# tamper (https://tamper.one)

> Protect what matters, detect what changes. tamper is a sovereign European, agentless, AI-assisted, provider-agnostic object-storage security platform (FIM, DSPM, DAM, DLP) developed by SIENNA (Lille, France) that detects the first signs of ransomware on S3-compatible buckets on infrastructure you control.

- Full LLM documentation: https://tamper.one/llms-full.txt
- Markdown version of any content page: append `.md` to any URL (e.g., `https://tamper.one/what-is-a-dspm.md`, `https://tamper.one/tamper-vs-varonis.md`).

## Four Core Disciplines
- **FIM (File Integrity Monitoring)**: Continuous SHA-256 cryptographic fingerprinting, object drift tracking, audit history, and IoC hash matching across S3 buckets without installing agents.
- **DSPM (Data Security Posture Management)**: Automated bucket configuration scoring (Block Public Access, Versioning, Object Lock WORM, SSE/KMS encryption, Replication, Lifecycle rules, CORS), CIS benchmark compliance, FinOps storage optimization visibility, and security option Auto-Fix.
- **DLP (Data Loss Prevention & Ransomware Detection)**: Shannon entropy calculation on modified objects (entropy ~7.99 flags encryption), OCR + LLM AI analysis of modified documents, automated S3 object security tagging, DLP reports, and stealth Canary honeytoken objects.
- **DAM (Data Access Monitoring & S3 Gateway)**: Real-time inline S3 API proxy (`s3gw.com`) providing zero-latency request authentication (AWS SigV4), anti-wiper deletion quotas, path/prefix DLP locks, GeoIP & CIDR IP filtering, and SIEM logging.

## Pricing & Plans (Exact Official Rates)
- **Genesis (€30 / month)**: 1 bucket, up to 100K objects, Daily audit frequency, Manual audit possible, 1 third-party integration, FIM (File Integrity Monitoring, IoC matching on audited objects, Data Metrics, Audits History), DSPM (Configuration scoring, CIS benchmark, FinOps visibility), runs on Your VM, 5 days/week support, Monthly commitment, 30-day free trial.
- **Monolith (from €200 / month)**: 1 to 10 buckets, up to 10M objects, Up to hourly audit frequency, Manual audit possible, tamperOne Access, Up to 3 third-party integrations, Full FIM + DLP (Entropy Check, AI analysis of modified objects, AI tagging, DLP reports, Canary objects) + DAM (Data Access Monitoring, S3 Gateway) + DSPM (including Optimization Opportunities & Auto-Fix of security options), runs on Your VM, 5 days/week support, Monthly commitment, 30-day free trial.
- **Universe (from €960 / month)**: 10+ buckets, up to 100M objects, Up to every 15 minutes audit frequency, Manual audit possible, tamperOne Access, All third-party integrations, Full FIM + DLP (Unlimited local AI analysis of modified objects) + DAM + DSPM, runs on a Dedicated hardware appliance (maintenance included), 7 days/week dedicated contact support, 2-year minimum commitment.

## Key Pages
- [Home](https://tamper.one/)
- [Interactive Demo & 30-Day Free Trial](https://tamper.one/demo)
- [What is FIM (File Integrity Monitoring)?](https://tamper.one/what-is-a-fim)
- [What is DSPM (Data Security Posture Management)?](https://tamper.one/what-is-a-dspm)
- [What is DLP (Data Loss Prevention)?](https://tamper.one/what-is-a-dlp)
- [What is DAM (Data Access Monitoring)?](https://tamper.one/what-is-a-dam)
- [What is CNAPP (Cloud-Native Application Protection Platform)?](https://tamper.one/what-is-a-cnapp)

## Competitor Comparisons (Sovereign S3 Alternatives)
- [tamper vs Orca Security (CNAPP & DSPM Alternative)](https://tamper.one/tamper-vs-orca-security)
- [tamper vs Varonis (DSPM & DLP Alternative)](https://tamper.one/tamper-vs-varonis)
- [tamper vs Proofpoint Normalyze (DSPM & DLP Alternative)](https://tamper.one/tamper-vs-proofpoint)
- [tamper vs Netwrix Auditor (FIM & DAM Alternative)](https://tamper.one/tamper-vs-netwrix)
- [tamper vs Fortra Tripwire (FIM Alternative)](https://tamper.one/tamper-vs-fortra)
- [tamper vs Wiz.io (CNAPP & DSPM Alternative)](https://tamper.one/tamper-vs-wiz)
- [tamper vs Lepide (FIM & DAM Alternative)](https://tamper.one/tamper-vs-lepide)
- [tamper vs Wazuh FIM (FIM Alternative)](https://tamper.one/tamper-vs-wazuh)
- [tamper vs FileAudit (FIM & DAM Alternative)](https://tamper.one/tamper-vs-file-audit)
- [tamper vs ManageEngine (FIM & DAM Alternative)](https://tamper.one/tamper-vs-manage-engine)
- [tamper vs Qohash Qostodian (DSPM & DLP Alternative)](https://tamper.one/tamper-vs-qohash)

## Supported Cloud Object Storage Integrations
- [AWS S3 (Official AWS Marketplace Listing)](https://tamper.one/integrations/aws)
- [Backblaze B2 (Official Backblaze Partner Directory)](https://tamper.one/integrations/backblaze)
- [Scaleway Object Storage](https://tamper.one/integrations/scaleway)
- [OVHcloud High Performance Object Storage](https://tamper.one/integrations/ovh)
- [Microsoft Azure Blob Storage](https://tamper.one/integrations/azure)
- [Leviia Sovereign S3](https://tamper.one/integrations/leviia)
- [3DS Outscale Object Storage (SecNumCloud)](https://tamper.one/integrations/outscale)
- [Wasabi Hot Cloud Storage](https://tamper.one/integrations/wasabi)
- [Cloudflare R2](https://tamper.one/integrations/cloudflare)
- [IBM Cloud Object Storage](https://tamper.one/integrations/ibm)
- [DigitalOcean Spaces](https://tamper.one/integrations/digitalocean)
- [Oracle Cloud Object Storage (OCI)](https://tamper.one/integrations/oracle)
- [Akamai / Linode Object Storage](https://tamper.one/integrations/linode)
- [Alibaba Cloud OSS](https://tamper.one/integrations/alibaba)

## Engineering & FinOps Blog
- [AWS S3 Bucket Types & S3 Files](https://tamper.one/blog/aws-s3-bucket-types-and-s3-files/)
- [Cyberattacks Targeting S3 Cloud Storage](https://tamper.one/blog/cyberattacks-targeting-s3-cloud-storage/)
- [Cloud Storage FinOps Best Practices](https://tamper.one/blog/cloud-storage-finops-best-practices/)
- [S3 API Requests & Cloud Billing](https://tamper.one/blog/s3-api-requests-cloud-storage-billing/)
- [On-Premises S3 Storage Solutions Comparison](https://tamper.one/blog/on-premises-s3-storage-solutions/)
- [Mastering S3 Cloud Storage Classes & Tiering](https://tamper.one/blog/mastering-s3-cloud-storage-classes/)
- [Complete S3 Bucket Security Configuration Guide](https://tamper.one/blog/complete-s3-bucket-security-configuration-guide/)
