- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
SafeSquid
A secure web gateway you install on your own servers, VMs or cloud instance— SafeSquid’s HTTPS-inspecting proxy, built in India, and how its free and commercial licences differ. This hub covers one SafeSquid product.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
One intel page. Self-hosted secure web gateway and HTTPS-inspecting proxy.
SafeSquid sells a single product — the linked card is a full intel page on SafeSquid SWG, and the cloud-instance option, customised gateways, reporting, browser isolation, DNS security and the roaming add-on are listed below it.
In-Cloud Secure Web Gateway
Platform & engineNot a hosted service: the same SafeSquid software imported as a cloud image into your own AWS, Azure, Google Cloud or DigitalOcean account, with users reaching it over a WireGuard VPN. It is a deployment option of SafeSquid SWG, so it is covered on that page
Customized Secure Web Gateway
Platform & engineA services offering for large enterprises, built on the standard platform. SafeSquid’s homepage counts 55+ such gateways set up; there is no separate SKU or price, so TechBag treats it as a project, not a product
Reporting Service, Log Aggregator and Web SIEM
Platform & engineThe reporting side of the gateway: Log Aggregator is a premium feature on the commercial subscription, and logs are kept 30 days locally by default unless forwarded to syslog, a SIEM or object storage. Covered on the SWG page
Remote browser isolation and DNS security
Platform & engineBrowser isolation is documented as a component of SafeSquid’s application ecosystem, with no SKU or price. DNS security (blocklists, homograph and tunnelling checks) runs inside the proxy and its bundled BIND, not as a hosted resolver
Roaming (Windows Laptop) add-on
Platform & engineA paid premium feature that brings Windows laptops back to your gateway over a VPN when they leave the office. It is tunnel-back, not a cloud agent, and SafeSquid documents it for Windows laptops only
SafeSquid sells 1 of the products TechBag carries in network security & SASE. The Network Security & SASE guide shows how the category splits and which part is yours. →
Why “on servers you own” is the whole story
Most web gateways now inspect traffic in the vendor’s cloud. SafeSquid does the opposite:the proxy, its policy and its logs run on hardware or cloud instances you control, which suits offices told to route internet access through their own proxy. The trade is that you size, patch and run it yourself, and remote users come back over a VPN.
SafeSquid Appliance Builder
An ISO that turns any x86_64 server or VM into a Linux appliance; the homepage says a standard setup takes under 20 minutes.
Cloud image and tarball
A disk image for your own AWS, Azure, Google Cloud or DigitalOcean account, or a tarball for an existing Linux host with kernel 6.8.
Self-Service Portal
key.safesquid.com issues activation keys and holds custom categories, VPN client config and policy backup; its hosting is not documented.
Clustered proxies
Gateways run active-active or active-standby, keeping policy, categories and certificates in sync, with ICAP, SNMP and REST hooks.
Pilot it on the free licence first — then choose a licence basis and only the add-ons you will switch on.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Incorporated 14 September 2004
as Office Efficiencies (INDIA) Private Limited in Maharashtra, the company SafeSquid Labs belongs to
On the market since at least 2007
a 2007 vulnerability entry names SafeSquid 4.1.x, fixed in 4.2.0; it remains the only CVE on record
Formerly Seqrite’s OEM web gateway
Seqrite Secure Web Gateway was powered by SafeSquid; Seqrite’s catalogue no longer lists a web gateway
New build shipped 4 September 2026
one of several 2026 releases, after a March move to OpenSSL 3.5+ for post-quantum TLS work
1000+ installations, by its own count
a homepage claim made next to 20 million+ users secured; SafeSquid names no customer
No analyst coverage found
TechBag found no analyst report on SafeSquid, so a pilot on your own traffic is the test
The company in six figures
See the platform, hear the pitch
Zero-Trust defense for Zero-Hour web threats, like Phishing, Malware, Cross-Site, and Data Theft
An August 2025 session that simulates phishing, CSRF, malware reassembly and DNS tunnelling against the gateway.
SafeSquid Secure Web Gateway
A short January 2015 introduction to SafeSquid as an HTTP/1.1 filtering proxy; it shows an older interface.
DEMYSTIFYING THE SECURE INTERNET GATEWAY SCALING MYTHS!
An April 2014 talk on sizing and scaling a web gateway, recorded on a much earlier release.
Where SafeSquid sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
SafeSquid Across Its Solution Areas
Each dot is a SafeSquid solution area: competitive position vs category momentum.
The core: TLS 1.0 to 1.3 interception with bypass rules, explicit, transparent, reverse and chained modes, now on OpenSSL 3.5+.
Self-Hosted Control × Cloud Reach
How much of the gateway runs on infrastructure you own vs how far the vendor’s own cloud and agents reach users off the network.
Runs only on servers or cloud instances you own, with no PoPs of its own; remote Windows laptops come back over a VPN add-on.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with SafeSquid?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where must it run?
3. Who will own it?
One gateway, your servers
SafeSquid sells a single product, a proxy you install yourself; the cloud option is still your own instance, not a SafeSquid service.
Read →Free licence or commercial?
The free licence never expires but has no URL category database or live threat feeds, so category rules do nothing until you subscribe.
Read →How many cores per user
A 4-core, 8 GB server handles about 400 concurrent connections in the vendor’s guide; 8,000 calls for 64 cores and 128 GB.
Read →Seqrite no longer sells it
Seqrite’s 2018 web gateway was SafeSquid under another name. That edition is discontinued, so do not treat Seqrite as a sales channel today.
Read →Logs, India and CERT-In
Logs stay on your own disks, in India if you put the servers there, but local retention defaults to 30 days; CERT-In expects 180.
Read →Where SafeSquid fits
The Network Security & SASE category’s Secure Web & DNS guide sets self-hosted proxies like SafeSquid beside cloud gateways and protective-DNS services.
Read →The acronym decoder
Every term on these pages, in one place- SWG
- Secure web gateway: the proxy between users and the web that enforces browsing policy.
- Forward proxy
- A server that fetches web pages on behalf of the users behind it.
- Transparent proxy
- A proxy that intercepts traffic without any browser setting on the device.
- TLS interception
- Decrypting HTTPS at the proxy, inspecting it, then re-encrypting it.
- ICAP
- A protocol a proxy uses to hand content to an outside scanner, such as antivirus.
- WCCP
- A router protocol that redirects web traffic to a proxy; a paid SafeSquid add-on.
- PAC file
- A script that tells a browser which proxy to use for which address.
- DNSBL
- A DNS blocklist: domains refused because they are known to be malicious.
- Homograph attack
- A lookalike domain that swaps in characters from another alphabet.
- DLP
- Data loss prevention: stopping sensitive data leaving in uploads and posts.
- Activation key
- The code from SafeSquid’s portal that ties a gateway to its licence.
- SAB
- SafeSquid Appliance Builder: the ISO that installs the gateway as an appliance.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Pilot on the free licence
Install the appliance ISO with a free activation key and test inspection and policy on real traffic. Remember category rules will not work yet.
Pick the licence basis
The commercial plan is counted in named users, concurrent connections or CPU hours. Pick the one that matches how your estate actually grows.
Choose the premium add-ons
DLP, roaming Windows laptops, Log Aggregator and WCCP are each paid on top of the base subscription; leave out the ones you will not switch on.
Size and cluster the servers
Use the vendor sizing guide (1,500 connections on 8 cores and 16 GB) and plan an active-standby pair so one failure does not stop browsing.
Plan logs for 180 days
Local retention defaults to 30 days. Forward logs to your SIEM or object storage, or add disk, before you count on meeting CERT-In.
Get it priced in rupees
SafeSquid no longer publishes prices and takes PayPal or wire payment. TechBag scopes the licence basis and add-ons and quotes in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| SafeSquid SWG · free licence | No time limit · core proxy, HTTPS inspection and custom policy · no URL categories or live threat feeds | Free | Pilots and testing |
| SafeSquid SWG · commercial | Annual subscription by named users, concurrent connections or CPU hours · adds categories, threat feeds, 365-day cloud backup and email support | Quote on request | Production gateways |
| Premium features | Paid on top of the commercial plan · DLP, Roaming (Windows Laptop), Log Aggregator, WCCP | Quote on request | Data control and remote laptops |
| Customized gateway | A services project on the standard platform for large enterprises · no SKU | Quote on request | Bespoke enterprise builds |
SafeSquid publishes no current prices: a free licence with no time limit covers the proxy and HTTPS inspection, and the annual commercial subscription (named users, concurrent connections or CPU hours, plus paid add-ons) is quoted. An archived August 2024 price page put it under US$9 per user per year. TechBag gets the quote in INR with GST.
Five pitfalls that cost buyers quarters
Running production on the free licence
It never expires, but without the URL category database every category rule matches nothing, and threat feeds are not live.
Quoting the old price list
The under-US$9-a-user figure comes from a page archived in August 2024. SafeSquid has withdrawn it; ask for a current quote.
Expecting a cloud service
The in-cloud option is SafeSquid on your own cloud instance. You patch and size it, and SafeSquid runs no points of presence.
Keeping the default password
The cloud image ships with a known administrator login. SafeSquid’s docs say to change it at first sign-in, so do it before going live.
Upgrading on an old Linux base
Since release 2025.1001 the gateway needs kernel 6.8 and glibc 2.39, so older installs must move their operating system first.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: most new web-security spend is going to cloud SSE and zero trust access — so a self-hosted gateway like SafeSquid earns its place where rules or policy require the proxy and its logs on your own infrastructure.
Proxies back in the rulebook
CERT-In’s guidelines for government bodies say internet access should pass through a proxy, which keeps self-hosted gateways on Indian shortlists.
What it means for you
Check whether your sector’s rules name a proxy before you pick a cloud-only gateway.
Post-quantum TLS
SafeSquid moved to OpenSSL 3.5+ in March 2026, citing post-quantum security work in its changelog.
What it means for you
Ask every gateway vendor which TLS library it ships and when it updates.
DLP reading images
SafeSquid’s DLP runs regex searches inside Office files and, in a March 2026 beta, OCR on images.
What it means for you
Test DLP with screenshots and scanned files, not only plain text.
Self-hosting in the cloud
SafeSquid documents running its gateway on your own AWS, Azure or Google Cloud instance, reached over WireGuard.
What it means for you
A cloud VM is still yours to patch; budget the admin time.
Questions buyers ask about SafeSquid
Ready to shortlist SafeSquid?
Open the intel page for the deep dive, or let a TechBag advisor build the case with you — the servers to size, the licence basis and add-ons, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.