OctoWatch DLP

OctoWatch DLP is an endpoint data loss prevention solution that solves a critical problem for modern businesses: sensitive information leaking through everyday user actions—email, USB drives, cloud uploads, printing, and more. While most DLP tools are heavy and complex, OctoWatch focuses on real-time visibility and precise control, helping security teams detect and block insider threats before data leaves the organization. How I made it: I built OctoWatch from the ground up with a focus on performance and stealth. The agent runs silently on endpoints, intercepting data flows at the OS level to monitor, classify, and enforce policies without disrupting user productivity. The architecture is modular—core interception engine, policy manager, and a lightweight management console that gives admins a clear view of incidents. Stack: The endpoint agent is written in C# and C++ for low-level system integration and minimal footprint, with kernel-mode drivers on Windows for deep visibility. The backend and policy engine use Go for concurrency and reliability, while the web dashboard is built with React and TypeScript. Data is stored in MSSQL, and communication is secured via gRPC and TLS.