Security platforms with integrated policy enforcement

A system comprising:

• one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
• obtaining, at a security platform, a resource transmitted from a first external system to a second external system in response to the first external system receiving a request from a client device to transmit the resource to the second external system;
• determining, by the security platform, a classification of the resource according to a policy applied to the resource by the first external system;
• generating, by the security platform, one or more fingerprints of the obtained resource;
• comparing, by the security platform, the one or more fingerprints to a plurality of stored fingerprints;
• identifying, by the security platform, a subset of stored fingerprints in response to comparing the one or more fingerprints to a plurality of stored fingerprints, wherein the identified subset of stored fingerprints represent content incorporated in the obtained resource;
• determining, by the security platform, whether data indicative of the subset of stored fingerprints and data indicative of the classification of the resource satisfy criteria to allow the obtained resource to be transmitted to the second external system;
• in response to determining that the data indicative of the subset of stored fingerprints and the data indicative of the classification of the resource satisfy the criteria,
• permitting, by the security platform, the obtained resource to be transmitted to the second external system;
• or
• in response to determining that the data indicative of the subset of stored fingerprints and the data indicative of the classification of the resource do not satisfy the criteria, preventing, by the security platform, the obtained resource from being transmitted to the second external system.

A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

• obtaining, at a security platform, a resource transmitted from a first external system to a second external system in response to the first external system receiving a request from a client device to transmit the resource to the second external system;
• determining, by the security platform, a classification of the resource according to a policy applied to the resource by the first external system;
• generating, by the security platform, one or more fingerprints of the obtained resource;
• comparing, by the security platform, the one or more fingerprints to a plurality of stored fingerprints;
• identifying, by the security platform, a subset of stored fingerprints in response to comparing the one or more fingerprints to a plurality of stored fingerprints, wherein the identified subset of stored fingerprints represent content incorporated in the obtained resource;
• determining, by the security platform, whether data indicative of the subset of stored fingerprints and data indicative of the classification of the resource satisfy criteria to allow the obtained resource to be transmitted to the second external system;
• in response to determining that the data indicative of the subset of stored fingerprints and the data indicative of the classification of the resource satisfy the criteria,
• permitting, by the security platform, the obtained resource to be transmitted to the second external system;
• or
• in response to determining that the data indicative of the subset of stored fingerprints and the data indicative of the classification of the resource do not satisfy the criteria, preventing, by the security platform, the obtained resource from being transmitted to the second external system.