- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
Fortra
Fortra (formerly HelpSystems) sells cybersecurity for data protection, email and human risk, security operations and file transfer— DLP, DSPM and labelling, email defence, DMARC and awareness training, brand takedowns, GoAnywhere, scanning, Tripwire and SSE, and how each is sold. This hub covers twelve Fortra products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Twelve intel pages. Data, email, people, brand, file transfer and security operations.
Fortra’s line, product by product — every card is a full intel page, from Fortra DLP, DSPM and Data Classification to Cloud Email Protection, the Secure Email Gateway, DMARC Protection, Security Awareness Training and Brand Protection, then GoAnywhere MFT, Fortra VM, Tripwire Enterprise and Cloud Security. Fortra’s offensive-security and IT-operations tools are not covered.
Fortra DLP
Stops sensitive data leaving, on any channel.
An agent for Windows, macOS and Linux, a network appliance, data discovery and cloud analytics, as SaaS, managed or on-premises.
Fortra DSPM
Finds exposed data before an attacker does.
Discovers and classifies sensitive data across cloud, SaaS, file shares and databases, ranks the exposure and hands enforcement to DLP.
Fortra Data Classification
Labels data at creation, so policy can follow.
Two suites that tag email, Office files, CAD drawings and files at rest with persistent labels that DLP and mail gateways read.
Fortra Cloud Email Protection
Catches the impersonation a gateway lets through.
Connects by API to Microsoft 365, Exchange or Google Workspace, scores mail for BEC with ML and purges threats after delivery.
Fortra Secure Email Gateway
Redacts the risky part, sends the rest.
Runs on your hardware, VMware, Hyper-V, Azure or AWS, with deep content inspection, Adaptive Redaction and S/MIME or PGP encryption.
Fortra DMARC Protection
Your domains to p=reject, records hosted.
Fortra generates and hosts DMARC, SPF and DKIM records, tracks every third-party sender and reports spoofing aimed at your staff.
Fortra Security Awareness Training
Simulate the phish, then teach the clicker.
Phishing simulations and courses in a SCORM LMS, with a nanovideo lesson for anyone who clicks; also sold as Human Risk Management.
Fortra Brand Protection
Lookalikes, fakes and leaks, found and removed.
A managed service: analysts validate lookalike domains, phishing sites, fake social accounts and dark-web leaks, then file takedowns.
Fortra GoAnywhere MFT
Partner exchanges and batch jobs, one console.
SFTP, FTPS and AS2 with 60+ workflow tasks, self-hosted on Windows, Linux, UNIX or IBM i, or rented as Fortra-hosted MFTaaS.
Fortra Vulnerability Management
Finds and ranks the flaws an attacker would use.
An RNA appliance scans inside and Fortra’s scanners the perimeter; Threat Rank and an Active Risk score rank it all. SaaS or on-prem.
Fortra’s Tripwire Enterprise
Every change logged, every setting scored.
Baselines servers, network devices and databases, flags each change with who made it and scores settings against policy.
Fortra Cloud Security
Web, SaaS and private apps behind one proxy.
Fortra CASB, SWG and ZTNA on one agent, one proxy and one policy, from Lookout’s cloud security business, bought in May 2025.
Secure Collaboration
Platform & engineFile-level rights management (formerly Vera): AES-256 encryption for any file type, access revoked after download and tracking of every open. It is missing from Fortra’s October 2026 product menu, so confirm it is still sold; TechBag covers it on the Data Classification page
Globalscape EFT
Platform & engineFortra’s second managed file transfer line, EFT on-premises and EFT Arcus in the cloud, aimed at Windows-centric organisations and still sold under its own name. It is quote-only by module, and TechBag covers it on the GoAnywhere MFT page
Fortra Web Gateway
Platform & engineAn on-premises web gateway from the same family as the Secure Email Gateway, with antivirus engines and adaptive redaction. It is not Fortra SWG, the cloud gateway in Cloud Security, although Fortra’s own catalogue card for a secure web gateway links here. Covered on the Secure Email Gateway page
Fortra Platform and Threat Brain
Platform & engineFortra’s single-login platform, sold in essential, advanced and elite tiers, and Threat Brain, the intelligence hub that feeds it. They are a layer over the products rather than something to buy alone, so TechBag covers them here and on each product page
Alert Logic MDR
Platform & engineThe managed detection and response, XDR and WAF services moved to LevelBlue, announced on 27 January 2026, and alertlogic.com now redirects there. TechBag has no MDR page under this vendor; the managed DLP service on the DLP page is run by Fortra’s own analysts
IT operations lines
Platform & engineAutomate, the IBM Power software for IBM i where the company began in 1982, and Intermapper are still sold. They sit outside TechBag’s security categories and have no pages here, and Fortra’s offensive-security tools are not covered either
Fortra sells 5 of the products TechBag carries in Security. The Security guide shows how the category splits and which part is yours. →
Also sold in Data Security & Privacy (3 products) · Network Security & SASE (1 product).
Why “protect the data wherever it goes” is the whole story
Most buyers meet Fortra through one product. Fortra has bought and renamed a line thatfinds, labels and guards sensitive data from endpoint to cloud, filters the email and trains the people who handle it, and moves files between partners, with scanning, integrity monitoring and SSE beside it. That makes which pieces share one console, where each SaaS is hosted and which editions you can run yourself the three things to settle first.
Fortra Platform
Fortra calls it a cloud-native, multi-vector defence platform: Cloud Email Protection, Fortra VM, DLP, Data Classification, Brand Protection and Human Risk Management behind one login, with consolidated reporting and essential, advanced and elite pricing tiers.
Fortra Threat Brain
A multi-vector intelligence hub fed by telemetry from Fortra’s products, the dark web, social media, law enforcement and trusted partners. Fortra says it answers more than 113 million queries a month; treat that as the vendor’s own figure.
Data security, endpoint to cloud
DSPM discovers and classifies data at rest, Data Classification labels files as they are created, and DLP enforces on endpoint, network and cloud, reaching SaaS and private apps through Fortra CASB, ZTNA and SWG. The DLP link to classification is SDK-based.
Email and human risk, layered
Core joins Cloud Email Protection, Human Risk Management and Suspicious Email Analysis; Advanced adds DMARC Protection; Elite adds Domain Monitoring. Fortra prices by user mailboxes or message volume, and every product is also sold on its own.
Start with the risk you can measure in ninety days — data leaving, phishing clicks, spoofed domains or unpatched hosts — then pick the product that closes it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Product and Market Leader, 2026
Fortra Cloud Security Platform in the July 2026 Zero Trust Platforms Leadership Compass; not one of its Overall Leaders
Leader and Fast Mover, 2026
for Fortra DSPM, as Fortra reports it on its own recognition page
Major Player, 2025
in IDC’s Worldwide Data Loss Prevention 2025 Vendor Assessment; a Major Player, not a Leader
Cloud security gateway, Q3 2025
Fortra says it was named a Leader among the 13 vendors QKS Group assessed; QKS is a smaller analyst house
No current Magic Quadrant
not evaluated in the 2025 or 2026 SSE reports; the DLP and awareness-training reports its acquired brands appeared in were discontinued
GoAnywhere AS2 certified
Fortra announced that GoAnywhere MFT passed Drummond’s AS2 interoperability testing in the second quarter of 2026
Two GoAnywhere flaws in CISA KEV
CVE-2023-0669, added on 10 February 2023, and CVE-2025-10035, added on 29 September 2025; both are patched
Lookout Cloud Security acquired
bought on 12 May 2025, bringing the CASB, SWG and ZTNA line and the DSPM product to Fortra
The company in six figures
See the platform, hear the pitch
Meet Fortra.™
Fortra’s October 2023 brand film, a year after the rename: who the company is and what it protects, in under a minute.
Fortra Platform Paradigm
A March 2024 webinar on Fortra’s platform story of integrated products and shared intelligence, from before the 2025 Lookout purchase.
India's DPDP Act Webinar
Fortra’s December 2023 briefing on India’s Digital Personal Data Protection Act; it explains the law and makes no residency claim.
Where Fortra sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Fortra Across Its Solution Areas
Each dot is a Fortra solution area: competitive position vs category momentum.
Fortra’s deepest data line, on endpoint, network and cloud, as SaaS, managed or on-premises; IDC rated Fortra a Major Player in its 2025 DLP MarketScape.
Security Breadth × Ways to Keep Data in India
How many data- and email-security jobs one vendor’s products cover vs how many ways it offers to keep your data in India: self-hosted editions or a published India region.
Twelve products from data security to email, file transfer and SSE; self-hosted editions of six of them, but no published India region for any SaaS.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Fortra?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Who will own it?
3. What does success look like in 90 days?
Twelve products, three jobs
Fortra’s line splits into data protection, email and human risk, and security operations with file transfer. Pick the job, then the product.
Read →DSPM, classification or DLP?
DSPM finds exposed data at rest, classification labels files as they are made, and DLP stops data leaving. Most programmes start with one.
Read →API email defence or a gateway?
Cloud Email Protection connects to Microsoft 365 or Google by API; the Secure Email Gateway is software you host, which can keep mail in India.
Read →Two Fortra products called SWG
Fortra SWG is the cloud gateway in Cloud Security; Fortra Web Gateway is the on-premises one beside the email gateway. Check which a quote names.
Read →Patch GoAnywhere before exposing it
Two GoAnywhere licence-servlet flaws were exploited, in 2023 and 2025. Both are patched, but on a self-hosted server the upgrade window is yours.
Read →Where Fortra fits in Security
The Security category sets out the buying routes; Fortra sells five products into two of its guides, email security and vulnerability management.
Read →The acronym decoder
Every term on these pages, in one place- DLP
- Data loss prevention: spotting sensitive data in use or in motion and blocking it from leaving.
- DSPM
- Data security posture management: finding where sensitive data sits and who can reach it.
- Data classification
- Tagging files and emails with a sensitivity label that other security tools can read and act on.
- BEC
- Business email compromise: fraud by email that impersonates an executive, supplier or colleague.
- Secure email gateway
- A mail server in the delivery path that filters inbound mail and checks outbound mail against policy.
- Adaptive redaction
- Removing only the part of a message or file that breaks policy, so the rest can still be delivered.
- DMARC
- An email standard that tells receivers what to do with mail failing SPF and DKIM checks.
- Human risk management
- Measuring and lowering the risk staff create, through phishing tests, training and click data.
- MFT
- Managed file transfer: secure, automated and logged file exchange between systems and partners.
- CISA KEV
- The US Known Exploited Vulnerabilities catalogue: flaws confirmed as used in real attacks.
- File integrity monitoring
- Watching critical files and settings for change, and recording what changed, when and by whom.
- SSE
- Security service edge: cloud-delivered web gateway, CASB and zero-trust access in one service.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Start with one risk, not the platform
Twelve products share a login, but each is quoted on its own. Pick the risk you can measure in 90 days, buy that product, and add others once it proves itself.
Decide what you will host yourself
No Fortra SaaS publishes an India region. DLP, both classification suites, the email gateway, Fortra VM, Tripwire and GoAnywhere can run on your own servers.
Get the hosting region in writing
For each SaaS product, ask for the region, the sub-processor list (Fortra provides it on written request) and the retention terms, and record them in your DPDP register.
Ask which pieces share one console
DSPM and the SSE line came from Lookout in May 2025. Ask which products run in one console today, which agent you will deploy and what the roadmap changes.
Agree patch terms for exposed systems
GoAnywhere had exploited flaws in 2023 and 2025. For anything internet-facing, agree how advisories reach you, how fast you patch and who does it.
Get it priced in rupees
Nothing is list-priced. TechBag scopes what you need through Fortra’s Indian channel and gets the quote itemised in INR with GST, with term and renewal caps stated.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Fortra DLP | Quoted; no meter published, so ask whether it is per endpoint or per user | Quote | Endpoint-to-cloud DLP |
| Fortra DSPM | Quoted; no meter published; a 30-day data risk assessment is offered | Quote | Finding exposed data |
| Fortra Data Classification | Quoted per suite; no meter published | Quote | Labelling at creation |
| Cloud Email Protection | Quoted per user mailbox or message volume, alone or in bundles | Quote | BEC and impersonation |
| Secure Email Gateway | Quoted; no meter published; you host it | Quote | Self-hosted mail filtering |
| DMARC Protection | Quoted; alone or in the Advanced and Elite email bundles | Quote | Domain enforcement |
| Security Awareness Training | Quoted; cost varies with the services chosen; ask whether it is per user | Quote | Phishing simulation |
| Brand Protection | Quoted; takedown quota per contract not published | Quote | Takedowns |
| GoAnywhere MFT | Quoted per module or server instance; Secure Mail and GoDrive per user, AS2 per trading partner | Quote | Partner file exchange |
| Fortra VM | Quoted in tiers by number of active devices | Quote | Network scanning |
| Tripwire Enterprise | Quoted to your systems; ExpertOps in three managed tiers | Quote | Integrity and compliance |
| Cloud Security | Quoted per product: CASB, SWG and ZTNA each separately | Quote | SaaS and private-app access |
Fortra publishes no list price for any of its twelve products and no INR rate card; every product is quoted. Where Fortra names a meter it is shown above: mailboxes or message volume for email, active devices for Fortra VM, modules and server instances for GoAnywhere. A marketplace listing that shows one identical annual figure for every Fortra product is a private-offer placeholder, not a price. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Leaving GoAnywhere exposed and unpatched
Two licence-servlet flaws were exploited: CVE-2023-0669, in CISA’s KEV list from 10 February 2023, and CVE-2025-10035, from 29 September 2025. Both are patched; keep the admin console off the internet and patch as advisories land.
Quoting the wrong secure web gateway
Fortra sells two: Fortra SWG, the cloud gateway in Cloud Security, and Fortra Web Gateway, an on-premises product from the email gateway family. Fortra’s own catalogue card links the on-premises one, so check the quote names the product you tested.
Reading old analyst wins as current
Gartner discontinued the DLP and security-awareness reports that Fortra’s acquired brands once appeared in. Today’s placements are IDC DLP 2025 (Major Player), GigaOm DSPM 2026, as Fortra reports it, and KuppingerCole Zero Trust 2026.
Reading EU hosting as India hosting
Fortra added EU hosting for Cloud Email Protection in July 2026. No Fortra SaaS publishes an India region, so self-host where an on-premises edition exists, or record the region from the contract.
Expecting MDR from Fortra
Alert Logic’s managed detection, XDR and WAF services moved to LevelBlue in January 2026. Buy MDR from LevelBlue or another provider; the managed DLP service Fortra sells is run by its own analysts.
Expecting Indian rules out of the box
Tripwire Enterprise ships no RBI, SEBI or CERT-In policy packs, and DSPM documents no DPDP-shaped reporting. Budget for custom policies and reports before you promise them to an auditor.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are joining data discovery, labelling and DLP into one programme as AI tools multiply the places data can go — which is why Fortra added DSPM and a cloud security line to its DLP in 2025.
Data security converges
Fortra bought Lookout’s cloud security line in May 2025, joining DSPM, CASB, SWG and ZTNA to its DLP and classification products.
What it means for you
Ask which pieces share one console and one agent today.
GenAI as a data channel
Fortra says its DLP controls more than 150 GenAI tools, with prompt and upload controls on the endpoint agent.
What it means for you
List the AI tools staff use before you write DLP policy.
File transfer under attack
Two GoAnywhere flaws and MOVEit’s CVE-2023-34362 all entered CISA’s exploited list, each tied to ransomware.
What it means for you
Treat any MFT server as an internet-facing crown jewel.
Email authentication enforced
Fortra hosts DMARC, SPF and DKIM records and sells DMARC Protection alone or in its Advanced and Elite email bundles.
What it means for you
Get every sending domain to DMARC enforcement.
Questions buyers ask about Fortra
Ready to shortlist Fortra?
Open any of the twelve intel pages for the deep dive, or let a TechBag advisor build the case with you — which Fortra product to start with, the hosting or self-host route in writing, patch terms for anything internet-facing, and the quote that fits, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.