoft teams: Learn how to configure the Scope section for Microsoft Teams.
• Scope for Personal Chats: Learn how to configure the Scope section for personal chats in Microsoft Teams policy.
• Scope for MS Teams Channels: Learn how to configure the Scope section for personal chats in Microsoft Teams policy.
• Configure Detection Rules in Microsoft Teams DLP: Learn how to configure the detection rules section in Nightfall policies created for Microsoft Teams DLP.
• Configure Advanced Settings in Microsoft Teams: Learn how to configure the advanced setting section in Nightfall policies created for Microsoft Teams.
• Risk Score in Microsoft Teams Policies: Learn how to configure risk score and name a Nightfall policy created for Microsoft Teams DLP.
• Manage Microsoft Teams Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Microsoft Teams.
• Getting Started: Learn the basics of Nightfall DLP for Microsoft Exchange
• Microsoft Exchange Requirements: Make sure the following requirements are fulfilled before you get started with Microsoft Exchange.
• Setting up Directory Sync: Learn how you can setup directory sync for Microsoft Exchange.
• Installing Microsoft Exchange
• Create Connectors
• Create Rules
• Create MX Record
• Nightfall for Microsoft Exchange: Learn how to get started with Nightfall for Exchange
• Configure Alerts for Exchange: Learn how you can configure integration level alerts in Exchange.
• Configure Policies for Exchange: Learn how to configure a detection policy for Nightfall for Exchange.
• Select Integration in Exchange: Learn how you can select the Exchange integration in a Nightfall policy.
• Configure Scope for Exchange: Learn how to configure the Scope section for Exchange.
• Configure Detection Rules in Exchange: Learn how to configure the detection rules section in Nightfall policies created for Exchange
• Configure Advanced Settings in Exchange: Learn how to configure the advanced settings section in Nightfall policies created for MS Exchange.
• Risk Score in Exchange: Learn how to configure risk score and name a Nightfall policy created for Exchange
• Manage Exchange Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in Microsoft Exchange.
• Getting Started: Learn the basics of Nightfall DLP for Microsoft SharePoint
• Microsoft SharePoint Requirements: Make sure the following requirements are fulfilled before you get started with Microsoft SharePoint.
• Setting up Directory Sync: Learn how you can setup directory sync for Microsoft SharePoint.
• Installing Microsoft SharePoint: Learn how to install Nightfall for Microsoft SharePoint
• Nightfall for Microsoft SharePoint: Learn how to get started with Nightfall for SharePoint
• Configure Alerts for SharePoint: Learn how you can configure integration level alerts in SharePoint.
• Configure Policies for SharePoint: Learn how to configure a detection policy for Nightfall for SharePoint.
• Select Integration in SharePoint: Learn how you can select the SharePoint integration in a Nightfall policy.
• Configure Scope for SharePoint: Learn how to configure the Scope section for SharePoint.
• Configure Detection Rules in SharePoint: Learn how to configure the detection rules section in Nightfall policies created for SharePoint
• Configure Advanced Settings in SharePoint: Learn how to configure the advanced settings section in Nightfall policies created for MS SharePoint.
• Risk Score in SharePoint: Learn how to configure risk score and name a Nightfall policy created for SharePoint
• Manage SharePoint Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in Microsoft SharePoint.
• Overview: An introduction to Nightfall DLP for Gmail
• Install Nightfall DLP for Gmail: Learn how to install the Nightfall DLP for Gmail.
• Configure Content Compliance Rules: Learn how to configure Content Compliance rules in the Google Workspace.
• Create Content Compliance Rule - Monitoring: Learn how to create a monitoring content compliance rule in the Google Workspace.
• Create Content Compliance Rule - Monitoring: Learn how to create a monitoring content compliance rule in the Google Workspace.
• Configure Content Compliance Rule - Quarantine: Learn how to create a quarantime content compliance rule in the Google Workspace.
• Configure Routing Rules - SMTP Relay Settings: Learn how to configure the routing rules for SMTP relay settings in the Google Workspace.
• Configure Alerts for Gmail: Learn how to configure integration level alerts in Nightfall DLP for Gmail.
• Nightfall Policies for Gmail: Learn about the Gmail policies in Nightfall DLP for Gmail.
• Gmail App Selection: Learn how you can select the Gmail integration in a Nightfall policy.
• Configure Scope for Gmail: Learn how to configure the Scope section for Gmail.
• Configure Detection Rules for Gmail: Learn how to configure the detection rules section in Nightfall policies created for Gmail.
• Configure Advanced Settings for Gmail: Learn how to configure the advanced settings section in Nightfall policies created for the Gmail DLP.
• Configure Risk Score for Gmail: Learn how to configure risk score and name a Nightfall policy created for Gmail.
• Manage Gmail Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Gmail DLP.
• Remediation on Nightfall for Gmail: Learn how to remediate events in Nightfall for Gmail.
• Overview: Learn how to get started with Nightfall DLP for Salesforce.
• Getting Started: A walk through of how to install Nightfall's DLP solution for Salesforce.
• Install Nightfall DLP for Salesforce: Learn how to install Nightfall DLP for Salesforce.
• Upgrade Nightfall DLP for Salesforce: Learn how you can upgrade the Nightfall DLP package, installed in a Salesforce org.
• Configure Alerts for Salesforce: Learn how you can configure integration level alerts in Salesforce.
• Nightfall Policies for Salesforce: Learn how you can create policies for the Nightfall DLP for Salesforce.
• Salesforce App Selection: Learn how you can select the Salesforce integration in a Nightfall policy.
• Configure Scope for Salesforce: Learn how to configure the Scope section in the Nightfall DLP for Salesforce.
• Configure Detection Rules for Salesforce: Learn how to configure the detection rules section in Nightfall policies created for Salesforce.
• Configure Advanced Settings for Salesforce: Learn how to configure the advanced settings section in Nightfall policies created for the Salesforce DLP.
• Risk Score for Salesforce: Learn how to configure risk score and name a Nightfall policy created for Salesforce.
• Manage Salesforce Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Salesforce.
• High-Risk Salesforce Objects and Fields for Data Loss Prevention (DLP): Prioritize unstructured and custom Salesforce fields to detect PII, PCI, PHI, Financial Data, IP/Confidential Data, and Secrets.
• FAQs: Frequently Asked Questions for Nightfall DLP for Salesforce
• Getting Started: This guide will help you to get started with installing and integrating Nightfall DLP for Zendesk.
• Requirements: Make sure the following requirements are fulfilled before you get started.
• Install Nightfall DLP for Zendesk: Learn how you can install the Nightfall DLP for Zendesk.
• Configure Alerts for Zendesk: Learn how you can configure the integration level alerts in Nightfall DLP for Zendesk.
• Configure Policies for Zendesk: Learn how to set up Nightfall policies for Zendesk
• Zendesk App Selection: Learn how you can select the Zendesk integration in a Nightfall policy.
• Configure Scope for Zendesk: Learn how to configure the Scope section for Zendesk.
• Configure Detection Rules for Zendesk DLP: Learn how to configure the detection rules section in Nightfall policies created for Zendesk.
• Configure Advanced Settings in Zendesk: Learn how to configure the advanced settings section in Nightfall policies created for the Zendesk.
• Risk Score for Zendesk: Learn how to configure risk score and name a Nightfall policy created for Zendesk
• Manage Zendesk Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Zendesk.
• Nightfall for Claude Enterprise (Compliance API)
• Install Nightfall for Claude Enterprise
• Configure Policies for Claude Enterprise
• Policy Incidents
• Comprehensive Claude Coverage
• Frequently Asked Questions (FAQs)
• Getting Started: Learn the basics of Nightfall DLP for Notion.
• Requirements: Understand the Prerequisites to install the Nightfall DLP for Notion.
• Steps: Learn the steps to get the Notion up and running.
• Install Nightfall for Notion: Learn how you can install the Nightfall DLP for Notion.
• Verification of Notion Installation: Learn how you can verify the connection to the installed Notion instance.
• Configure Alerts for Notion: Learn how you can configure the integration level alerts for Notion.
• Configure Policies for Notion: Learn how you can create policies for the Nightfall DLP for Notion.
• Notion App Selection: Learn how you can select the Notion integration in a Nightfall policy.
• Configure Detection Rules for Notion: Learn how to configure the detection rules section in Nightfall policies created for Notion.
• Configure Advanced Settings for Notion: Learn how to configure the advanced settings section in Nightfall policies created for Notion.
• Risk Score for Notion: Learn how to configure risk score and name a Nightfall policy created for the Notion DLP.
• Manage Notion Events: Learn how to handle Nightfall Events that were created as a result of sensitive data leak in the Notion.
• Users and Roles: Learn more about users and roles in Nightfall settings.
• Authentication Options: Learn the available authentication options.
• Role Based Access Control (RBAC): Learn how the role based access control(RBAC) works in Nightfall.
• Security Analyst Role: Learn the various permissions available to the security analyst role in Nightfall.
• Policy Manager Role: Learn the various permissions available to the policy manager role in Nightfall.
• Security Events Manager Role: Learn the various permissions available to the security events manager role in Nightfall.
• Security Operations Manager Role: Learn the various permissions available to the security operations manager role in Nightfall.
• System Administrator Role: Learn the various permissions available to the system administrator role in Nightfall.
• Directory Sync: Learn how you can leverage the directory sync feature in Nightfall.
• Add Microsoft Entra ID to Nightfall: Learn how to sync your Microsoft Entra ID's data to Nightfall.
• Google Workspace Directory Service: Learn how to sync your Google Workspace data to Nightfall.
• Add Okta to Nightfall: Learn how to sync your Okta data to Nightfall.
• Custom Branding
• Customer Referral Program
• Frequently Asked Questions (FAQs): A list of common queries which users get while using Nightfall and their responses.
• How long does it take to deploy Nightfall?: Learn about the time taken to deploy Nightfall.
• How do I deploy Nightfall?: Learn the process of Nightfall deployment.
• What are some unique points about Nightfall that I should know?: Learn some unique points about Nightfall which differentiate it from the competitors.
• Which languages does Nightfall support?: Use this to understand the language nuances when using Nightfall for text recognition and classification.
• How does Nightfall yield time savings for my team?: Learn how Nightfall can save your team's time in managing sensitive data.
• Nightfall vs Legacy DLP: What's the difference?: Learn the difference between Nightfall DLP and legacy DLP solutions.
• How does Nightfall make my organization more secure?: Learn how Nightfall can secure your organization from sensitive data leaks.
• Nightfall vs CASB: What's the difference?: Learn the differences between Nightfall DLP and cloud access security broker (CASB).
• Nightfall vs E-Discovery: What's the difference?: Learn the differences between Nightfall DLP and E-discovery
• How does Nightfall classify data?: Learn how Nightfall classifies data.
• What types of data does Nightfall classify?: Learn the types of data that Nightfall can classify.
• Does Nightfall scan unstructured data?: Learn how Nightfall scans unstructured data.
• Does Nightfall require data to be already tagged?: Learn if Nightfall can handle data that is not tagged
• How do I learn more about and test out Nightfall?: Learn how you can contact Nightfall sales team.
• Using Service Accounts with Nightfall: Learn if you can use service accounts for authentication in the Nightfall integrations.
• Which permissions are required for each integration?: Learn the permissions required for each Nightfall integration.
• Where can I find active user counts for each SaaS application protected by Nightfall?: Learn how you search for active user count for each SaaS application protected by Nightfall.
• In the Atlassian Marketplace, why does it show that the Nightfall app is not approved in security?: Learn why the Atlassian Marketplace says that the Nightfall app is not approved.
• How can I estimate the data volume that Nightfall needs to scan?: Learn how you can estimate the amount of data that needs to be scanned by Nightfall.
• How can I check the Platform Status of Nightfall: Learn how to view the current status of your Nightfall platform.
• Contact Nightfall: Learn how you can contact Nightfall.
• Nightfall Page Redirects

Posture Management

• Nightfall Posture Management
• Nightfall Security Posture Management
• Installing Nightfall for Google Drive
• Configuring Integration Alerts
• Configuring Google Drive Policies
• Integration
• Scope
• Trigger
• Automated Actions
• Creating Policy
• Remediation for Google Drive
• Posture Management Events Page

Data Exfiltration Prevention

• Nightfall Data Exfiltration Prevention
• What is Data Exfiltration
• Nyx – AI-powered DLP Copilot: Learn about Nyx. Nightfall's AI-powered Copilot.
• Exfiltration Events: Learn the details available on the Nightfall Exfiltration Events page
• Installing Nightfall for Google Drive
• Configuring Integration Alerts
• Configuring Google Drive Policies
• Google Drive App Selection
• Scope
• Trigger
• Automated Actions
• Creating Policy
• Remediation for Google Drive Exfiltration
• Endpoint Exfiltration Prevention
• Additional Methods to Install Nightfall AI Extension: This explains the other methods of deployment available for the Nightfall AI extension, separate from the Nightfall AI Agent.
• Install Nightfall AI Extension via Google Workspace Admin: If an organization is utilizing Google Workspace to deploy extensions to Chrome, two options are provided to deploy the Nightfall extension and avoid conflicts on the machine.
• Install Nightfall AI Extension via a Common MDM Profile: This walkthrough adds the Nightfall Profile Chrome ExtensionSettings to an existing custom macOS profile.
• Manually Install the Nightfall Safari Extension
• Install Nightfall AI Agent for Mac
• Manual Installation
• Nightfall macOS Agent Deployment: JAMF MDM
• Nightfall macOS Agent Deployment: JumpCloud MDM
• Nightfall macOS Agent Deployment: Iru (Kandji) MDM: This document explains the process of installing Nightfall AI agent using the Kandji MDM.
• Nightfall macOS Agent Deployment: Mosyle MDM: Below is a step-by-step guide to deploy the Nightfall Endpoint DLP agent for macOS using Mosyle MDM.
• Nightfall macOS Agent Deployment: PDQ SimpleMDM: Below is a step-by-step guide to deploy the Nightfall Endpoint DLP agent for macOS using PDQ's SimpleMDM.
• Nightfall macOS Agent Deployment: Rippling MDM: This document explains the process of installing Nightfall AI agent using the Rippling MDM.
• Nightfall macOS Agent Deployment: Workspace ONE UEM: Below is a step-by-step guide to deploy the Nightfall Endpoint agent for macOS using Workspace ONE UEM.
• Install Nightfall AI Agent for Windows OS
• Manual Installation: Learn how to install the Nightfall agent on Microsoft Windows OS manually.
• Nightfall Windows Agent Deployment: JumpCloud MDM: Instructions on how to install the Nightfall agent on Microsoft Windows using the JumpCloud MDM.
• Nightfall Windows Agent Deployment: Microsoft Intune: Learn how to install the Nightfall Agent for Windows using Intune as a Line-of-Business (LOB) app.
• Nightfall Windows Agent Deployment: MSI: This guide explains multiple ways to deploy the Nightfall Agent (NightfallAgent.msi) with the required API_KEY and COMPANY_ID parameters.
• Nightfall Windows Agent Deployment: Rippling MDM: Learn how to install the Nightfall agent on Microsoft Windows OS using the Rippling MDM.
• Nightfall Windows Agent Deployment: Workspace ONE UEM: Below is a step-by-step guide to deploy the Nightfall Endpoint DLP agent for Windows using Workspace ONE UEM.
• Nightfall Windows Agent Deployment: SCCM: A step-by-step guide to deploy the Nightfall endpoint agent and the AI-coding-assistant hooks (Claude Code, Cursor, VS Code + GitHub Copilot) to Windows devices using SCCM/MECM.
• Configuring Integration Alerts
• Configuring Policies
• MAC/Windows App Selection
• Scope
• Trigger
• Browser Uploads
• Clipboard Paste
• Uploads, Paste to Desktop Apps
• Session Detection: Corporate and Personal Account Filtering
• Cloud Sync App Uploads
• Removable Media
• Git Push Monitoring
• Printer Support
• Advanced Settings: Learn about the advanced setting options present in the Nightfall exfiltration policy for MAC devices.
• Admin Alerting: Learn how to configure admin alerts in Nightfall exfiltration policies.
• Automated Actions: Learn more about how automated actions work in a Nightfall exfiltration policy.
• Temporary Exception Requests - User Justification and Override Workflow
• End-User Notifications: Learn how to configure end user notifications in Nightfall exfiltration policies.
• Creating Policy
• Remediation for MAC OS Policies
• Frequently Asked Questions (FAQs)
• Remediation for Windows OS Policies
• Recommended Policy Configurations
• Endpoints - Device List Page
• Nightfall Exfiltration for Salesforce
• Configuring Integration Alerts
• Configuring Salesforce Exfiltration Policies
• Salesforce App Selection
• Scope
• Trigger
• Advanced Settings
• Creating Policy
• Remediation for Salesforce Exfiltration
• AI Governance
• MCP Server Visibility
• Auditability and Control
• Setup & Installation
• Nightfall Hooks for Cursor
• Nightfall Hooks for Claude Code
• Nightfall Hooks for VS Code Copilot
• Claude Cowork (OpenTelemetry)
• Hooks vs. Open Telemetry
• Creating an AI Agent Security Policy
• Investigating AI Agent Security Incidents
• Forensics Search: Perform insider risk investigations and threat hunting across all detected data exfiltration events — not only policy-triggered alerts.
• App Intelligence: Identify, classify, and assess risk for SaaS and AI applications used across your environment.

Data Encryption

• Nightfall Data Encryption
• Encryption FAQs
• Data Encryption for Gmail - Overview
• Installing Nightfall DLP
• Installing Nightfall DLP on Individual Devices
• Installing Nightfall DLP Across Organization
• Creating Policies for Encryption
• Integration
• Scope
• Advanced Settings
• Creating Policy
• Remediation for Data Encryption
• Encryption Policy FAQs
• Nightfall Encryption - Sender Experience
• Nightfall Encryption - Recipient Experience
• Encryption Events Page

Developer APIs

• Welcome to Developer APIs Documentation
• Overview
• Quickstart
• Authentication and Security
• Pricing
• Entities and Terms to Know
• Setting Up Nightfall
• Creating API Key
• Creating Policies
• Alerting
• Scanning Text
• Scanning Files
• Supported File Types
• File Scanning and Webhooks
• Uploading and Scanning API Calls
• Special File Types
• Specialized File Detectors
• Webhooks and Asynchronous Notifications
• Accessing Your Webhook Signing Key
• Creating a Webhook Server
• Scanning Features
• Using Pre-Configured Detection Rules
• Scanning Images for patterns using Custom Regex Detectors
• Creating an Inline Detection Rule
• Using Exclusion Rules
• Using Context Rules
• Using Redaction
• Using Policies to Send Alerts
• Detecting Secrets
• PHI Detection Rules
• Test Datasets
• Errors
• Nightfall Playground
• DLP APIs - Firewall for AI Platform
• Rate Limits for Firewall APIs
• DLP APIs - Native SaaS Apps
• Rate Limits for Native SaaS app APIs
• Policy Update APIs
• Exfiltration Prevention APIs
• Posture Management APIs
• SaaS App and Device Management APIs
• AI Governance API's
• Nightfall Model Context Protocol (MCP) Server
• Getting Started
• Available Tools
• Common Use Cases
• Query Examples
• Best Practices - Security Investigation Workflows
• Troubleshooting
• Support & Resources
• Overview
• Overview
• Python
• Ruby
• Java
• Overview
• Building Endpoint DLP to Detect PII on Your Machine in Real-Time
• Deploy a File Scanner for Sensitive Data in 40 Lines of Code
• Using Scan API (with Python)
• FAQs
• What Can I do with the Firewall for AI
• How quickly can I get started with Firewall for AI?
• What types of data can I scan with API?
• What types of detectors are supported out of the box?
• Can I customize or bring my own detectors?
• What is the pricing model?
• How do I know my data is secure?
• How do I get in touch with you?
• Can I test out the detection and my own detection rules before writing any code?
• How does Nightfall support custom data types?
• How does Nightfall's Firewall for AI differs from other solutions?
• Contact Us
• Nightfall MCP Documentation

Data Classification and Discovery

• Data Discovery and Classification
• Introduction to Nightfall Audit
• Overview
• Select Integration
• Select Scope
• Detection Rules
• Automated Actions
• Review Configurations
• Analyzing Google Drive Audit Results
• Overview
• Select Integration
• Configure Scope
• Select Detection Rules
• Review Configurations
• Overview
• Salesforce Integration
• Configure Scope
• Detection Rules
• Automated Actions
• Review Configurations
• Analyzing Salesforce Audit Results
• Overview
• OneDrive Integration
• Configure Scope
• Detection Rules
• Automated Actions
• Review Configurations
• Analyzing OneDrive Audit Results

Frequently Asked Questions (FAQs)

• Nightfall FAQs
• End User FAQs
• Email Encryption - Sender FAQs
• Email Encryption - Receiver FAQs

Agent Instructions

This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

Querying This Documentation

If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the ask query parameter:

GET https://help.nightfall.ai/welcome-to-nightfall-documentation.md?ask=<question>

The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.