Bitglass

Bitglass was a company focused on providing cloud security solutions, specifically as a Cloud Access Security Broker (CASB). Its core mission was to enable enterprises to adopt cloud applications and bring-your-own-device (BYOD) policies without compromising data security or compliance. Bitglass aimed to deliver total data protection across any application, device, and location through a unified platform. This involved providing visibility and control over data in the cloud, preventing data leakage, and protecting against threats.

In October 2021, Forcepoint, a global leader in data-first security, acquired Bitglass. The goal of this acquisition was to integrate Bitglass’s Security Service Edge (SSE) platform into Forcepoint’s Data-first SASE (Secure Access Service Edge) architecture. This strategic move aimed to create a comprehensive, integrated security platform that simplifies data security, network security, web security, cloud security, and threat protection. Bitglass’s technology, known for its CASB, Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA) capabilities, now enhances Forcepoint’s offerings.

Bitglass had a reputation as a strong and innovative player in the CASB market, recognized for its agentless, real-time data and threat protection capabilities. Its platform was designed to secure data across various cloud applications and unmanaged devices. Following its acquisition, Bitglass’s technologies are now part of Forcepoint’s broader security solutions, contributing to Forcepoint’s mission of reducing security complexity and enabling secure access to information in hybrid work environments.

Offerings, Capabilities, and Integrations

Bitglass, prior to its acquisition by Forcepoint in 2021, was a cloud security company specializing in Security Service Edge (SSE) and Cloud Access Security Broker (CASB) solutions. Its offerings were designed to provide comprehensive data and threat protection for organizations adopting cloud applications and enabling remote work. The core strength of Bitglass’s platform was its integrated, cloud-native architecture that combined CASB, Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), and Data Loss Prevention (DLP) capabilities. This unified approach, managed from a single console, aimed to simplify security operations and provide consistent policy enforcement across web, cloud, and private applications. The acquisition by Forcepoint was intended to integrate Bitglass’s SSE platform into Forcepoint’s “Data-first” Secure Access Service Edge (SASE) architecture, enhancing Forcepoint’s ability to provide advanced data security and threat protection that is easier for organizations to deploy and manage, particularly in hybrid work environments.

The integration of Bitglass’s technology aimed to give Forcepoint a competitive edge by offering a more comprehensive SASE platform. This allows for securing access to information everywhere—on the web, in the cloud, and in data centers—addressing the increasing complexity faced by IT teams in securing hybrid work environments. The combination was positioned to deliver an integrated security platform consolidating data security, network security, web security, cloud security, threat protection, advanced monitoring, and zero trust control.

Products and Services

Following its acquisition by Forcepoint, Bitglass’s products and services have been integrated into the Forcepoint ONE platform and other Forcepoint offerings. The core technologies that originated with Bitglass continue to be central to Forcepoint’s SASE and data security solutions. Key offerings that incorporate Bitglass’s technology include:

• Forcepoint ONE CASB (formerly Bitglass CASB): This solution provides visibility and control over cloud applications, both sanctioned and unsanctioned (“Shadow IT”). It helps enforce data security policies, prevent data loss, and protect against threats in cloud environments. It includes features like integrated identity management, contextual multi-factor authentication, and data loss prevention.
• Forcepoint ONE SWG (Secure Web Gateway): This component, enhanced by Bitglass’s capabilities, secures web access for users regardless of their location. It protects against web-based threats and enforces acceptable use policies.
• Forcepoint ONE ZTNA (Zero Trust Network Access): This provides secure access to private applications without the need for traditional VPNs, aligning with a zero-trust security model.
• Forcepoint Data Loss Prevention (DLP): Bitglass’s DLP capabilities have been integrated into Forcepoint’s broader DLP offerings, extending data protection across cloud, web, email, and endpoints.
• Forcepoint Security Service Edge (SSE): The Bitglass platform was a comprehensive SSE solution, and this technology now forms a core part of Forcepoint ONE’s SSE capabilities, which converge SWG, CASB, and ZTNA.
• Forcepoint Cloud Security Posture Management (CSPM): Bitglass’s technology also included CSPM functionalities, which help organizations identify and remediate misconfigurations in their cloud infrastructure.

Forcepoint has continued to evolve these capabilities, recently launching the Forcepoint Data Security Cloud, an AI-powered platform that unifies DSPM, Data Detection and Response (DDR), Enterprise DLP, SaaS Security, Web Security, and Email Security. The flagship offering is now Forcepoint ONE, an all-in-one cloud platform that simplifies security for distributed businesses by providing safe, controlled access to business information everywhere.

Target Customers

Originally, Bitglass focused on heavily regulated industries such as financial services, healthcare, legal, higher education, government, and manufacturing. These organizations require robust data protection and compliance capabilities, which Bitglass’s solutions provided.

With the integration into Forcepoint, the target customer base has expanded but retains a strong focus on organizations that handle sensitive data and require comprehensive security for hybrid workforces and cloud environments. Forcepoint’s solutions, incorporating Bitglass technology, are aimed at:

• Large enterprises and corporations: Companies needing to secure distributed workforces and complex IT environments, including access to numerous cloud applications and private data.
• Government agencies: Organizations requiring secure access to information and compliance with stringent regulatory frameworks. Forcepoint ONE has achieved FedRAMP authorization, making it suitable for government use.
• Highly regulated industries: Sectors like finance, healthcare, and insurance that deal with sensitive information and must adhere to strict data privacy and protection mandates.
• Organizations undergoing cloud transformation: Businesses migrating to the cloud and needing to ensure the security of their data and applications during and after the transition.
• Companies with hybrid and remote workforces: Businesses that need to provide secure and reliable access to corporate resources for employees working from various locations and on different devices, including BYOD.

These customers benefit from the integrated SASE platform by simplifying their security infrastructure, reducing complexity, enhancing data protection, ensuring compliance, and enabling secure productivity for their users wherever they are. The “Data-first” SASE approach particularly benefits organizations that prioritize the security of their data across all channels and locations.

Cloud Integrations and Marketplaces

Bitglass was acquired by Forcepoint in October 2021, and its technologies have been integrated into Forcepoint’s product offerings, particularly the Forcepoint ONE platform. Therefore, cloud integrations and marketplace presence are now primarily under the Forcepoint brand.

• Amazon Web Services (AWS)
  • Marketplace Presence: Forcepoint ONE, which incorporates Bitglass’s Secure Service Edge (SSE) technology, is available on the AWS Marketplace. Forcepoint Next Generation Firewall (NGFW) is also listed and can be launched from the AWS Marketplace. Prior to its acquisition, Bitglass itself was an AWS Marketplace seller. A list from February 2024 indicated that Bitglass, Inc. still had authorized channel partners for reselling products on AWS Marketplace.
  • Integrations: Forcepoint ONE runs on AWS and integrates with AWS APIs for functionalities like Cloud Security Posture Management (CSPM) and Data Loss Prevention (DLP), similar to Bitglass’s previous integrations. Forcepoint’s solutions, including CASB, integrate with AWS Security Hub. The Forcepoint ONE platform provides Zero Trust access and data security for applications and the web, leveraging AWS infrastructure.
• Microsoft Azure
  • Marketplace Presence: Forcepoint has several offerings on the Microsoft Azure Marketplace, including Forcepoint Web Security, Forcepoint Email Security, and Forcepoint Next Generation Firewall. A Bitglass data connector for Microsoft Sentinel is available, which allows the retrieval of security event logs from Bitglass services (now part of Forcepoint) into Microsoft Sentinel using Azure Functions.
  • Integrations: Forcepoint ONE Cloud Security Posture Management (CSPM) supports Microsoft Azure. Bitglass, prior to its acquisition, integrated with Azure APIs for CSPM and with Microsoft Azure Active Directory. Forcepoint solutions can be deployed in Azure environments to protect networks and enforce security policies.
• Google Cloud Platform (GCP)
  • Marketplace Presence: While a direct search for “Bitglass” on the Google Cloud Marketplace may not yield specific Bitglass-branded products following its acquisition by Forcepoint, Forcepoint ONE Cloud Security Posture Management (CSPM) supports Google Cloud.
  • Integrations: Forcepoint ONE CSPM integrates with Google Cloud to detect, report on, and remediate risky configurations. Forcepoint DLP logs can be collected by Google Security Operations. A “Google Bitglass extension” is mentioned in Forcepoint documentation for enabling screen sharing in Google Hangouts when traffic is routed through the Bitglass reverse proxy (now part of Forcepoint ONE SSE). Before being acquired, Bitglass integrated with GCP APIs for CSPM and DLP, and with Google Authenticator for MFA.

Key People

• Chief Executive Officer and Co-Founder: Nat Kausik.
• Chief Technology Officer and Co-Founder: Anurag Kahol.
• Co-Founder & Chief Architect: Kevin Lo
• Senior Vice President of Product Management: Mike Schuricht.
• Senior Vice President of Finance: Andrew Urushima.
• Vice President of Business Development: Benjamin Rice.
• Vice President of Sales, Americas & APAC: Justin Crowley.
• Vice President of Sales, EMEA (and later APJ): David Shephard.

Key Facts

• Headquarters Location: Campbell, California, USA.
• Number of Employees: Approximately 111-170.
• Annual Revenue: Estimated $7M – $50M.
• Parent Company: Forcepoint.
• Subsidiary Companies: None.
• Publicly Listed: No (Acquired by a private company).

Analyst Recognition

Prior to its acquisition by Forcepoint in October 2021, Bitglass received recognition from several analyst groups, primarily for its Cloud Access Security Broker (CASB) solutions.

• Gartner recognized Bitglass in its Magic Quadrant for Cloud Access Security Brokers (CASB).
  • Bitglass was named a Leader in this Magic Quadrant for three consecutive years: 2020, 2019, and 2018.
  • In 2017, Gartner positioned Bitglass as a Visionary in the Magic Quadrant for Cloud Access Security Brokers.
  • In 2021, Bitglass was named a Gartner Peer Insights Customers’ Choice for North America in the ‘Voice of the Customer’: Cloud Access Security Brokers report.
• Forrester included Bitglass in its Forrester Wave™: Cloud Security Gateways, Q1 2019 report.
  • In this report, Bitglass was recognized as a Strong Performer in the Cloud Security Gateways (CSG) market, which is also referred to as the CASB market.
• IDC: There is no clear indication from available information that IDC formally recognized Bitglass within its MarketScape reports for a specific technology category as a vendor.
• Everest Group: There is no information available to suggest that Everest Group has recognized Bitglass in its PEAK Matrix® assessments or other relevant industry evaluations.