Dropbox, Box and BooleBox: a security challenge in the field of EFSS
After the recent announcement of BooleBox Cloud integration with Office 365, we decided to make an in-depth comparison to establish which of these three top cloud service competitors can better respond to business security needs
Dropbox, Box and BooleBox are three of the largest and most full-featured cloud storage and file-sharing services. Key-players in the international market, they all offer domain management tools, granular collaboration insights for both privates and businesses and custom integrations. We decided to carry out a thorough laboratory test, covering all their key functionalities, to bring out their weaknesses and strongpoints with a specific focus on security and collaboration.
Cooperation and communication internally and externally is crucial for businesses to recover agility, efficiency and productivity. Thus, there is no coincidence that all these three services give their customers the possibility to create and edit Microsoft Office documents, as well as share them with other users in the interests of a fruitful collaboration, thanks to the integration with Office 365. Differently from Dropbox and Box, BooleBox’ announcement of joining Microsoft Cloud Storage Partner Program is still hot news in the market of EFSS. As its two main competitors, now BooleBox offers also the possibility to create, access and work on Microsoft Word documents, Microsoft PowerPoint presentations and Microsoft Excel sheets on a web browser, without any app installation needed. With BooleBox’ added-value of security.
Today, the cyber threat landscape continues to be complex, with increasing risk. Security has become a primary necessity, having in mind all the recent and frequent cybercrime attacks. Just think about last weeks’ eye-catching CIA Vault 7 WikiLeaks dump, which had tremendous resonance in the whole IT world (and far beyond). Or all the impressive facts and figures released every day by the media and experts in the field, starting from the cybercrime damage costs to hit $6 trillion annually by 2021, or the +102% of cyberattacks on healthcare in 2016. Both privates and companies should be assessing their vulnerability to cyber-attacks and take advantage of security solutions to mitigate the potential for these events to harm their lives or business.
What emerged from our comparison is that all three enterprise cloud services rely on security features that help set some cloud concerns to rest, starting from Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology and 256 bit AES encryption and different login options, such as Single Sign On (SSO) or 2-step verification – this one, to strengthen the authentication phase to the cloud platform.
They can also guarantee secure exchange of files and folders, through a secure link. Always granting granular access rights. Users will always be able to revoke those access rights or edit them, whenever they want.
Of course, in EFSS the possibility to have a tool to sync all files between desktop PCs, online folders and mobile devices is a must. What we’ve noticed is that BooleBox provides an additional security layer on files, thanks to its personal key technology: the local data is fully encrypted on the disk with a key known only to the user. This means that, in case of loss or theft of your devices, you will only lose your hardware, but not your data.
Last but not least, all the three solutions offer users the possibility to access the full history of all the previous versions of modified files, as well as the possibility to access activity logs, which provide an advanced auditing system.
Having said that, what are the main points that make the difference from a business and strategic point of view?
With BooleBox, in addition to decide which users can access documents, it is possible to protect the content while in-use, inhibiting all those operations that could put at risk the security of data, such as “Copy”, “Cut” and “Paste”. Also BooleBox “Anti-Capture” and “Deter PhotoShots”, which reduce all risks related to screen capture actions for top-secret documents, are a way to ensure the confidentiality of data not only when it is transferred and stored online, but also when it is being used. To cut it short: BooleBox is more security-oriented, based on granular protections and a wider array of protection options to be applied to both files and emails.
Box, on the other hand, is more focused on collaboration functionalities. That’s why it gives more attention to third-party integrations, instead of enhancing its security offering. It distinguishes itself in the field of EFSS for its large number of integrations with different partners and solutions, to manage data not only inside the cloud, but also in other environments. Of course, this goes in the detriment of security.
Dropbox represents the starting point for all cloud sharing solutions, and this is why it still remains the most known and used in the consumer-world. According to this, it keeps on offering its customers worldwide multiple consumer-oriented integrations. To distinguish itself and create its own market niche, any other solution has to focus on a specific aspect – such as Box does with collaboration or BooleBox with security.