Soveren is a data security company that shows engineering and security teams where sensitive data lives and moves in their production systems. It is built for Kubernetes-based environments, where personal data, payment data and developer secrets pass between many services and APIs.
The problem is that teams running microservices often cannot say which services touch sensitive data, which makes privacy audits under PCI DSS, GDPR and CPRA slow and leaks hard to spot. Soveren is now part of SecureSky.
At A Glance
| Vendor | Soveren, part of SecureSky |
|---|---|
| Category | Data security posture management and data detection and response |
| Deployment | Sensors in the customer’s Kubernetes cluster with the SaaS Soveren Cloud |
| Customers | Agoda, OpenTable, Personio, Farfetch, PandaDoc |
| Founded | 2021 |
| Market classification | Data Security |
What Soveren Does
Soveren provides near real-time observability of sensitive assets and data flows, and the controls to act on them in production.
Scanning stored data alone misses what happens between services, so Soveren pairs discovery in data stores with analysis of live traffic, using eBPF in the cluster. The result is a single view of services, data sources and the sensitive data types that flow between them, which teams use for ongoing data and asset observability and as evidence in compliance work.
Products
DSPM
DSPM covers data at rest for teams that need an inventory of where sensitive records are stored. It monitors data sources such as S3 buckets, Kafka clusters and PostgreSQL databases and recognises more than 45 data types across more than 30 countries; SecureSky reports a claimed 98% accuracy. Findings feed a data and asset map of discovered services and data sources.
DDR
DDR handles data in motion, which matters most to teams worried about sensitive data leaking through internal APIs. It intercepts and analyses structured HTTP JSON traffic between services, using libpcap and eBPF-based traffic analysis in Kubernetes, and raises events on findings such as policy violations so they can be investigated and routed to the right team.
How It Works
Soveren splits the work between sensors that run inside the customer’s environment and a SaaS back end, Soveren Cloud, that Soveren hosts and manages.
| Component | What it does |
|---|---|
| DIM Sensor | The data-in-motion sensor mirrors traffic and samples calls between services, so it adds no load to the application path. |
| DAR Sensor | The data-at-rest sensor connects to the customer’s data stores and classifies what they hold. |
| Soveren Cloud | Hosts the data and asset map, the policy engine and the statistics and metrics dashboards built from what the sensors collect. |
| Deployment | Installation is a native Kubernetes deployment via Helm, using a token created in the Soveren app, and the sensors discover every service deployed in the cluster automatically. |
| Data model | Detected types are grouped as PII, PCI and developer secrets, such as security tokens, private keys, passwords and authorisation codes, each with a sensitivity of Low, Medium or High. |
| Data handling | Sensors send only metadata, never actual values from payloads or data sources, so no sensitive data leaves the customer’s environment. |
| Alerting | Events can open a Jira ticket directly or notify a Slack channel, and webhooks and an API pass findings to other tools. |
Company Background
| Founded | 2021. |
|---|---|
| Headquarters | London, United Kingdom. |
| Funding | A reported $10 million in total, including a $6.5 million seed round in 2021. |
| Acquisition | SecureSky acquired Soveren in 2026 and is folding its machine-learning-driven DSPM capabilities into the SecureSky exposure management platform. |
Note: This overview is compiled from Soveren’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.