Forcepoint

• Microsoft already enforces data loss prevention across cloud apps, email, devices and AI in Purview, so widening that coverage would remove the addition Forcepoint sells into Microsoft 365 accounts.
• Two independently found flaws in the endpoint client inside a year could push buyers to treat the enforcement agent as a risk of its own.
• The agent gateway and shadow-AI controls announced in July 2026 were scheduled to arrive over the following quarter, so a buyer choosing the AI platform now is partly buying a schedule.

Forcepoint sells to the security team that has to keep regulated information from leaving through web, email, cloud applications and now AI tools. The company publishes a compliance document for the EU DORA rules and a product-level HIPAA document, which is the shape of that buyer's obligation.

Forcepoint attributes two statements about that obligation to named executives. It says Enda Kyne at FBD Insurance credits the discovery and monitoring products with letting his teams report activity to regulators, and that Christian Keller at HUBER+SUHNER lists navigating global compliance requirements among the top benefits of Forcepoint NGFW.

The framing Forcepoint now leads with is new. It launched a platform it calls AI Data Security in July 2026 and said the agent gateway and shadow-AI controls would reach customers over the following quarter. [s1, s4, s5, s24]

Forcepoint sells one set of data controls and several places to apply them. Forcepoint DLP covers cloud, web and network channels, Forcepoint DSPM finds and classifies stored data, and Forcepoint DDR watches data activity for breach behavior. Web, cloud application, email, browser isolation and malware analysis products sit alongside them.

Forcepoint DSPM runs on what the company calls AI Mesh, which Forcepoint obtained by buying Getvisibility in April 2025, after more than two years of delivering those capabilities with it. Forcepoint describes it as its own approach to data discovery, classification and tagging, and says it deploys on-premises and in public or private clouds.

Forcepoint also sells network hardware. Forcepoint NGFW and Secure SD-WAN deliver firewall and wide-area-networking capability, and the three active NIST cryptographic-module validations Forcepoint holds cover firewall hardware and a firewall cryptographic kernel, the most recent validated on 20 May 2026. Forcepoint lists the outside assessments of its data products, a SOC 2 Type 2 report and an external penetration test for Cloud DLP, on its trust center. It takes access requests there for its ISO Statement of Applicability and its SOC 2 assessments. [s2, s11, s15, s16, s17, s19]

Forcepoint names its own rivals. It publishes comparison pages against Varonis and Cyera, and its DLP page offers to bolster Microsoft Purview across the Microsoft 365 family of applications.

That Purview line measures the position well. Microsoft enforces data loss prevention policies across cloud apps, email, devices and AI from the Purview portal, and Forcepoint's own page presents its coverage as an addition to Microsoft's rather than a replacement for it.

Forcepoint also sells network hardware that its data-security framing does not lead with. Forcepoint NGFW and Forcepoint Secure SD-WAN sit outside that framing, and the outside validation in the reviewed record covers the cryptographic modules inside Forcepoint NGFW. [s2, s16, s19, s27]

Forcepoint names its references. FBD Insurance and HUBER+SUHNER each appear with a named executive attached, and Liberty University, ERG and HDI Seguros appear as customer stories.

Outside reports of scale in the reviewed sources predate the split and relay the company's own figures. Cybersecurity Dive reported in July 2023 that Forcepoint said it had nearly 3,000 employees and served more than 14,000 customers across 150 countries. The company now states more than 12,000 customers and more than 1,400 employees.

The July 2026 platform went to market through Forcepoint's partner community, with the agent gateway and shadow-AI controls scheduled over the following quarter. No adoption figure for it appears in the reviewed sources, so a buyer cannot yet check how many customers run it. [s3, s4, s12, s24]

Forcepoint publishes its executive team. Ryan Windham is chief executive officer, Matt Derdeyn chief financial officer, Bakshi Kohli chief technology officer, Guy Shamilov chief information security officer and Juha Kivikoski general manager for network security.

Windham's background is in the domain and the record for it is the company's own. Forcepoint says he was chief executive at AppViewX and at Cedexis and held senior positions at Imperva, F5 Networks and Websense, and it promoted him from chief customer and strategy officer in July 2024, succeeding Manny Rivelo.

Francisco Partners has a partner on the board. Andrew Kowal, who spoke for the firm at the 2020 purchase announcement and again at the 2024 chief executive change, is listed among Forcepoint's directors. [s10, s18, s25]

Forcepoint runs a public trust center and records there what it holds. The portal lists ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, SOC 2 Type 2, CSA STAR Level 1 and FIPS 140-3, with separate SOC 2 Type 2 reports for Forcepoint ONE, Cloud DLP, Cloud DSPM and Cloud Web.

The FIPS claim is checkable outside the vendor. NIST's list of active validated modules carries three Forcepoint certificates, numbered 5276, 4867 and 4835, covering firewall hardware and a firewall cryptographic kernel.

The endpoint client has drawn outside scrutiny twice in a year, and both reports concern software Forcepoint runs on customer endpoints to enforce policy. Triskele Labs reported a privilege escalation flaw that Forcepoint fixed in version 25.05 in May 2025, and CERT/CC published a note in January 2026 about a Python 2.5.4 runtime bundled in the Forcepoint One DLP Client, which Forcepoint resolved by removing the runtime. [s15, s19, s21, s23]

Add analyzed competitors to compare them side by side with Forcepoint.

Forcepoint aims at the security team responsible for keeping regulated information inside the organization. It publishes a compliance document for the EU DORA rules and a product-level HIPAA document, and it says it serves 485 of the Forbes Global 2000.

The named references show the shape of that base. FBD Insurance, HUBER+SUHNER, Liberty University, ERG and HDI Seguros span insurance, manufacturing, education and energy.

The segment is narrower than it was. Until October 2023 Forcepoint also sold to defense, intelligence and critical national infrastructure through its Global Governments and Critical Infrastructure business, and TPG now owns that business under the Everfox name. Forcepoint still names government among the sectors it serves today.

The Forcepoint name is newer than the businesses behind it. A deal Raytheon and Websense announced in 2015 formed a new company combining Websense with Raytheon Cyber Products, and the brand was unveiled in 2016.

Forcepoint applies one set of data controls across several channels. Forcepoint DLP covers cloud, web and network, Forcepoint DSPM discovers and classifies stored data, Forcepoint DDR watches data activity, and web, cloud application, email, browser isolation and malware analysis products sit alongside them.

The AI work sits on top of that. Forcepoint launched a platform it calls AI Data Security in July 2026 and says it inspects prompts and AI-generated responses inline. It said the detection and response piece, with its connectors to ChatGPT Enterprise, Microsoft Copilot, Claude Enterprise and AWS Bedrock, the agent gateway and the shadow-AI controls, would arrive on a rolling basis over the following quarter.

Forcepoint bought the classification engine underneath. It acquired Getvisibility in April 2025 after more than two years of partnership, and it now describes the resulting AI Mesh as its own approach to discovery, classification and tagging, deployable on-premises and in public or private clouds.

Forcepoint names its customers and used its partner community for the launch. It brought the July 2026 AI platform to market through that community, with the agent gateway and shadow-AI controls scheduled over the following quarter, and it lets existing customers add those features to what they already run.

Independent reporting of scale in the reviewed sources predates the split. Cybersecurity Dive wrote in July 2023 that Forcepoint said it had nearly 3,000 employees and served more than 14,000 customers across 150 countries. Forcepoint now states more than 12,000 customers and more than 1,400 employees.

The analyst signal reaches a reader through the company. Forcepoint announced a Leader placement in the IDC MarketScape for Worldwide Data Loss Prevention in March 2025, and the reviewed sources carry that announcement rather than the assessment itself, so a buyer checking the placement starts with the vendor.

Forcepoint does not publish a price on its DLP product page. That page offers a Start Today link and a Request Pricing link, which puts the number behind a sales conversation.

The company describes the commercial benefit in operating terms instead. It says customers extending protection into AI on the platform they already run reduce data security policy management by up to 90 percent and see a 31 percent drop in operating costs, both figures of its own.

Forcepoint lets the buyer choose where the controls run. Forcepoint DLP deploys in the cloud as a service or on premises, Forcepoint DSPM deploys on-premises and in public or private clouds, and the July 2026 platform is delivered from the cloud or on-premises.

Both vulnerabilities in the reviewed record concern the endpoint client. Triskele Labs found that the EndPointClassifier.exe process tried to load an OpenSSL configuration file from a path that did not exist and that any authenticated user could create, and CERT/CC recorded that code execution in the DLP client could let an attacker bypass data loss prevention enforcement, alter client behavior or disable security monitoring.

Forcepoint fixed both. It released version 25.05 with an advisory on 22 May 2025, and it removed the bundled Python runtime from endpoint builds after version 23.11.

Forcepoint runs a public trust center and records what it holds there. The portal lists ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, SOC 2 Type 2, CSA STAR Level 1 and FIPS 140-3, with separate SOC 2 Type 2 reports for Forcepoint ONE, Cloud DLP, Cloud DSPM and Cloud Web, plus dynamic application security testing and external penetration test reports in its document inventory.

One of those claims is verifiable without the vendor. NIST lists three active Forcepoint certificates in its validated cryptographic module program, numbered 5276, 4867 and 4835, covering firewall hardware and a firewall cryptographic kernel.

Forcepoint offers access requests for its ISO Statement of Applicability and its SOC 2 assessments. No independently published audit report for the data security products appears in the reviewed sources, so a buyer has to ask Forcepoint for them.

Forcepoint builds around other vendors' platforms rather than asking buyers to leave them. Its DLP page offers to bolster Microsoft Purview across the Microsoft 365 family of applications, and it says connectors to ChatGPT Enterprise, Microsoft Copilot, Claude Enterprise and AWS Bedrock will arrive with the detection and response piece over the quarter after the July 2026 launch.

That choice cuts both ways. Microsoft enforces data loss prevention policies across cloud apps, email, devices and AI from the Purview portal, so the coverage Forcepoint sells there is an addition to a control the buyer may already own.

The network products stand apart from this pattern. Forcepoint NGFW and Forcepoint Secure SD-WAN sit outside the data-security framing, and the independently published technical validation in the reviewed record covers the cryptographic modules inside Forcepoint NGFW.

Forcepoint publishes its executive team and its board. Ryan Windham is chief executive officer, Matt Derdeyn chief financial officer, Bakshi Kohli chief technology officer and head of global engineering, Guy Shamilov chief information security officer and Juha Kivikoski general manager for network security.

Forcepoint promoted Windham from inside. It moved him up from chief customer and strategy officer in July 2024, succeeding Manny Rivelo, and says he was chief executive at AppViewX and at Cedexis and held senior positions at Imperva, F5 Networks and Websense.

Francisco Partners bought Forcepoint in 2021 and said in October 2023 that it continues to own the commercial business. Andrew Kowal, the Francisco Partners partner who spoke for the firm when it agreed to the purchase in October 2020 and again when Windham was promoted, is listed among Forcepoint's directors.