Fortra
Fortra (formerly HelpSystems) sells cybersecurity for data protection, email and human risk, security operations and file transfer— DLP, DSPM and labelling, email defence, DMARC and awareness training, brand takedowns, GoAnywhere, scanning, Tripwire and SSE, and how each is sold. This hub covers twelve Fortra products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Twelve intel pages. Data, email, people, brand, file transfer and security operations.
Fortra’s line, product by product — every card is a full intel page, from Fortra DLP, DSPM and Data Classification to Cloud Email Protection, the Secure Email Gateway, DMARC Protection, Security Awareness Training and Brand Protection, then GoAnywhere MFT, Fortra VM, Tripwire Enterprise and Cloud Security. Fortra’s offensive-security and IT-operations tools are not covered.
Fortra DLP
Stops sensitive data leaving, on any channel.
An agent for Windows, macOS and Linux, a network appliance, data discovery and cloud analytics, as SaaS, managed or on-premises.
Fortra DSPM
Finds exposed data before an attacker does.
Discovers and classifies sensitive data across cloud, SaaS, file shares and databases, ranks the exposure and hands enforcement to DLP.
Fortra Data Classification
Labels data at creation, so policy can follow.
Two suites that tag email, Office files, CAD drawings and files at rest with persistent labels that DLP and mail gateways read.
Fortra Cloud Email Protection
Catches the impersonation a gateway lets through.
Connects by API to Microsoft 365, Exchange or Google Workspace, scores mail for BEC with ML and purges threats after delivery.
Fortra Secure Email Gateway
Redacts the risky part, sends the rest.
Runs on your hardware, VMware, Hyper-V, Azure or AWS, with deep content inspection, Adaptive Redaction and S/MIME or PGP encryption.
Fortra DMARC Protection
Your domains to p=reject, records hosted.
Fortra generates and hosts DMARC, SPF and DKIM records, tracks every third-party sender and reports spoofing aimed at your staff.
Fortra Security Awareness Training
Simulate the phish, then teach the clicker.
Phishing simulations and courses in a SCORM LMS, with a nanovideo lesson for anyone who clicks; also sold as Human Risk Management.
Fortra Brand Protection
Lookalikes, fakes and leaks, found and removed.
A managed service: analysts validate lookalike domains, phishing sites, fake social accounts and dark-web leaks, then file takedowns.
Fortra GoAnywhere MFT
Partner exchanges and batch jobs, one console.
SFTP, FTPS and AS2 with 60+ workflow tasks, self-hosted on Windows, Linux, UNIX or IBM i, or rented as Fortra-hosted MFTaaS.
Fortra Vulnerability Management
Finds and ranks the flaws an attacker would use.
An RNA appliance scans inside and Fortra’s scanners the perimeter; Threat Rank and an Active Risk score rank it all. SaaS or on-prem.
Fortra’s Tripwire Enterprise
Every change logged, every setting scored.
Baselines servers, network devices and databases, flags each change with who made it and scores settings against policy.
Fortra Cloud Security
Web, SaaS and private apps behind one proxy.
Fortra CASB, SWG and ZTNA on one agent, one proxy and one policy, from Lookout’s cloud security business, bought in May 2025.
Secure Collaboration
Platform & engineFile rights management (formerly Vera), on the Data Classification page; absent from Fortra’s October 2026 menu, so confirm it is still sold
Globalscape EFT
Platform & engineFortra’s second managed file transfer line, on-premises or as EFT Arcus in the cloud; quoted by module, covered on the GoAnywhere MFT page
Fortra Web Gateway
Platform & engineAn on-premises web gateway from the Secure Email Gateway family, not the cloud Fortra SWG. Covered on the Secure Email Gateway page
Fortra Platform and Threat Brain
Platform & engineFortra’s single-login platform and Threat Brain, the intelligence hub that feeds it: a layer over the products, not something bought alone
Alert Logic MDR
Platform & engineThe MDR, XDR and WAF services moved to LevelBlue in January 2026, so there is no MDR page here; Fortra’s own analysts still run managed DLP
IT operations lines
Platform & engineAutomate, the IBM i software and Intermapper are still sold but fall outside TechBag’s security categories, as do the offensive tools
Fortra sells 5 of the products TechBag carries in Security. The Security guide shows how the category splits and which part is yours. →
Also sold in Data Security & Privacy (3 products) · Network Security & SASE (1 product).
Why “protect the data wherever it goes” is the whole story
Most buyers meet Fortra through one product. Fortra has bought and renamed a line thatfinds, labels and guards sensitive data from endpoint to cloud, filters the email and trains the people who handle it, and moves files between partners, with scanning, integrity monitoring and SSE beside it. That makes which pieces share one console, where each SaaS is hosted and which editions you can run yourself the three things to settle first.
Fortra Platform
Cloud Email Protection, Fortra VM, DLP, Data Classification, Brand Protection and Human Risk Management behind one login, with essential, advanced and elite tiers.
Fortra Threat Brain
An intelligence hub fed by Fortra product telemetry, the dark web, social media, law enforcement and partners; Fortra’s own figure is 113 million+ queries a month.
Data security, endpoint to cloud
DSPM finds data at rest, Data Classification labels files at creation, and DLP enforces on endpoint, network and cloud, reaching SaaS via Fortra CASB, ZTNA and SWG.
Email and human risk, layered
Core: Cloud Email Protection, Human Risk Management, Suspicious Email Analysis. Advanced adds DMARC Protection, Elite Domain Monitoring. Priced by mailbox or message volume.
Start with the risk you can measure in ninety days — data leaving, phishing clicks, spoofed domains or unpatched hosts — then pick the product that closes it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Product and Market Leader, 2026
Fortra Cloud Security Platform in the July 2026 Zero Trust Platforms Leadership Compass; not one of its Overall Leaders
Leader and Fast Mover, 2026
for Fortra DSPM, as Fortra reports it on its own recognition page
Major Player, 2025
in IDC’s Worldwide Data Loss Prevention 2025 Vendor Assessment; a Major Player, not a Leader
Cloud security gateway, Q3 2025
Fortra says it was named a Leader among the 13 vendors QKS Group assessed; QKS is a smaller analyst house
No current Magic Quadrant
not evaluated in the 2025 or 2026 SSE reports; the DLP and awareness-training reports its acquired brands appeared in were discontinued
GoAnywhere AS2 certified
Fortra announced that GoAnywhere MFT passed Drummond’s AS2 interoperability testing in the second quarter of 2026
Two GoAnywhere flaws in CISA KEV
CVE-2023-0669, added on 10 February 2023, and CVE-2025-10035, added on 29 September 2025; both are patched
Lookout Cloud Security acquired
bought on 12 May 2025, bringing the CASB, SWG and ZTNA line and the DSPM product to Fortra
The company in six figures
See the platform, hear the pitch
Meet Fortra.™
Fortra’s October 2023 brand film, a year after the rename: who the company is and what it protects, in under a minute.
Fortra Platform Paradigm
A March 2024 webinar on Fortra’s platform story of integrated products and shared intelligence, from before the 2025 Lookout purchase.
India's DPDP Act Webinar
Fortra’s December 2023 briefing on India’s Digital Personal Data Protection Act; it explains the law and makes no residency claim.
Where Fortra sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Fortra Across Its Solution Areas
Each dot is a Fortra solution area: competitive position vs category momentum.
Fortra’s deepest data line, on endpoint, network and cloud; IDC rated it a Major Player in its 2025 DLP MarketScape.
Security Breadth × Ways to Keep Data in India
How many data- and email-security jobs one vendor’s products cover vs how many ways it offers to keep your data in India: self-hosted editions or a published India region.
Twelve products from data security to email, file transfer and SSE; six self-hostable, but no published India SaaS region.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Fortra?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Who will own it?
3. What does success look like in 90 days?
Twelve products, three jobs
Fortra’s line splits into data protection, email and human risk, and security operations with file transfer.
Read →DSPM, classification or DLP?
DSPM finds exposed data at rest, classification labels new files, DLP stops data leaving. Most start with one.
Read →API email defence or a gateway?
Cloud Email Protection uses the Microsoft 365 or Google API; the self-hosted Secure Email Gateway can keep mail in India.
Read →Two Fortra products called SWG
Fortra SWG is the cloud gateway; Fortra Web Gateway is the on-premises one. Check which a quote names.
Read →Patch GoAnywhere before exposing it
Two licence-servlet flaws were exploited, in 2023 and 2025. Both are patched; self-hosted, the upgrade window is yours.
Read →Where Fortra fits in Security
Fortra sells five products into two Security guides: email security and vulnerability management.
Read →The acronym decoder
Every term on these pages, in one place- DLP
- Data loss prevention: spotting sensitive data in use or in motion and blocking it from leaving.
- DSPM
- Data security posture management: finding where sensitive data sits and who can reach it.
- Data classification
- Tagging files and emails with a sensitivity label that other security tools can read and act on.
- BEC
- Business email compromise: fraud by email that impersonates an executive, supplier or colleague.
- Secure email gateway
- A mail server in the delivery path that filters inbound mail and checks outbound mail against policy.
- Adaptive redaction
- Removing only the part of a message or file that breaks policy, so the rest can still be delivered.
- DMARC
- An email standard that tells receivers what to do with mail failing SPF and DKIM checks.
- Human risk management
- Measuring and lowering the risk staff create, through phishing tests, training and click data.
- MFT
- Managed file transfer: secure, automated and logged file exchange between systems and partners.
- CISA KEV
- The US Known Exploited Vulnerabilities catalogue: flaws confirmed as used in real attacks.
- File integrity monitoring
- Watching critical files and settings for change, and recording what changed, when and by whom.
- SSE
- Security service edge: cloud-delivered web gateway, CASB and zero-trust access in one service.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Start with one risk, not the platform
Twelve products share a login, but each is quoted on its own. Pick the risk you can measure in 90 days, buy that product, and add others once it proves itself.
Decide what you will host yourself
No Fortra SaaS publishes an India region. DLP, both classification suites, the email gateway, Fortra VM, Tripwire and GoAnywhere can run on your own servers.
Get the hosting region in writing
For each SaaS product, get the region, the sub-processor list (on written request) and retention terms, and log them in your DPDP register.
Ask which pieces share one console
DSPM and the SSE line came from Lookout in May 2025. Ask which products run in one console today, which agent you will deploy and what the roadmap changes.
Agree patch terms for exposed systems
GoAnywhere had exploited flaws in 2023 and 2025. For anything internet-facing, agree how advisories reach you, how fast you patch and who does it.
Get it priced in rupees
Nothing is list-priced. TechBag scopes what you need through Fortra’s Indian channel and gets the quote itemised in INR with GST, with term and renewal caps stated.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Fortra DLP | Quoted; no meter published, so ask whether it is per endpoint or per user | Quote | Endpoint-to-cloud DLP |
| Fortra DSPM | Quoted; no meter published; a 30-day data risk assessment is offered | Quote | Finding exposed data |
| Fortra Data Classification | Quoted per suite; no meter published | Quote | Labelling at creation |
| Cloud Email Protection | Quoted per user mailbox or message volume, alone or in bundles | Quote | BEC and impersonation |
| Secure Email Gateway | Quoted; no meter published; you host it | Quote | Self-hosted mail filtering |
| DMARC Protection | Quoted; alone or in the Advanced and Elite email bundles | Quote | Domain enforcement |
| Security Awareness Training | Quoted; cost varies with the services chosen; ask whether it is per user | Quote | Phishing simulation |
| Brand Protection | Quoted; takedown quota per contract not published | Quote | Takedowns |
| GoAnywhere MFT | Quoted per module or server instance; Secure Mail and GoDrive per user, AS2 per trading partner | Quote | Partner file exchange |
| Fortra VM | Quoted in tiers by number of active devices | Quote | Network scanning |
| Tripwire Enterprise | Quoted to your systems; ExpertOps in three managed tiers | Quote | Integrity and compliance |
| Cloud Security | Quoted per product: CASB, SWG and ZTNA each separately | Quote | SaaS and private-app access |
Fortra publishes no list price for any of its twelve products and no INR rate card; every product is quoted. Where Fortra names a meter it is shown above: mailboxes or message volume for email, active devices for Fortra VM, modules and server instances for GoAnywhere. A marketplace listing that shows one identical annual figure for every Fortra product is a private-offer placeholder, not a price. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Leaving GoAnywhere exposed and unpatched
CVE-2023-0669 (in CISA’s KEV list from 10 February 2023) and CVE-2025-10035 (from 29 September 2025) were exploited. Both are patched; keep the console off the internet.
Quoting the wrong secure web gateway
Fortra SWG is the cloud gateway in Cloud Security; Fortra Web Gateway is on-premises. Fortra’s own catalogue links the latter, so check the quote names what you tested.
Reading old analyst wins as current
Gartner dropped the DLP and awareness reports Fortra’s brands appeared in. Current: IDC DLP 2025 (Major Player), GigaOm DSPM 2026 per Fortra, KuppingerCole Zero Trust 2026.
Reading EU hosting as India hosting
Fortra added EU hosting for Cloud Email Protection in July 2026. No Fortra SaaS publishes an India region, so self-host where an on-premises edition exists, or record the region from the contract.
Expecting MDR from Fortra
Alert Logic’s managed detection, XDR and WAF services moved to LevelBlue in January 2026. Buy MDR from LevelBlue or another provider; the managed DLP service Fortra sells is run by its own analysts.
Expecting Indian rules out of the box
Tripwire Enterprise ships no RBI, SEBI or CERT-In policy packs, and DSPM documents no DPDP-shaped reporting. Budget for custom policies and reports before you promise them to an auditor.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are joining data discovery, labelling and DLP into one programme as AI tools multiply the places data can go — which is why Fortra added DSPM and a cloud security line to its DLP in 2025.
Data security converges
Fortra bought Lookout’s cloud security line in May 2025, joining DSPM, CASB, SWG and ZTNA to its DLP and classification products.
What it means for you
Ask which pieces share one console and one agent today.
GenAI as a data channel
Fortra says its DLP controls more than 150 GenAI tools, with prompt and upload controls on the endpoint agent.
What it means for you
List the AI tools staff use before you write DLP policy.
File transfer under attack
Two GoAnywhere flaws and MOVEit’s CVE-2023-34362 all entered CISA’s exploited list, each tied to ransomware.
What it means for you
Treat any MFT server as an internet-facing crown jewel.
Email authentication enforced
Fortra hosts DMARC, SPF and DKIM records and sells DMARC Protection alone or in its Advanced and Elite email bundles.
What it means for you
Get every sending domain to DMARC enforcement.
Questions buyers ask about Fortra
Ready to shortlist Fortra?
Open any of the twelve intel pages for the deep dive, or let a TechBag advisor build the case with you — which Fortra product to start with, the hosting or self-host route in writing, patch terms for anything internet-facing, and the quote that fits, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.