Data loss prevention for endpoint-based security

A method, comprising:

• receiving, at an end user device, a request for content from a network source;
• comparing the network source of the requested content against a policy that is stored on the end user device prior to the content being allowed on the end user device;
• performing at least one action related to the requested content based on the comparison between the network source of the requested content and the policy;
• and
• in response to receiving the content at the end user device:
• performing a security analysis and a data sensitivity analysis of the received content on the end user device, the security analysis checking for a security threat within the content and the data sensitivity analysis checking that the content is free of sensitive information and complies with an authorization to use the content at a network location where the content is being uploaded, the authorization comprising a permission level that a user associated with the network location where the content is being uploaded has to access content;
• and
• blocking the content from being uploaded to the network location in response to failing at least one of the security analysis and the data sensitivity analysis.

An apparatus, comprising:

• means for receiving, at an end user device, a request for content from a network source;
• means for comparing the network source of the requested content against a policy that is stored on the end user device prior to the content being allowed on the end user device;
• means for performing at least one action related to the requested content based on the comparison between the network source of the requested content and the policy;
• and
• means for, in response to receiving the content at the end user device:
• performing a security analysis and a data sensitivity analysis of the received content on the end user device, the security analysis checking for a security threat within the content and the data sensitivity analysis checking that the content is free of sensitive information and complies with an authorization to use the content at a network location where the content is being uploaded, the authorization comprising a permission level that a user associated with the network location where the content is being uploaded has to access content;
• and
• blocking the content from being uploaded to the network location in response to failing at least one of the security analysis and the data sensitivity analysis.