When companies switch to SaaS solutions, the cloud transforms from a simple tool to a vital infrastructure. Back in 2016, Gartner noted the rapid growth in popularity of these services. And here we are, in 2025, witnessing an increase in the use of SaaS and IaaS in the daily business routine.
The cloud’s popularity stems from its numerous benefits, such as flexibility, scalability, security, and reduced IT infrastructure costs. Cloud environments now house working documents, client databases, analytics, and the entire business in general. However, as the cloud becomes more convenient, it also brings more security challenges. At some point, it becomes difficult to answer: who has access to what right now? And, what’s more crucial, how well is the access controlled?
Amidst rapid digitalization, companies are forced to re-evaluate their approaches to corporate data protection, especially as traditional perimeter-based models are no longer effective. In this context, Cloud Access Security Broker (CASB) solutions become an essential component of modern hybrid infrastructures.
Recently, the market for these solutions gained a new player with strong ambitions. Following the acquisition of Lookout CASB, Fortra has made a significant leap forward in developing its own Security Service Edge platform. Fortra CASB is now integrated into a unified Secure Service Edge (SSE) security platform, which combines key components: Secure Web Gateway (SWG) and Zero Trust Network Access (ZTNA). This integration ensures not only control over cloud applications but also comprehensive protection for users and data — from web access to internal resources — with unified policies and no security gaps or conflicts between solutions.
Let’s explore what this means for a business operating in the cloud and the advantages that the Fortra’s new solution provides.
How it started
Lookout, known to many for its mobile security solutions, decided to enter the cloud security market several years ago. This became possible after the acquisition of CipherCloud.
The goal was truly ambitious: to build a comprehensive platform covering everything, from endpoint protection to the cloud. However, the idea did not get widespread support among customers, and finally, the company decided to abandon this direction. Fortra acquired this part of the business.
The integration of Lookout’s cloud security business has allowed Fortra to significantly strengthen its data protection platform. Now, it includes key components of a modern security architecture, in particular, a Cloud Application Security Broker (CASB), zero-trust tools for network access, and a secure web gateway. Thus, Fortra can offer its customers a more holistic and flexible solution for controlling and protecting data in the cloud environment.
What is Fortra CASB?
Collaboration, SaaS applications, and cloud storage have become commonplace. However, every time you send files or open a received one, you face a potential point of data loss.
Fortra CASB integrates into business processes, giving security teams more visibility and understanding of exactly what’s happening in the cloud. For the team, it means they can intervene before anything goes wrong. The solution works as an intelligent intermediary between users and cloud services: monitors interaction, analyzes risks, and applies policies. It registers facts and reacts instantly: for instance, it stops the transfer of confidential information if it suddenly goes where it shouldn’t.
Like most modern products, Fortra CASB operates in real-time. Therefore, if someone sends a document containing personal data in Teams or shares a link to an internal resource via email, the system can instantly identify and evaluate it. It distinguishes between normal work activity and a potential threat.
This intelligent presence in the cloud allows companies to be confident that data remains under close supervision, even in a distributed environment.
Integration into SSE and the Fortra DSPM platform
The absorption of Lookout’s cloud security business was a logical step in the development of Fortra’s strategic ecosystem. The company has been building a holistic data security management platform for a long time, and the new acquisition is a perfect addition to its portfolio. Another powerful element (i.e., Lookout’s CASB) has been added to existing components, such as Digital Guardian DLP and Titus/Boldon James data leakage protection solutions.
This integration is the next step in building a unified Secure Service Edge (SSE) architecture, within which data security covers the entire landscape: from end devices to cloud applications. Actually, this is exactly the direction of development that was established by the cooperation between the companies, which started at the beginning of 2024.
The key advantage of integration is centralized management of security policies. Unified data protection rules reduce the workload of security teams, avoid control fragmentation, and enable faster incident response, regardless of where data is stored or transmitted — in the cloud, on the network, or on user devices.
Technical Features: what’s under the hood of Fortra CASB?
The solution’s “guts” are quite sophisticated, but from the security team’s perspective, everything looks simple: you connect it, configure it, and you’re already protected in an hour. The solution works in two modes — inline and via API — so you get full visibility and control in SaaS (such as Microsoft 365, Google Workspace, or Slack), IaaS (such as AWS, Azure, GCP), and specific enterprise systems such as SAP.
A key advantage of CASB is its adaptability. The solution constantly evaluates the context: from which device the connection originates, where the user is, what behavior they demonstrate. With machine learning and real-time risk assessment, the system can dynamically adjust access policies: for example, allowing viewing but denying downloading, or automatically masking sensitive fields.
Another essential point is the support of modern data formats. It’s more than just keyword filtering: the solution enables profound analysis of structured and unstructured data (e.g., JSON), with support for masking, encryption, and watermarking policies.
The solution also integrates with CSPM (Cloud Security Posture Management), SSPM (SaaS Security Posture Management), and DSPM (Data Security Posture Management) tools as part of the general Fortra platform. This allows you to build a complete security architecture considering modern threats and regulatory requirements.
Thanks to ready-made templates for medium-sized businesses, protection can be set up in literally 60 minutes, without weeks of implementation or the involvement of a technical specialists team.
What are the key benefits a business gets from using CASB?
In real life, data is rarely stored in one place. They circle somewhere between mail, chats, cloud storage, corporate and personal devices.
So, how do you build security without slowing down your work? This is how Fortra CASB addresses the question.
Firstly, the solution provides truly flexible control over users interacting with the data and over the manner they do it. You can configure who has access, whether it is allowed to share files outside the company, whether it is possible to send attachments in email — everything is taken into account. At the same time, there is no need to build policies from scratch: available templates help even small security teams get started quickly.
Secondly, CASB understands the difference between corporate and personal environments. Even if the corporate Google Drive and personal Gmail are open on the same device, the system will not allow files to be sent in the wrong direction. This is particularly crucial in the age of remote work and BYOD.
In terms of mail security, Fortra CASB works as an additional filter that automatically masks sensitive data, encrypts attachments, and blocks incorrect recipients. It all happens without requiring any additional user action.
Another benefit is compliance with regulatory requirements. The solution helps to keep data under control and to be ready for an audit at any moment, regardless of what standard you’re dealing with — GDPR, HIPAA, or DORA.
Use Cases
We suggest analyzing three classic cases to understand how the solution operates in real life.
- Web Email
A classic data leak point. A financial report, unique developments or other confidential data can go the wrong way with one careless click.
What does Fortra CASB do?
Automatically detects sensitive information in letters and attachments: masks, encrypts, blocks sending outside the company or to external recipients without permission. Besides, it prevents accidental addition of unauthorized addresses to the “copy” field.
- Cloud storage
Google Drive, OneDrive, Dropbox, and dozens of other similar tools are very convenient — and very risky.
What does Fortra CASB do?
Tracks file downloads and distribution, prevents work data from being moved to personal accounts, and differentiates between corporate and private environments even on the same device. The user sees one interface, and at this time, a clear security policy operates “under the hood”.
- Collaboration platforms
Slack, Teams, and similar work messengers often share more critical files than email.
What does Fortra CASB do?
Scans the content of files and messages in real time, blocks the spread of sensitive information, controls who and what can be shared, and adapts policies based on the user, device, or location.
All of the above examples of features work almost unnoticed by the user, but clearly and reliably, providing a balance between business flexibility and security control.
What differentiates Fortra CASB in the cloud security market?
One of the challenges in the context of cloud security is the difficulty in finding solutions that not only cover individual tasks but also offer true unity and comprehensiveness.
Fortra CASB is a complete part of the advanced Secure Service Edge (SSE) security platform that integrates CASB, Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA). This approach ensures that data protection works comprehensively, without gaps and conflicts between tools.
Within Fortra, this platform integrates DSPM (Data Security Posture Management), DLP, and CASB, creating a single ecosystem for complete control over corporate information.
In accordance with Gartner Peer Insights, Fortra CASB got a score of 4.6 (based on 87 votes). Key benefits include ease of deployment, superior visibility to track sensitive data, and enhanced security for SaaS applications.
Conclusion
Fortra CASB is a simple and reliable tool that allows users to solve the security issues of cloud environments. As part of a comprehensive platform, the solution provides full transparency of activity in the cloud and flexible control of access to data and applications. In addition, it ensures compliance, which is vital for modern business. Apart from this, there is a zero-trust approach, which provides access only to users who really have the right to work with corporate information.
If you want to see a technical demonstration of how Fortra CASB works in practice, and how it can help protect your cloud infrastructure, please contact us: [email protected]