License & Deployment Mix: 15 tools – 1 OSS, 9 SaaS. (OSS and SaaS counts can overlap when an open-source tool also offers a vendor-hosted edition.)
Overview
Data Loss Prevention (DLP) is the practice of detecting, monitoring, and preventing the unauthorised transmission of sensitive data outside the organisation. DLP systems inspect data in motion (network traffic, email, web uploads), data at rest (file servers, databases, cloud storage), and data in use (endpoint clipboard, screen capture, USB drives) to enforce policies that protect confidential information.
DLP platforms provide:
- Content inspection – deep content analysis using regex, keywords, data fingerprinting, exact data matching, OCR, and machine learning to identify sensitive data (credit card numbers, SSNs, PII, PHI, intellectual property, source code, financial records)
- Policy enforcement – rules that define what data is sensitive, who can access it, and what actions are allowed (block, encrypt, quarantine, alert, log); policies by user, group, department, or data classification
- Network DLP – inspect email (SMTP), web traffic (HTTP/HTTPS via proxy), file transfers (FTP, SMB), and cloud app usage (CASB) for sensitive data leaving the network
- Endpoint DLP – monitor and control data on endpoints: USB device blocking, clipboard control, print blocking, screen capture prevention, application-level data access controls
- Cloud DLP – inspect data in SaaS applications (M365, Google Workspace, Slack, Salesforce) and cloud storage (S3, Azure Blob, GCS) for policy violations; often delivered as a CASB component
- Data classification – label data with sensitivity levels (public, internal, confidential, restricted); manual labels, automated classification, or user-prompted classification
- Incident management – workflow for reviewing DLP policy violations; false positive tuning; manager notification; compliance reporting
- Regulatory compliance – pre-built policies for PCI-DSS (credit cards), HIPAA (healthcare), GDPR (EU personal data), SOX (financial), GLBA (banking), FERPA (education)
The information on these pages was researched by a combination of human review and large language models. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. Use this catalogue only as a starting point for your own research, and review any tool carefully against your own requirements before relying on it. Catalogue data version 2026.197.
Comparison
Deployment Model
| Tool | Self-Hosted | SaaS | License |
|---|---|---|---|
| OpenDLP | Yes | No | GPL-2.0 |
| Forcepoint DLP | Yes | Yes | Proprietary |
| Symantec DLP | Yes | Yes | Proprietary |
| Digital Guardian | Yes | Yes | Proprietary |
| Trellix DLP | Yes | Yes | Proprietary |
| Purview DLP | No | Yes | Proprietary (M365) |
| Google Cloud DLP | No | Yes | Proprietary |
| Nightfall AI | No | Yes | Proprietary |
| Netskope DLP | No | Yes | Proprietary |
| Endpoint Protector | Yes | Yes | Proprietary |
| Safetica | Yes | Yes | Proprietary |
| Teramind | Yes | Yes | Proprietary |
| CrowdStrike DLP | No | Yes | Proprietary |
| Proofpoint DLP | No | Yes | Proprietary |
| Zscaler DLP | No | Yes | Proprietary |
Channel Coverage
| Tool | Web | Cloud Apps | USB | Clipboard | ||
|---|---|---|---|---|---|---|
| Forcepoint | Yes | Yes | Yes | Yes | Yes | Yes |
| Symantec | Yes | Yes | Yes | Yes | Yes | Yes |
| Digital Guardian | Yes | Yes | Yes | Yes | Yes | Yes |
| Trellix | Yes | Yes | Yes | Yes | Yes | Yes |
| Purview | Yes | Yes | Yes (M365) | Yes | Yes | Yes |
| Google DLP | No | No | Yes (GCP) | No | No | No |
| Nightfall | No | No | Yes (SaaS) | No | No | No |
| Netskope | Yes | Yes | Yes | No | No | No |
| Endpoint Protector | Yes | Yes | No | Yes | Yes | Yes |
| Safetica | Yes | Yes | No | Yes | Yes | Yes |
| Teramind | Yes | Yes | No | Yes | Yes | Yes |
| CrowdStrike | No | Yes | Yes | Yes | No | Yes |
| Zscaler | Yes | Yes | Yes | No | No | No |
Detection Methods
| Tool | Regex | Keywords | Fingerprinting | EDM | OCR | ML/AI |
|---|---|---|---|---|---|---|
| Forcepoint | Yes | Yes | Yes | Yes | Yes | Yes |
| Symantec | Yes | Yes | Yes | Yes | Yes | Yes |
| Digital Guardian | Yes | Yes | Yes | Yes | Yes | Yes |
| Purview | Yes | Yes | Yes | Yes | No | Yes |
| Google DLP | Yes | Yes | No | No | Yes | Yes |
| Nightfall | Yes | Yes | No | No | Yes | Yes |
| Endpoint Protector | Yes | Yes | Yes | No | Yes | No |
| Safetica | Yes | Yes | No | No | No | No |
EDM = Exact Data Matching (fingerprint of actual sensitive records, not just patterns)
Regulatory Templates
| Tool | PCI-DSS | HIPAA | GDPR | SOX | CCPA |
|---|---|---|---|---|---|
| Forcepoint | Yes | Yes | Yes | Yes | Yes |
| Symantec | Yes | Yes | Yes | Yes | Yes |
| Purview | Yes | Yes | Yes | Yes | Yes |
| Google DLP | Yes | Yes | Yes | No | Yes |
| Nightfall | Yes | Yes | Yes | No | Yes |
| Endpoint Protector | Yes | Yes | Yes | No | Yes |
| Safetica | Yes | Yes | Yes | No | No |
SSO / Authentik Integration
| Tool | OIDC | SAML | SCIM | Notes |
|---|---|---|---|---|
| Forcepoint | No | Yes | No | SAML SSO for console |
| Symantec | No | No | No | AD integration only |
| Purview | Yes | Yes | Yes | Entra ID native |
| Nightfall | Yes | Yes | Yes | OIDC/SAML + SCIM |
| Netskope | Yes | Yes | Yes | OIDC/SAML + SCIM |
| Endpoint Protector | No | No | No | AD/LDAP only |
| CrowdStrike | No | Yes | Yes | SAML + SCIM |
| Zscaler | No | Yes | Yes | SAML + SCIM |
Tools
15 tools.
CrowdStrike Falcon Data Protection
CrowdStrike Falcon Data Protection (formerly Falcon Device Control with expanded DLP capability) is the data loss prevention module within the CrowdStrike Falcon platform.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
Digital Guardian
Digital Guardian (formerly Verdasys) is a data-centric endpoint DLP platform that focuses on protecting sensitive data through deep endpoint visibility and control.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Endpoint Protector
Endpoint Protector by CoSoSys (acquired by Netwrix in 2024) is a cross-platform endpoint DLP solution that provides device control, content-aware data protection, eDiscovery, and enforced encryption for removable media.
License: Proprietary (proprietary) · Kind: web · Deploy: native, appliance · SSO: none
Forcepoint DLP
Forcepoint DLP is a comprehensive enterprise data loss prevention platform that covers network, endpoint, cloud, and email channels from a unified policy engine.
License: Proprietary (proprietary) · Kind: web · Deploy: native, saas · SSO: none
Google Cloud DLP
Google Cloud DLP (officially renamed “Sensitive Data Protection” in 2023, but widely still called Cloud DLP) is an API-based data inspection and classification service that identifies, classifies, and de-identifies sensitive data.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
Microsoft Purview DLP
Microsoft Purview DLP (formerly Microsoft 365 DLP and Microsoft Information Protection) is the cloud-native data loss prevention solution built into the Microsoft 365 ecosystem.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none
Netskope DLP
Netskope DLP is the data loss prevention engine embedded within the Netskope Intelligent SSE (Security Service Edge) platform, which provides Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), a…
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
Nightfall AI
Nightfall AI is a cloud-native data loss prevention platform purpose-built for protecting sensitive data in SaaS applications, cloud infrastructure, and AI/LLM pipelines.
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
OpenDLP
OpenDLP is an open-source, agent-based data loss prevention tool designed for data-at-rest discovery across Windows systems, databases, and file shares.
License: GPL-2.0-only (OSS) · Kind: web · Deploy: native · SSO: none
Proofpoint DLP
Proofpoint DLP is the data loss prevention component of Proofpoint’s broader email security and information protection platform.
License: Proprietary (proprietary) · Kind: web · Deploy: native, saas · SSO: none
Safetica
Safetica is a European endpoint DLP solution (headquartered in Prague, Czech Republic) designed for small and mid-size businesses that need data loss prevention without the complexity and cost of enterprise-grade platforms.
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
Symantec DLP / Broadcom
Symantec DLP, now under Broadcom’s ownership, is one of the longest-standing and most comprehensive enterprise data loss prevention platforms.
License: Proprietary (proprietary) · Kind: web · Deploy: native, saas · SSO: none
Teramind
Teramind is a user activity monitoring (UAM) and data loss prevention platform that combines employee monitoring, insider threat detection, and DLP capabilities in a single product.
License: Proprietary (proprietary) · Kind: web · Deploy: native, saas · SSO: OIDC
Trellix DLP
Trellix DLP is the successor to McAfee Enterprise DLP, formed after the 2022 merger of McAfee Enterprise and FireEye into Trellix (backed by Symphony Technology Group).
License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none
Zscaler DLP
Zscaler DLP is the data loss prevention engine integrated into the Zscaler Zero Trust Exchange, a cloud-native security platform that provides Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA),…
License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC
