39. A system for preventing unauthorized disclosure of secure information, the system comprising: a processor; a network interface through which to communicate with one or more remote servers over a network; a memory storing code which, when executed by the processor, causes the processor to perform a plurality of operations, including: receiving, by a protect agent installed at a first egress point, digital information including a first text, the first text including a plurality of words; identifying, by the protect agent, a plurality of candidate entities, each of the plurality of candidate entities corresponding to a particular word of the plurality of words; identifying, by the protect agent, one or more matching candidate entities from the plurality of candidate entities that match against one of a plurality of lightweight entities stored in a lightweight entity database (LWED); upon determining one or more matching candidate entities, transmitting, by the protect agent, the one or more matching candidate entities to a remote server that can access a global entity database (GED), the GED including a plurality of registered entities identified to be secured against unauthorized disclosure, wherein the remote server performs a comparison of the one or more matching candidates entities with the plurality of registered entities in the GED to reduce a possibility that the identified one or more matching candidate entities are false positives, and wherein the remote server automatically generates acknowledgement whether each of the one or more matching candidate entities matches against one of the plurality of registered entities included in the GED; receiving, from the remote server, the acknowledgement; and performing, by the protect agent, a security action, when at least one of the one or more matching entities matches against one or the plurality of registered entities included in the GED, wherein the security action is performed on the first text before the first text is disclosed through the first egress point.
39. A system for preventing unauthorized disclosure of secure information, the system comprising: a processor; a network interface through which to communicate with one or more remote servers over a network; a memory storing code which, when executed by the processor, causes the processor to perform a plurality of operations, including: receiving, by a protect agent installed at a first egress point, digital information including a first text, the first text including a plurality of words; identifying, by the protect agent, a plurality of candidate entities, each of the plurality of candidate entities corresponding to a particular word of the plurality of words; identifying, by the protect agent, one or more matching candidate entities from the plurality of candidate entities that match against one of a plurality of lightweight entities stored in a lightweight entity database (LWED); upon determining one or more matching candidate entities, transmitting, by the protect agent, the one or more matching candidate entities to a remote server that can access a global entity database (GED), the GED including a plurality of registered entities identified to be secured against unauthorized disclosure, wherein the remote server performs a comparison of the one or more matching candidates entities with the plurality of registered entities in the GED to reduce a possibility that the identified one or more matching candidate entities are false positives, and wherein the remote server automatically generates acknowledgement whether each of the one or more matching candidate entities matches against one of the plurality of registered entities included in the GED; receiving, from the remote server, the acknowledgement; and performing, by the protect agent, a security action, when at least one of the one or more matching entities matches against one or the plurality of registered entities included in the GED, wherein the security action is performed on the first text before the first text is disclosed through the first egress point. 40. The system of claim 39 , wherein each of the plurality of registered entities included in the GED is generated by: generating a hash-value for a first entity that an organization protects to protect from unauthorized disclosure; and associating the hash-value with metadata related to the first entity.