- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
Fortra DLP
A resigning engineer copies the design folder to a USB stick. Your DLP never saw it — Fortra DLP watches what people do with sensitive files on Windows, macOS and Linux, enforces policy on the network and in cloud apps, and can be run by Fortra’s own analysts — as SaaS, a managed service or on your own servers.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Fortra platform family
This page covers Fortra DLP — with Data Discovery and Fortra’s managed DLP service folded in. The rest:
Quick facts
30-second orientation- Product
- Data loss prevention across endpoints, network and cloud, with data discovery and analytics in one family
- Maker
- Fortra, LLC, Eden Prairie, Minnesota; privately held, backed by TA Associates and Harvest Partners
- Lineage
- Bought by Fortra in 2021, per press reports; the old brand’s website now redirects to Fortra’s DLP page
- Endpoint
- One agent family for Windows, macOS and Linux that logs, blocks or asks the user to justify an action
- Network
- A network DLP appliance that can allow, block, encrypt, reroute or quarantine traffic in line
- Delivery
- SaaS, a managed service run by Fortra’s own analysts, or on-premises software, at your choice
- Analysts
- IDC MarketScape for Worldwide DLP 2025 placed Fortra as a Major Player; Gartner’s DLP MQ ended in 2017
- Price
- Quote-only; Fortra publishes no list price and no metering unit for any DLP component
- India
- No India data region is published for the SaaS; the on-premises option keeps data in your own data centre
- In India via
- TechBag — channel scoping, an itemised quote in INR with GST, and a monitor-mode pilot
Understand data loss prevention before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is Fortra DLP?
Fortra DLP stops sensitive data leaving through laptops, the network and cloud apps, from one policy family.
A blanket USB block vs Fortra DLP — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | A blanket USB block | Fortra DLP |
|---|---|---|
| USB and print | Blanket USB block, endless exceptions | Per-file rules: log, block or ask for a reason |
| AI prompts | Nobody knows what goes into chatbots | Prompts and uploads to GenAI tools controlled |
| Linux desks | Outside the agent’s reach | One agent family on Windows, macOS and Linux |
| Network egress | Proxy logs read after the fact | Allow, block, encrypt, reroute or quarantine |
| Who runs it | One admin owns every alert | SaaS, on-premises or Fortra-managed |
| What it is NOT | — | An email gateway, a DSPM, or a published price |
The cheapest test is a monitor-only pilot on 50 endpoints for a month: read what actually leaves before you write a single blocking rule.
The four pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Endpoint Agent
Records file creation, copy and paste, printing, USB and application egress on Windows, macOS and Linux, then logs it, blocks it or asks the user for a reason.
Network DLP
Inspects traffic leaving the network and acts in line: allow, block, encrypt, reroute or quarantine. In the SaaS edition Fortra hosts this piece for you.
Console
One console for rules, alerts and reports across endpoint and network, with SAML sign-in through your IdP and SIEM forwarding; Fortra monitors it in SaaS.
Analytics
AWS-hosted analytics correlate system, user and data activity into dashboards and investigations, while Data Discovery scans endpoints, servers and databases.
Agents and the network appliance enforce, the console holds policy, and analytics run on AWS — the AWS regions behind the SaaS are not published.
Nine capabilities. Discover, control, investigate.
Fortra DLP stops sensitive data leaving through the laptop, the network and the cloud app — with an agent that reaches Linux too.
Find it on laptops and servers
Data Discovery scans endpoints, servers and databases for sensitive files, so policy is written against what you actually hold.
Uses the labels you already set
Reads tags from existing classification tools, Fortra Data Classification among them through an SDK, to add context and cut noise.
Patterns, rules and ML
Fortra lists pattern matching, compliance rules, machine learning and content analysis as the ways it recognises sensitive content.
Block, log or ask why
Watches copy and paste, printing, sharing, USB and app egress, then logs, blocks or demands a business justification before data moves.
Prompts and uploads to AI
Stops sensitive text pasted into AI prompts or files uploaded to AI services; Fortra says it covers more than 150 GenAI tools.
Policy on the wire
The network appliance allows, blocks, encrypts, reroutes or quarantines transfers that break policy as they cross your network edge.
SaaS through the SSE line
Cloud Data Protection enforces policy in SaaS and cloud apps through integrations with CASB, ZTNA and SWG from Fortra’s SSE products.
From alert to the user
AWS-hosted analytics correlate system, user and data activity, so an analyst can pivot from one alert to the person, file and channel.
Fortra’s analysts, if you want
The managed service puts Fortra’s own analysts on tuning, alert triage and reporting; Fortra pitches it as DLP and MDR from one team.
Watch Fortra explain its DLP
Three videos from Fortra’s official channel: a 2026 webinar on DLP with classification labels, a 2025 overview of its data protection line, and a 2026 one-minute short.
How DLP and DCS Deliver Smarter, Stronger Security
A 28-minute Fortra webinar on running DLP with Data Classification Suite labels, so policy acts on what users tagged.
Secure Sensitive Data with Confidence
A three-minute overview of Fortra’s data protection line: DLP, classification and insider-threat controls together.
The Hidden Data Risk Most Businesses Don’t See Coming
A one-minute short on the data risk most firms miss, framing Fortra’s case for endpoint-to-cloud protection.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Most DLP stops at Windows and Mac. Fortra DLP reaches the Linux desk too.
Here’s what genuinely sets it apart — and exactly where it stops.
Endpoint depth, Linux included
The agent is the heart of the product. It records file creation, copy and paste, printing, USB and application egress, then logs, blocks or asks for a reason. It runs on Windows, macOS and Linux, which matters to engineering and R&D teams whose source code lives on Linux desks other agents skip.
Three ways to run it
The same DLP is sold as SaaS, where Fortra monitors the console, reporting and cloud-hosted network DLP; as a managed service, where its own analysts tune policy and triage alerts; or on your own servers. A thin security team can hand over the daily work instead of hiring for it.
Endpoint to cloud in one family
Network DLP enforces in line, Data Discovery finds files at rest, and cloud apps are covered through CASB, ZTNA and SWG integrations with Fortra’s SSE line, which arrived with the Lookout Cloud Security purchase in May 2025. Labels from Fortra Data Classification feed policy through an SDK.
Where it stops
No list price or meter is published. IDC’s 2025 DLP MarketScape placed Fortra as a Major Player, not a Leader. No India region is published for the SaaS, and PAN, Aadhaar or GSTIN detectors are not documented. Plan a tuning period before blocking, and ask which cloud pieces share one console today.
The numbers behind the platform
What your Fortra DLP rollout looks like
Map data and channels
List what must not leave, PAN, Aadhaar and design files included, and the ways it leaves: USB, print, web and AI tools.
Pick the delivery model
Choose SaaS, Fortra-managed or on-premises, and get the hosting region for console and incident data in writing.
Agents in monitor mode
Put agents on a pilot group across Windows, macOS and Linux, and log everything for four weeks without blocking.
Tune, then block
Cut false positives, test Indian identifiers, then move the riskiest channels to block or to a user justification.
Roll out and contract
Extend to every endpoint, add network or cloud channels if needed, and settle the INR quote with GST through TechBag.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Our CAD and source files sit on Linux build machines. One agent family across Linux, Mac and Windows closed a gap we had for years.”
“Monitor mode first, blocking later. Ten weeks of tuning before we trusted the rules, but false positives are now rare on our side.”
“The managed option suits a lean team: Fortra’s analysts triage the alerts and we review a weekly summary with business heads.”
“Prompt controls caught staff pasting customer lists into chatbots in month one; the justification pop-up changed habits fast.”
“No India region for the SaaS console, so the regulator question went into the contract and we kept the network piece on-premises.”
“Labels from our classification tool cut the noise, though the quote took three rounds before modules and support were clear.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the data loss prevention market — tap any vendor to see why it sits where it does.
TechBag DLP Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; IDC 2025 Major Player; India region unstated.
Endpoint Depth × Delivery Choice
The grid nobody publishes — how deep the endpoint agent reaches (operating systems, device controls) vs how many ways you can run the product: SaaS, managed or on-premises.
Windows, macOS and Linux agent; SaaS, managed or on-prem.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Fortra DLP vs the enterprise DLP field
Against Forcepoint DLP, Symantec DLP, Trellix DLP Endpoint, Proofpoint DLP & Insider Risk and Safetica — on channels, agent, network, detection, insider risk, GenAI, price and India data.
| Dimension | Fortra DLP | Forcepoint DLP | Symantec DLP | Trellix DLP Endpoint | Proofpoint DLP & Insider Risk | Safetica Platform |
|---|---|---|---|---|---|---|
| What it is | Endpoint-first DLP suite | One policy, all channels | Classic enterprise suite | Endpoint DLP only | Human-centric DLP | DLP plus insider risk |
| Maker | Fortra, private equity | Francisco Partners | Broadcom, listed | STG-owned Trellix | Thoma Bravo-owned | Safetica, Prague |
| Deployment | SaaS, managed, on-prem | Cloud, on-prem, hybrid | Core on-prem, Cloud add | ePO on-prem or SaaS | SaaS | SaaS; on-prem SKU apart |
| Channels covered | Endpoint, network, cloud | Widest single set | Endpoint to cloud apps | Device channels | Email, cloud, endpoint | Six channels |
| Endpoint agent | Windows, macOS, Linux | Agent; confirm Linux | Agent inside DLP Core | Windows and macOS | User-mode agent | Windows and macOS |
| Network DLP | In-line appliance | Network channel | Network in DLP Core | Separate product | No appliance listed | Web via the agent |
| Detection method | Patterns, rules and ML | Big classifier library | EDM and fingerprints | Rules, visual labels | ML plus behaviour | Rules and Smart Tags |
| Insider-risk analytics | Some | Risk-Adaptive add-on | ICA analytics | None | Deep, through ITM | Built-in IRM |
| GenAI controls | 150+ GenAI tools | Listed; ask scope | Via DLP Cloud | Paste into AI chat | Ask how prompts work | 200+ GenAI tools |
| Pricing model | Quote, meter unstated | Per user, quoted | Partner quote | Per endpoint | Inside the suite | Per user, three tiers |
| Published entry price | Not published | Not published | Not published | Not published | Not published | From $72/user/yr |
| India data region | On-prem is the answer | Not documented | Core runs in India | On-prem ePO | India data centre | Not documented |
| Lock-in and exit | Policies to rebuild | One engine, deep ties | An estate to retire | ePO dependency | Suite entanglement | Light to replace |
| Best fit | Mixed-OS, lean teams | One policy everywhere | Self-hosted enterprises | Trellix ePO estates | Email-led insider risk | Mid-market, list price |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Fortra DLP if…
- ✓Sensitive work happens on Linux machines as well as Windows and Mac endpoints
- ✓You want the option of Fortra’s own analysts running policy and triage as a managed service
- ✓You also buy Fortra Data Classification and want its labels to drive DLP policy
Compare alternatives if…
- ✓You want a price before the first call — Safetica publishes tiers from $72 to $144 per user a year
- ✓Insider-risk scoring is the main need — Proofpoint ITM or Forcepoint Risk-Adaptive Protection go deeper
- ✓DLP data must sit in an Indian cloud — Proofpoint names DLP among its India data centre offerings
Do not expect…
- ✓A list price, a stated meter or a published India region for the SaaS
- ✓A current Gartner ranking — that DLP report ended in 2017; IDC’s 2025 MarketScape rates Fortra a Major Player
- ✓PAN, Aadhaar or GSTIN detection proven out of the box — test it on your own records
Fortra DLP is one of 21 dlp & insider risk products TechBag carries. The DLP & Insider Risk guide narrows them to a shortlist and shows the reasoning. →
What does DLP alert triage cost you?
Drag the sliders (endpoints in scope; analyst-hour cost). Estimates model the analyst time spent triaging DLP alerts and chasing false positives, at an assumed 0.4 hours per endpoint a year, with 50% of it removed by tuned policy and classification-aware rules. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote only. Fortra publishes no list price for any DLP component and no meter: its pages say ‘request pricing’ and promise ‘predictable pricing’ against free DLP tools, but do not say whether users, endpoints or modules are counted. The AWS Marketplace figure for Fortra products is a private-offer placeholder, not a price. TechBag scopes your channels and endpoints, then gets the quote itemised in INR with GST.
Fortra DLP (SaaS or on-prem)
Best when your team runs policy itself
- Quoted per scope; no public list
- Endpoint agent, network DLP, discovery
- Analytics & Reporting Cloud on AWS
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Fortra managed DLP
Best for lean teams that want it run for them
- Fortra’s analysts tune and triage
- Same agent and console underneath
- Ask what response times are committed
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
What is the licence counted by: user, endpoint or module? Which parts (network, discovery, analytics) are in the quote?
Where are the SaaS console, incident evidence and analytics stored? No India region is published; get it in writing.
Do detectors find PAN, Aadhaar and GSTIN out of the box? Test them against your own records during the pilot.
Which Linux distributions and kernel versions does the agent support today, and is its feature set equal to Windows?
Which cloud controls come from the ex-Lookout SSE line, and do they share one console and policy with the agent?
If Fortra runs it as a managed service, who tunes policy and triages alerts, and how fast are rule changes made?
How is outbound email covered: by the network appliance, by Fortra’s email gateway, or by a product you buy separately?
Fortra also sold Secure Collaboration (ex-Vera) for file rights; confirm it is still sold before planning around it.
Questions buyers ask
Ready to evaluate Fortra DLP?
List your sensitive data and the channels it leaves by, or let a TechBag advisor settle the meter, delivery model and hosting region with Fortra and get the quote itemised in INR.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.