Abstract: Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified by an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified by an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified by an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Systems herein include a managed content application that can place markers for conversations within secure documents. A separate social application can serve as the platform for the conversations, allowing for efficient conversations that can occur in real time. The markers can be stored with the documents and identify the conversation, allowing users to retrieve historical conversations that occurred on the social application from within the document. This can allow users to quickly come up to speed without having to rehash the conversations with the original participants. Document security can also be maintained without sacrificing conversation efficiency of the social application.

Abstract: Dynamic content redaction though the generation of redaction schemas associated with document, image, media, or other data files is described. A redaction schema can include at least one range of content in a data file to be concealed for a user, a group of users, or operating parameters of various devices, for example. When the data file is opened for display on a device, the redaction schema can be parsed to identify whether masking objects should be added to a masking layer for overlay upon or above the content displayed. The masking layer can be generated based on the redaction schema, a user of the device, or operating parameters of the device, for example. Masking objects in the masking layer can conceal one or more ranges of the content in a data file from view or based on users or operating parameters of various devices.

Abstract: Systems herein include a managed content application that can place markers for conversations within secure documents. A separate social application can serve as the platform for the conversations, allowing for efficient conversations that can occur in real time. The markers can be stored with the documents and identify the conversation, allowing users to retrieve historical conversations that occurred on the social application from within the document. This can allow users to quickly come up to speed without having to rehash the conversations with the original participants. Document security can also be maintained without sacrificing conversation efficiency of the social application.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified by an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Disclosed are various examples for facilitating access to files in a virtual content repository. In one example, a request to access a file is transmitted to a management service. The request includes a first authentication credential for a first user account associated with the management service. Storage plan data is received that identifies a content repository and a second authentication credential for a second user account associated with the content repository. The client device authenticates with the content repository using the storage plan data, and access to the file is provided.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified fey an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Disclosed are various examples for deploying a rules engine in a distributed fashion. A rule definition that defines a rule can be transformed in a network topology. The network topology can be deployed onto a cluster of computing devices or instances. In this way, the rules engine can be horizontally scalable such that is it not necessary to deploy the rules engine in a single computing instance.

Abstract: Disclosed are various examples of systems and methods for transferring data between applications executing in sandboxed environments. In one example, a first application is in a first sandbox. A request for access to data is transmitted from the first application to a second application in a second sandbox. The data is stored in the second sandbox. The request is transmitted using a sandbox communications framework. The data is received using the sandbox communications framework. The data is encrypted. An encryption key is retrieved from an access-restricted data store.

Abstract: Disclosed are various examples for deploying a rules engine in a distributed fashion. A rule definition that defines a rule can be transformed in a network topology. The network topology can be deployed onto a cluster of computing devices or instances. In this way, the rules engine can be horizontally scalable such that is it not necessary to deploy the rules engine in a single computing instance.

Abstract: Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.

Abstract: Disclosed are various approaches performing actions on data items in a third-party service with a network-accessible application programming interface from an email client. The email client can perform an action as specified by an email service profile, which specifies how to identify the email message, the data item and how to interact with the network-accessible application programming interface.

Abstract: Disclosed are various examples for deploying a rules engine in a distributed fashion. A rule definition that defines a rule can be transformed in a network topology. The network topology can be deployed onto a cluster of computing devices or instances. In this way, the rules engine can be horizontally scalable such that is it not necessary to deploy the rules engine in a single computing instance.

Abstract: Disclosed are various examples for deploying a rules engine in a distributed fashion. A rule definition that defines a rule can be transformed in a network topology. The network topology can be deployed onto a cluster of computing devices or instances. In this way, the rules engine can be horizontally scalable such that is it not necessary to deploy the rules engine in a single computing instance.

Abstract: Disclosed are various examples of systems and methods for transferring data between applications executing in sandboxed environments. In one example, a first application is in a first sandbox. A request for access to data is transmitted from the first application to a second application in a second sandbox. The data is stored in the second sandbox. The request is transmitted using a sandbox communications framework. The data is received using the sandbox communications framework. The data is encrypted. An encryption key is retrieved from an access-restricted data store.