A cloud access security broker (CASB) acts as a gatekeeper of internet traffic between your on-prem infrastructure and cloud provider. It helps you consistently enforce security policies, secure sanctioned and unsanctioned cloud services, protect sensitive data across the cloud and web, and stop the most advanced online threats.