The main function of a cloud access security broker (CASB) is to act as an intermediary between an organization's on-premises infrastructure and cloud services. CASBs enforce security policies, provide visibility over cloud usage, and protect sensitive data moving to and from cloud environments. By integrating data security, access control, and compliance measures, CASBs help organizations mitigate risks associated with cloud computing while ensuring that users can securely access necessary resources.