01 / Watch your data

Myrikeep Classify

Live · pilot

Sensitive data.
In plain sight.

Find sensitive files and mail where they live. Get labels, confidence, and file locations, with scanning on your own infrastructure.

Try Test Drive Read the docs

For small and midsized businesses, IT and MSP teams, and homelabbers with a NAS to understand.

What it watches

Know what you hold.
Know where to look.

Connect a source, run a scan, and review the findings alongside coverage. Classify shows you where to act; you make the changes in your own systems.

01Files, cloud storage, and mail
Scan local and NFS folders, SMB shares and NAS, S3, Azure Blob, IMAP, and personal Google Drive or OneDrive. Microsoft 365 and Google Workspace connectors are in pilot.
02Labels with confidence
Local detection rules find identity and financial data, health identifiers, credentials, and other sensitive values. Findings show the label, confidence, and file location.
03Sharing signals, with limits
Review supported sharing categories such as public, anyone with link, and broad group. Unknown stays unknown. Sharing checks vary by connector and never change permissions.
04Coverage you can inspect
See what was sampled, parsed, or skipped. Common text, PDF text, and modern Office formats have parsers; other formats may get strings-only checks.
05Repeat scans on a schedule
Schedule scans and use monitoring policies to flag future completed scans when labeled files cross a threshold you choose.
06Reports and audit records
Compare store risk scores with a published formula, export labels to Microsoft Purview, and review administrative changes in an append-only audit log.

From finding to next step

See the evidence. Check the coverage.

The Classify workspace puts labels and file locations in view. The Coverage page shows the limits of each scan.

Classify Findings workspace showing sensitive data labels, confidence, file locations, and exposure controls.
Classify Findings workspace. Example screenshot; your findings depend on the source, scan scope, and coverage.

Local work. Clear results.

How Classify works.

  1. 01

    Connect locally

    Deploy the agent container near your data. Source credentials stay in a local secret file on the agent host.

  2. 02

    Scan read-only

    The console queues work. Your agent reads the source and runs detection locally, without writing to the source store.

  3. 03

    Review and rescan

    Labels, counts, confidence, and file locations return to the console. Review coverage, fix sharing in your systems, and rescan.

Before your first scan

A few useful details.

Read the connector docs
Does Classify change my files?
No. Source connections are read-only. Classify does not change permissions, quarantine, or delete source files. You act in your own systems.
Does Test Drive stay on my network?
Test Drive uses uploaded copies. It does not inspect cloud sharing or prove coverage of a whole store. Its page displays current availability, limits, and retention.
Does a completed scan mean everything was read?
No. Parsing, sampling, and exclusions affect coverage. Review the Coverage page. Images and scanned PDFs need optional local OCR; Test Drive does not run OCR.

A watcher for your corner of the world

See what your data is telling you.

Start with a few uploaded samples in Test Drive. No source account or provider credentials to configure.

Try Test Drive Read the docs