Best Sensitive Data Discovery Software - Page 11

How Many Sensitive Data Discovery Software Products Does G2 Track?

Total Products under this Category: 189

Category Stats (Sep 2026)

  • Average Rating: 4.43/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: SailPoint (+1.11%) - Among all products in this category, SailPoint recorded the largest rating increase compared to last month

Last updated: September 26, 2026

How Does G2 Rank Sensitive Data Discovery Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,100+ Authentic Reviews
  • 189+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Sensitive Data Discovery Software

G2 Grid® for Sensitive Data Discovery Software plotting products by satisfaction and market presence

Highlighted products: IBM Guardium Data Protection, Varonis Data Security Platform, Securiti, Egnyte, Safetica, Satori Data Security Platform, Collibra, and Ground Labs Enterprise Recon.

Underlying data: [Grid® JSON](https://www.g2.com/categories/sensitive-data-discovery/grids.json?focus%5B%5D=ibm-guardium-data-protection&focus%5B%5D=varonis-data-security-platform&focus%5B%5D=securiti&focus%5B%5D=egnyte&focus%5B%5D=safetica&focus%5B%5D=satori-data-security-platform&focus%5B%5D=collibra&focus%5B%5D=ground-labs-enterprise-recon)

NetApp Data Classification

NetApp Data Classification is a cloud-based data-services tool that automatically discovers, categorizes, and analyzes data across on-prem and cloud environments. Using AI-driven classification and intuitive dashboards, it identifies sensitive information, highlights risk, and uncovers opportunities to optimize storage. It helps organizations improve governance, reduce exposure, and make smarter data-management decisions.

Who Is the Company Behind NetApp Data Classification?

  • Seller: NetApp
  • Year Founded: 1992
  • HQ Location: Sunnyvale, California
  • Twitter: @NetApp
    118,015 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    12,706 employees on LinkedIn®
  • Ownership: NASDAQ

Nextlabs CloudAz

At NextLabs, we empower intelligent enterprises by providing industry-leading zero trust security solutions to protect business-critical data and applications everywhere. While traditional methods focus primarily on securing the network perimeter, often critical data and applications are left exposed, vulnerable to both external breaches and internal misuse. By employing a zero trust, data-centric security strategy, we go beyond mere perimeter defense. We provide robust protection directly around your most vital data, ensuring its safety no matter where it resides or is shared. In doing so, we enable organizations to harness the power of advanced technology, drive decisions through data-centric analytics, and foster secure collaboration. At the core of NextLabs’ approach is our unified zero trust policy platform and dynamic authorization policy engine— areas in which we advance new innovations in data-centric security. We proudly hold over 90 patents along with 30 pending patents in both the United States and Europe that are designed to automate least privilege access and safeguard information sharing. In the policy platform, data governance, compliance, and security policies are digitized and stored as centrally managed, attribute-based policies. During access attempts, policy enforcer working with the policy engine employ the identity centric Attribute-Based Access Control (ABAC) method to protect data in real-time, evaluating and authorizing access based on user, device, resource and contextual attributes. With the centralized policy platform, organizations can easily manage security rules to control access and protect data anywhere, defining what data to protect, who can access what data, and what actions are permissible. Centralized policy management along with the enforcement of security policies, allowing organizations to safeguard data across diverse systems beyond network boundaries. Moving beyond manual and often siloed security controls, organizations will be able to unify the access control process and reduce the number of desperate policies to proactively prevent breaches before they happen. The policy platform includes a central activity log, making it easy to monitor, track, and report any risky access activities. This not only streamlines compliance reporting but also helps in strengthening security measures. NextLabs offers an extensive set of out-of-the-box policy enforcers to protect data in use, at rest, and in motion seamlessly for 100s of the leading enterprise applications and cloud services including ERP, PLM, CRM, ECM, DBMS, CAD, Big Data, BI, and many more. The comprehensive SDKs, REST APIs, and flexible application integration framework allow for rapid and no code integration with any applications, identity providers and attribute sources. As a result, companies can integrate their custom and third-party applications into NextLabs' policy platform and policy engine easily in addition to the commercial off-the-shelf (COTS) applications and cloud services.

Who Is the Company Behind Nextlabs CloudAz?

  • Seller: NextLabs
  • Year Founded: 2004
  • HQ Location: San Mateo, California, United States
  • Twitter: @nextlabs
    402 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    213 employees on LinkedIn®

Normalyze

Normalyze takes a data-first approach to security. Normalyze is the pioneer of Data Security Posture Management (DSPM), helping enterprises secure their data across SaaS, PaaS, public or multi-cloud, on-prem and hybrid environments. With Normalyze, security and data teams can improve their overall security and compliance efforts while empowering the business to leverage their most precious asset: data. The Normalyze DSPM platform helps to discover and classify data stores, prioritize what’s important, identify risky and excessive access, detect and remediate exposure risks, and improve compliance and auditing processes. At the heart of the Normalyze platform is the patented One-Pass Scanner, which leverages AI to accurately identify and classify valuable and sensitive data at scale, across different environments. The platform was designed around an architecture that scans in place, so data never leaves the location where it resides. This approach keeps data under IT control, supports compliance with stringent data protection regulations and enhances operational efficiency. Scanned results appear in multiple visualizations to help teams prioritize risk. The Data Risk Navigator shows attack paths that can lead to data breaches or loss. Data Access Graphs shows how people and resources access data. Visualizations are generated and updated in real time, providing visibility as changes to customer infrastructure or environments take place. The proprietary DataValuator assigns monetary value to data, with a ranking to help security and data teams assess the relative business impact of potential data loss. AI-powered querying and remediation workflows make the Normalyze user experience intuitive and efficient. Delivering insights into data, access, and risk in one place, IT teams can understand their overall data security posture, and collaborate on effective security measures and action plans.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Normalyze?

  • Ease of Use: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Normalyze?

  • Seller: Normalyze
  • Year Founded: 2020
  • HQ Location: Los Altos, US
  • Twitter: @normalyze_ai
    110 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    37 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Normalyze?

NOW Privacy (formerly Exonar Reveal)

Reveal the risk across your entire data estate. Discover and address exposure with a data discovery platform and workflows that meet your actual needs.

Who Is the Company Behind NOW Privacy (formerly Exonar Reveal)?

Nuix Neo Data Privacy

The Nuix Neo Data Privacy Solution is a comprehensive platform designed to help organizations manage and protect their sensitive data. It enables businesses to identify, organize, and safeguard confidential information, ensuring compliance with evolving data privacy regulations.

Who Is the Company Behind Nuix Neo Data Privacy?

  • Seller: Nuix
  • Year Founded: 2000
  • HQ Location: Sydney, AU
  • Twitter: @nuix
    5,293 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    492 employees on LinkedIn®
  • Ownership: ASX: NXL

Ohalo

Ohalo's Data X-Ray platform automates data governance tasks like discovering, mapping, and redacting files containing sensitive, and personal information. Our customers rely on it for file activity monitoring, security enhancement, and privacy compliance. Data X-Ray connects seamlessly to all data sources, on-premises or in the cloud, enabling a comprehensive understanding of files across all storage locations. Moreover, Ohalo possesses the flexibility to develop custom connectors for individual data sources, whether they are bespoke or legacy, upon request. Data X-Ray uses machine learning and natural language processing to uncover unknown or forgotten data, ensuring compliance with privacy and security regulations. It helps eliminate unnecessary records, reducing storage costs. Get Data X-Ray: One Platform, Universal Insight.

Average Rating: 3.9/5.0

Total Reviews: 5

How Do G2 Users Rate Ohalo?

  • Ease of Use: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Ohalo?

  • Seller: Ohalo
  • Year Founded: 2017
  • HQ Location: London, GB
  • Twitter: @ohalo_tech
    110 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    35 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Medium, 40% Small

What Do G2 Reviewers Say About Ohalo?

AI-generated summary from verified user reviews

Pros
  • Users find Ohalo’s Data Classification valuable for efficiently identifying and managing sensitive data across storage systems.
  • Users value the data protection capabilities of Ohalo, enabling effective scanning and management of sensitive information.
  • Users find Ohalo's platform to be easy to use, seamlessly allowing for data scanning and sensitive data management.
  • Users value the comprehensive data scanning and editing capabilities of Ohalo, ensuring compliance with privacy regulations.
  • Users appreciate the security features of Ohalo, effectively identifying and erasing sensitive data for compliance.
Cons
  • Users highlight the lack of historical documentation in Ohalo, making it hard to track data sensitivity fluctuations.
  • Users struggle with inadequate reporting, making it hard to assess data sensitivity changes and governance impacts over time.
  • Users express concerns about data inaccuracy due to the lack of historical documentation affecting data sensitivity analysis.
  • Users face challenges with reporting history on Ohalo, hindering assessment of data governance and security threats.
  • Users find data privacy issues concerning, as reporting history hampers tracking data governance and security threats.

What Are Recent G2 Reviews of Ohalo?

OneTrust Data & AI Governance

OneTrust Data & AI Governance is an integrated solution for setting data and AI policies, bringing together insights from your data, metadata, models, and risk assessments to provide full visibility into data products and AI development. Data Discovery allows you to understand the sensitive data you have and control its lifecycle. You'll have visibility into your data, where it is, and who has access to it is foundational to your business. You can automatically inventory and classify your data to enable responsible use across its entire lifecycle. Data Discovery allows you to: -Govern data for responsible use in analytics & AI -Orchestrate data policies for privacy and security -Improve data security posture management -Protect structured and unstructured data -Provide low cost of ownership for high ROI AI Governance gives you the ability to champion responsible AI adoption, whether you’re buying AI through third parties or building AI in-house. AI Governance empowers risk-based decisions. With AI Governance you'll be able to: -Understand your AI footprint -Mitigate third-party AI risk -Unlock AI-ready data -Govern AI/ML development To learn more, visit onetrust.com for more details.

Who Is the Company Behind OneTrust Data & AI Governance?

  • Seller: OneTrust
  • Year Founded: 2016
  • HQ Location: Atlanta, Georgia
  • Twitter: @OneTrust
    6,566 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,522 employees on LinkedIn®

OpenText Core Data Discovery & Risk Insights

OpenText™ Core Data Discovery & Risk Insights (Voltage) is a cloud-first data security platform designed to help organizations identify, classify, and protect sensitive and high-value data across both structured and unstructured repositories. By integrating data discovery, classification, and risk assessment with security measures, usage monitoring, and lifecycle management, it enables businesses to address data privacy and governance challenges effectively. Key Features and Functionality: - Unified Data Discovery: Detects regulated information, such as Personally Identifiable Information (PII), Payment Card Information (PCI), and Protected Health Information (PHI), across various data types, including rich media like images, audio, and video files. - Support for Over 35 Languages and Regions: Enables comprehensive analysis and classification of sensitive data in compliance with global industry, financial, and data privacy regulations. - Financial Impact Assessment: Connects data discovery and classification to potential monetary and business impacts, allowing organizations to prioritize risk reduction strategies effectively. - Format-Preserving Encryption and Tokenization: De-identifies data to render it useless to unauthorized users while maintaining its usability and referential integrity for business processes. - Unstructured Data Access Governance: Ensures that only authorized users with appropriate roles can access data, supporting change notifications, lifecycle management, security lockdowns, and security fencing. - Database Activity Monitoring: Actively monitors all database activities in real-time, generates alerts for policy violations, identifies passive databases, and increases observability of data usage. Primary Value and Problem Solved: OpenText™ Core Data Discovery & Risk Insights (Voltage) addresses the critical need for organizations to manage and protect sensitive data amidst increasing data sprawl and evolving privacy regulations. By providing comprehensive visibility into data assets, assessing financial risks associated with data breaches, and implementing robust protection measures, it enables businesses to reduce financial risk, ensure regulatory compliance, and support sustainable growth through secure data management practices.

Who Is the Company Behind OpenText Core Data Discovery & Risk Insights?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • Twitter: @OpenText
    21,565 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX

PII Crawler

PII Crawler scans your files, network shares, and databases on your own hardware. Surface the SSNs, addresses, names, and emails hiding where SaaS tools can’t reach. Nothing ever leaves your network.

Who Is the Company Behind PII Crawler?

PII Tools

PII Tools lets you discover, analyze and remediate personal and sensitive data at scale.

Who Is the Company Behind PII Tools?

PK Privacy

PK Privacy is a comprehensive data privacy solution designed to help organizations automate the discovery, protection, and management of personally identifiable information (PII across their enterprise. By integrating advanced data discovery and remediation capabilities, PK Privacy enables businesses to comply seamlessly with various data privacy regulations, such as GDPR, CCPA, HIPAA, and more. This solution ensures that sensitive data is identified and safeguarded, reducing organizational risks and operational complexities associated with privacy legislation. Key Features and Functionality: - Automated Data Discovery: Identifies sensitive data stored across file servers, databases, endpoints, and big data repositories, providing a comprehensive view of where PII resides within the organization. - Data Subject Access Request (DSAR Management: Automates the response process to DSARs, enabling organizations to meet regulatory requirements efficiently and cost-effectively. - Right to Be Forgotten Compliance: Allows the creation of rules to automatically erase, mask, or encrypt sensitive data upon discovery, ensuring adherence to data erasure requests. - Privacy-Enhancing Techniques: Supports pseudonymization, anonymization, and de-identification of personal data to protect individual privacy while maintaining data utility. - Retention Policy Enforcement: Scans datasets to identify data that should be archived or deleted based on age or lack of use, aiding in compliance with data retention policies. - Breach Detection and Response: Monitors endpoints, servers, and enterprise solutions to detect and confirm data breaches promptly, facilitating accurate impact assessment and reporting. Primary Value and Problem Solved: PK Privacy addresses the critical need for organizations to manage and protect sensitive personal data amidst an evolving regulatory landscape. By automating the discovery and remediation of PII, it reduces the operational burden associated with compliance, minimizes the risk of data breaches, and ensures that privacy obligations are met efficiently. This proactive approach not only safeguards individual privacy but also enhances organizational trust and reputation.

Average Rating: 4.8/5.0

Total Reviews: 2

How Do G2 Users Rate PK Privacy?

  • Ease of Use: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind PK Privacy?

  • Seller: PKWARE
  • Year Founded: 1986
  • HQ Location: Milwaukee, WI
  • Twitter: @PKWARE
    1,122 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    158 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of PK Privacy?

PK Protect Data Store Manager

Most organizations have a reasonable handle on what data lives on their endpoints. The real problem is everything else: the databases, data lakes, cloud repositories, packaged applications, and ERPs holding petabytes of sensitive data that nobody has fully mapped, let alone protected. That's the problem PK Protect Data Store Manager (DSM) was built to solve. DSM automatically discovers and protects sensitive data across your entire backend data infrastructure, structured, semi-structured, and unstructured, without requiring manual intervention or relying on individual teams to know where everything is. Once data is found, policy-driven protections are applied automatically: masking, tokenization, encryption, redaction, quarantine, or deletion. What it does: DSM scans and protects petabytes of data across on-premises, hybrid, and cloud environments. It supports the broadest range of platforms in the industry including Oracle, SQL Server, PostgreSQL, DB2, Hadoop, AWS, Azure, Snowflake, Salesforce, and more. It also surfaces shadow data, the untracked, forgotten data sitting in corners of your environment that traditional tools miss entirely. Who it's built for: Data security, compliance, and privacy teams in regulated industries managing large, distributed data environments who need consistent protection across every data store, not just the ones they already know about. Where it stands out: DSM keeps data usable while keeping it secure. That means masked data remains available for development, testing, AI training, and analytics without exposing the underlying sensitive values. More than thirty masking options give teams the flexibility to match protection to use case without breaking downstream workflows. Compliance support: DSM meets requirements for PCI DSS, HIPAA, GDPR, CCPA, GLBA, SOX, FISMA, and more, with automated policy enforcement and audit-ready reporting built in. One top U.S. bank relies on DSM to protect sensitive data across 400 applications and 18,000 databases containing nearly a million tables.

Who Is the Company Behind PK Protect Data Store Manager?

  • Seller: PKWARE
  • Year Founded: 1986
  • HQ Location: Milwaukee, WI
  • Twitter: @PKWARE
    1,122 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    158 employees on LinkedIn®

PK Protect For z/OS

IBM Z is the most secure computing platform on the planet. The problem is not what happens to your data on the mainframe. The problem is what happens when it leaves. When z/OS production data gets copied to development, test, cloud, or analytics environments, IBM's Pervasive Encryption no longer applies. That data is exposed. In most organizations it has been accumulating that way for decades, with no clear picture of what sensitive data exists, where it moved, or whether it is protected. PK Protect for z/OS closes that gap. As an IBM Partner Plus with four decades of mainframe expertise, PKWARE delivers the only solution purpose-built to discover and protect sensitive data on IBM Z, in motion and at rest, whether or not it stays on the mainframe. What it does: PK Protect for z/OS automatically discovers sensitive data across VSAM clusters, sequential, partitioned, and tape data sets using your own application data definitions and copybooks for maximum accuracy. The entire discovery process runs on the mainframe, with no copies left behind and sensitive data staying 100% on-premises. Persistent encryption travels with data as it moves out of z/OS, so protection holds regardless of where the data lands SchemaLink Technology: PK Protect for z/OS includes SchemaLink, which provides discovery support for z/OS datasets with or without copybooks. It is the only solution in the industry that delivers this level of flexibility for mainframe data structures, eliminating manual mapping and dramatically reducing discovery time. Who it's built for: Mainframe security, compliance, and modernization teams at large enterprises in financial services, insurance, government, and healthcare who need accurate visibility into decades of accumulated z/OS data and persistent protection that follows data beyond the mainframe. Compliance and modernization: Supports PCI DSS, HIPAA, GDPR, GLBA, and FISMA with automated reporting and SBOM generation to accelerate audits. Protects sensitive data throughout modernization initiatives as workloads migrate to cloud and hybrid environments. In one risk assessment, PK Protect scanned 504 million VSAM records and found that 88% contained vulnerable sensitive data.

Who Is the Company Behind PK Protect For z/OS?

  • Seller: PKWARE
  • Year Founded: 1986
  • HQ Location: Milwaukee, WI
  • Twitter: @PKWARE
    1,122 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    158 employees on LinkedIn®

PontusVision

Pontus Vision is a platform for data mapping and management of personal data. Only Open Source solution on the market. We solve data protection challenges in 3 modules: - Extract: Extract Structured Personal Data in Databases, CRM, ERP, and proprietary systems. Also works with unstructured data, such as, emails, PDFs, Word, and Excel. - Track: Maps all the data from the Extract module, identifying natural persons with as little data as possible, scalable to trillions of records. - Comply: Gathers links to all personal data within an organization, with graphical or textual reports, using a scoring system based on the ICO’s 12 steps to GDPR compliance.

Who Is the Company Behind PontusVision?

Preclusio Privacy Compliance Solution

Preclusio creates software that helps companies comply with privacy regulations like GDPR and the California Consumer Privacy Act.

Who Is the Company Behind Preclusio Privacy Compliance Solution?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024