Win more cybersecurity projects with Fortra.

Deployment: On-premises · Best for: in-house pentest/security teams & audit-regulated organisations

Automated, multi-stage penetration testing across network, client-side and web attack vectors – validating real attack paths instead of guessing at them.

• Multi-vector exploits: network, client-side (phishing) and web apps
• Reusable test scenarios & automated re-testing
• Phased validation of patching and hardening measures

Partner USP: The licence model makes pentesting repeatable – predictable service and maintenance revenue instead of expensive one-off engagements.

Use case: A system integrator proves to a KRITIS customer ahead of the NIS2 audit that known vulnerabilities are genuinely not exploitable.

Deployment: On-premises · Best for: red teams, MSSPs & SOC providers

Platform for red team operations and adversary simulation; the industry reference for emulating command-and-control behaviour (Beacon).

• Beacon C2 for realistic emulation of active attackers
• Malleable profiles replicate specific threat actors
• End-to-end testing of the detection & response chain

Partner USP: A door-opener with MSSP/SOC customers and pentest providers – with follow-on demand for defensive solutions.

Use case: An MSSP shows a customer that their SOC detects a simulated ransomware attack only late – and then sells hardening and MDR.

Evasive red team toolkit that replicates advanced attacker techniques and deliberately bypasses defensive controls.

• Evasive techniques to test modern EDR/XDR detection
• Extends Cobalt Strike with specialist tooling for mature red teams
• Realistic assessment of defence-in-depth

Partner USP: A premium add-on for mature red teams – high margin, little competition.

Use case: A specialist pentest provider tests which advanced techniques pass the customer's EDR solution undetected.

Certified red team training (Zero-Point Security) – from operator to team lead, hands-on with Cobalt Strike and practical labs.

• Red Team Ops I → Red Team Operator (CRTO) certification, ~20 hrs
• Red Team Ops II → Red Team Lead (CRTL) certification, ~12 hrs
• Labs: adversary emulation, defense & EDR evasion, lateral movement

Partner USP: Training as a high-margin add-on to the tooling business – upskills customer teams and builds long-term loyalty.

Use case: A pentest provider certifies its team to CRTO/CRTL and can take on more demanding red team engagements.

Deployment: On-prem & cloud, integrates with Microsoft 365/Office · Best for: GDPR-driven & regulated environments

Automatically and consistently classifies and labels sensitive data – the foundation of every DLP, encryption and compliance strategy.

• Automatic and user-driven classification & labelling
• Visual and metadata labels for Office, email & files
• Drives downstream controls: DLP, encryption & secure email gateways

Partner USP: The ideal entry use case for GDPR projects – opening the door to follow-up projects across the entire data security stack.

Use case: A mid-sized company automatically labels all documents containing personal data for GDPR – the basis for targeted DLP protection.

Deployment: Endpoint, network & cloud · Best for: organisations with valuable IP & personal data

Detects and prevents the loss of sensitive data at endpoints, on the network and in the cloud – including adaptive DLP for context-based sanitisation.

• Enforcement at the endpoint, on the network, in email and in the cloud
• Adaptive Redaction removes only the sensitive part instead of blocking
• Protection of intellectual property and regulated data

Partner USP: High recurring share; interlocks tightly with Data Classification and Email Security into a stack deal.

Use case: A machinery manufacturer prevents design data from leaving the company via USB, web upload or email.

Deployment: On-prem & cloud/SaaS · Licensing: per user/partner · Best for: regular data exchange with partners

Secure, encrypted and fully auditable file transfer – replacing FTP servers, scripts and shadow IT with central control and automation.

• Encrypted transfer (SFTP, FTPS, AS2, HTTPS) with automation
• Complete, tamper-proof audit log of every transfer
• On-premises, cloud or hybrid – including clustering for high availability

Partner USP: Fortra's flagship with strong demand; a clear compliance lever for NIS2 and DORA and a powerful door-opener topic.

Use case: An insurer replaces error-prone FTP scripts and exchanges contract data with partners in an encrypted, audit-proof way.

Data security posture management: discovers, classifies and protects sensitive data across endpoints, SaaS, cloud, databases and AI tools, and exposes risk before attackers exploit it.

• Automatic discovery & classification of cloud data
• Finds shadow data and risky access rights
• Prioritises data risk by sensitivity and exposure

Partner USP: A growth topic for cloud/SaaS-heavy customers; complements classic DLP projects.

Use case: A SaaS company discovers openly accessible customer data in a forgotten cloud bucket before an attacker does.

Deployment: Cloud gateway, complements Microsoft 365 · Best for: all organisations, especially M365 users

Protection against phishing, impersonation/BEC and malware – including outbound email DLP and encryption. Complements Microsoft 365 precisely where native filters reach their limits.

• Protection against phishing, BEC and impersonation (Agari)
• Secure email gateway with Adaptive Redaction (Clearswift)
• DMARC enforcement & outbound email DLP

Partner USP: Over 90% of attacks start via email – an easy business case and a fast cross-sell into awareness and brand protection.

Use case: A law firm stops CEO fraud emails while preventing the accidental sending of client data.

Security awareness and phishing simulation that measurably reduce human risk and improve click behaviour.

• Realistic phishing simulations with learning paths
• Multilingual awareness training (Terranova)
• Measurable risk metrics per department

Partner USP: A low-threshold recurring service; the perfect companion to every email security deal.

Use case: A retail company measurably lowers its phishing click rate within months – ideal as a recurring service.

Deployment: SaaS (managed) · Best for: brands with an online presence, finance & retail

Detects and removes look-alike domains, fake profiles and phishing infrastructure, and monitors the dark web for leaked credentials – with active takedown.

• Detection of look-alike domains & brand abuse
• Dark web monitoring for leaked credentials
• Active takedown of fraudulent content (PhishLabs)

Partner USP: A differentiator with board-level relevance; a concrete loss-prevention case even for SMBs.

Use case: A bank has a fake login domain taken down before customers enter their credentials there.

Deployment: On-prem & cloud · Best for: KRITIS, PCI & regulated environments

File integrity monitoring and configuration compliance: detects unauthorised changes immediately and delivers a continuous, audit-ready comparison of target vs. actual state.

• File integrity monitoring (FIM) for critical systems
• Continuous configuration & hardening checks (benchmarks)
• Audit-ready target/actual comparison for compliance

Partner USP: Complements SIEM/EDR rather than competing; a strong argument for NIS2/KRITIS-regulated organisations and PCI environments.

Use case: A utility detects an unauthorised change to a control file immediately – while also meeting KRITIS evidence requirements.

Deployment: On-prem & cloud · Best for: any IT organisation with patch & risk management

• Continuous scanning of network, hosts and web apps
• Risk-based prioritisation instead of endless CVE lists
• Clear remediation guidance for IT

Detects, prioritises and helps remediate vulnerabilities on a risk basis – for a resilient security posture instead of endless scan lists.

Partner USP: A solid recurring base and a natural companion to Tripwire and penetration testing.

Use case: An IT service provider delivers its customer a prioritised findings list every month – as a predictable managed service.

Deployment: Managed service, 24/7 · Best for: customers without their own SOC

• Correlated detection across endpoint, network, cloud & identity
• 24/7 analysis by an experienced SOC team
• Guided or automated incident response

Unified threat detection and response across endpoint, network, cloud and identity – with 24/7 monitoring and automated response as a managed service.

Partner USP: Managed service revenue and an entry into long-term support contracts; ideal for customers without their own SOC.

Use case: A mid-sized company without its own SOC gets round-the-clock monitoring and immediate containment in an emergency.

Deployment: Cloud/hybrid · Best for: remote/hybrid work & VPN replacement

• App-specific access based on identity & device context
• No open network layer like a traditional VPN
• Micro-segmentation limits lateral movement

Identity- and context-based access per application instead of a flat VPN tunnel – limiting lateral movement if an account is compromised. As the only ZTNA solution, Fortra also protects the data inside the apps (DLP & rights management).

Partner USP: A concrete VPN replacement case; tangible security and usability gains for remote/hybrid work.

Use case: A company gives external service providers access to exactly one application – not the entire network.

Deployment: native on IBM i, AIX & Linux · Best for: operators of IBM Power systems

Security, compliance and access control natively for IBM i (AS/400), AIX and Linux – hardening privileges, monitoring exit points and automating compliance.

• Control of privileged profiles & exit point protection
• Multi-factor authentication for IBM i
• Automated compliance reporting & auditing

Partner USP: A high-margin niche with little competition; IBM i customers often hold the most critical data and are underserved.

Use case: A manufacturer secures its central ERP on IBM i and documents access in an audit-proof way.