Data Security
6 DLP Tools for Data Loss Prevention in 2026
Decide the channel before you buy another catalog. A classifier that never sits on Slack will not stop a PAN paste.
Expertise: Data Security · Level: Intermediate · 6 min read
A Snowflake inventory can be complete and a PAN still lands in Slack. PCI DSS v4.0 Requirement 3 is protect stored account data. Requirement 4 is protect cardholder data with strong cryptography during transmission over open, public networks. Chat is a channel you own. A warehouse map is not that channel.
DLP is a classifier or a gate on the path where the PAN actually left: the paste, the git push, the outbound mail. Discovery of forgotten stores will not stop that leave.
In-process NER you call, SaaS DLP on chat and git, and estate agents sit on different paths. Forgotten stores stay on DSPM tools. Buy the gate that inspects the channel.
How we evaluated
We read first-party docs, source, licenses, and release notes, and we treat a marketing page as a claim, not as proof that two products do the same work.
We grouped by architecture: in-app classifier, cloud-native DLP, SaaS channel DLP, and enterprise agent. We also asked whether you operate it, and whether a known test string in a repo you own would get a ticket.
We read first-party docs, licenses, and release notes. Unless a write-up says otherwise, we did not run a paid tenant.
| Tool | Best for | What to check |
|---|---|---|
| Microsoft Presidio | Open NER you can run on text you already hold | Open NER · MIT · you bring the text |
| Google Sensitive Data Protection | Inspection jobs on GCP stores you already pay for | InfoTypes · Google Cloud terms · same GCP project |
| Microsoft Purview DLP | DLP on the Microsoft estate you already bought | M365 locations · Microsoft terms · same tenant |
| Nightfall | SaaS DLP on SaaS and code you already use | SaaS connectors · commercial · tickets they sell |
| Forcepoint DLP | Known enterprise channel DLP | Channel coverage · commercial · enterprise agents |
| Symantec DLP | Broadcom enterprise DLP you may already own | Endpoint and network · commercial · Broadcom estate |
Microsoft Presidio
Best for open NER you can run on text you already hold
Presidio detects and can anonymize PII in text you pass it. You host the pipeline. It is not a network tap.
A function in your app beats a five-year DLP RFP while you wait, so this is the open classifier. You tune recognizers. English-heavy defaults. Not email gateway magic.
Key features
- PII recognizers
- Anonymizers
- MIT
- You bring the text
Why we like it
In-app text you already hold is a function, not an RFP.
Limits
You tune recognizers. Not email gateway magic. English-heavy defaults.
Google Sensitive Data Protection
Best for inspection jobs on GCP stores you already pay for
Formerly Cloud DLP. InfoTypes on storage and streams in a project you own. Price is metered on the Google Cloud page.
If the data already lives in GCP, start with the button. A job is not a laptop agent. Cost is the catch.
Key features
- InfoTypes on the public docs
- Storage and stream jobs
- Same GCP project
- De-identify transforms
Why we like it
The project you already pay for is the first inspection job.
Limits
GCP gravity. Metered. A job is not a laptop agent.
Microsoft Purview DLP
Best for DLP on the Microsoft estate you already bought
Purview DLP covers Exchange, SharePoint, devices they license. Overlap with DSPM-ish Purview catalog is declared.
A lot of pastes happen in Outlook, so do not buy a second agent first. Non-Microsoft channels need another row. SKU maze is the tax.
Key features
- M365 locations
- Endpoint DLP SKUs
- Policy alerts
- Same tenant
Why we like it
Honesty. The estate where the paste happens is the first gate.
Limits
SKU maze. Non-Microsoft channels need another row.
Nightfall
Best for SaaS DLP on SaaS and code you already use
Nightfall scans Slack, GitHub, and other SaaS they list. Developer-shaped findings.
When the leak is a Slack paste, an estate DLP agent never saw it. The connector list is the product.
Key features
- SaaS connectors
- Code scanning they sell
- Tickets
- Commercial
Why we like it
Chat and git are where the paste actually lives. A laptop agent will not see that.
Limits
Commercial. Connector list is the product.
Forcepoint DLP
Best for known enterprise channel DLP
Forcepoint sells network, endpoint, and cloud DLP. Long enterprise memory.
Listed so the open classifier has a procurement neighbor. Agent tax is the catch. Public pages are not a lab.
Key features
- Channel coverage they sell
- Enterprise policy
- Agents
- Commercial
Why we like it
When the program is already an enterprise agent, name the one you have before you stack a third.
Limits
Commercial. Agent tax. Public pages are not a lab.
Symantec DLP
Best for broadcom enterprise DLP you may already own
Symantec DLP under Broadcom is the other known enterprise agent. If it is already on the laptop, start by tuning it.
Do not stack a third agent on a fleet that already has one. Legacy console stories are the catch.
Key features
- Endpoint and network they sell
- Policy engine
- Enterprise desk
- Commercial
Why we like it
The agent already on the laptop is the first enterprise gate. Tune it.
Limits
Commercial. Legacy console stories.
What we left out
- Netskope. People want DLP on the SSE they already bought. This page is classifiers and channel DLP, not an SSE bake-off.
- Proofpoint Information Protection. Teams want DLP next to the SEG they already run. Forcepoint and Symantec already cover the enterprise agent job on this page.
Presidio threads treat the engine as a library you call. A classifier that never sits on Slack is not a channel DLP platform.
Questions before you buy
If procurement cannot get written answers, you are still buying a brochure.
- Does a known test PAN in a repo we own get a ticket?
- Are we classifying text in an app, gating email, or watching SaaS?
- Do we already have an agent on the laptop we refused to tune?
Classify in the app, or gate the channel. Do not call Presidio a DLP platform.
FAQs
Does DLP replace DSPM?
No. DSPM maps stores. DLP tries to stop a leave. Those are different jobs. Open the matching list for the other one.
Is Presidio enough?
For in-app text, often. For email and endpoints, you still need a channel product.
Will you publish an exfil test?
No.
Is this a scored bake-off?
No.
