Kernel-level implementation that competitors can’t match, with deep visibility. It also includes built-in automatic data classification with no additional license required. Cross-platform support is strong as well (MacOS all versions, Linux endpoints including Red Hat, and the Windows Server family). The policy engine is flexible, and the application management feature works well with the DLP agent. Because of the classification capability, content doesn’t need to be checked again during data transfers, which helps maintain high performance. We can also easily benefit from up-to-date, dynamic lists (Feed List), and this helps us stand out in demos and POCs. Thanks to the local proxy, there’s no need to distribute extra add-ons or browser extensions. It also supports read/write capability with MIP. From a DLP perspective, the investment is worthwhile when classification labels are actively used to drive controls such as blocking, warning, encryption, quarantine, or audit-only actions. The overall value depends on how well the classification model is aligned with the organization’s DLP policies and how consistently users apply the labels. Review collected by and hosted on G2.com.

There is no API support in the on-premise setup. In content scanning, values such as TCKN and TR IBAN cannot be verified because of the algorithm. Regex is also flagged as a reason for false positives. Review collected by and hosted on G2.com.