Name: Forcepoint
Brand: Forcepoint
Rating: 4.3 (701 reviews)

Published Oct 23, 2026

01Common complaints

- If you require fully transparent, self-serve pricing and immediate online purchasing - Forcepoint DLP and many enterprise modules are sales-led and quote-based. - If you want an immediately simplified cloud-native SSE rollout with minimal migration work from legacy proxy architectures - Community and third-party comparisons indicate that migration from legacy Forcepoint web security can involve connector/tunnel configuration and policy import complexity. - If your environment has a history of endpoint agent conflicts and you lack resources to tolerate rollout instability - Community deployment threads describe scenarios where endpoint conflicts required scripts and manual remediation. - If your priority is high-throughput SWG performance for Microsoft/365 traffic without bypass configurations - Community feedback indicates Microsoft/365 traffic can experience timeouts or slowdowns unless bypass or tuning strategies are applied. - If consistent high ratings for vendor support are a mandatory criterion - Support experiences vary; include support testing and SLAs in any evaluation. - Current limitations acknowledged by the vendor - Not systematically extracted in this run; Forcepoint documentation and release notes are the authoritative source for per-product limitations. - Features on the roadmap - Forcepoint’s Newsroom highlights ongoing integration of Getvisibility DSPM/DDR features and AI-related controls; timelines and feature completeness should be validated by the vendor during sales engineering. - Scale limitations - Not quantified in the retrieved sources. - Community reports suggest endpoint reliability can vary by environment; large-scale rollouts should be staged and validated. - Security or compliance gaps - SOC 2 Type II and ISO 27001 are referenced, but artifacts are gated behind the Trust Hub (request-based). Buyers needing public attestations may consider this a procurement friction point. - API limitations or integration constraints - Capability completeness of management and telemetry APIs varies by product line and should be validated during technical evaluation.

Deal disqualifiers (poor fit)

Very small IT/security teams that require largely maintenance-free security controls
Environments unable to tolerate endpoint agent conflicts with existing EDR stacks without resources for remediation and tuning

02Why they buy

- Reported advantages from customer feedback and practitioner comparisons - Some practitioners report better detection outcomes for specific DLP profiles in their environments; these are practitioner observations that should be validated in pilots. - NGFW rule readability and intent-based policy constructs have been described by some administrators as easier to review in their contexts. - Features requiring hands-on validation - Forcepoint describes real-time inspection and control of user-generated content to manage AI-related data exposure; vendors typically support enforcement modes such as block, coach, redact, or encrypt—specific app coverage, enforcement modes, and accuracy should be tested in a proof-of-concept. - Areas where competitors may have advantages - Zscaler and Netskope are frequently cited as having more mature cloud-native SSE architectures in buyer discussions; organizations prioritizing cloud-first SSE transformations often evaluate these vendors closely.

03Field reports

- Review platforms include Gartner Peer Insights, G2, TrustRadius, PeerSpot - Gartner Peer Insights has Forcepoint pages across multiple categories, including Data Loss Prevention and broader IT security listings. - G2 provides review pages for Forcepoint Web Security and Forcepoint NGFW. - TrustRadius provides review pages for Forcepoint DLP and Forcepoint Secure Web Gateway. - PeerSpot provides community ratings and narratives for Forcepoint NGFW and comparisons for Forcepoint ONE vs Netskope / Zscaler. - Representative positive themes (examples from accessible excerpts and community sentiment) - DLP detection depth in some practitioner comparisons - In one sysadmin thread comparing DLP tools for a large endpoint environment, a user stated that detection outcomes appeared better for Forcepoint using identical EDM profiles; this is a practitioner claim and should be validated in lab or pilot testing. - Improved capability and visibility once tuned - Some reviewers describe Forcepoint DLP as providing increased visibility and utility after an initial tuning period, including integration with malware scanners; reviewers also note specific handling nuances for Microsoft applications. - Manageability of firewall policies (NGFW) - Some forum commenters describe the NGFW access control rules as more readable for intent-based policy management and easier to review in their environments. - Representative negative themes (examples from community sources) - Endpoint client deployment friction and software conflicts - Deployment threads include reports of Forcepoint blocking installation of other agents (for example, CrowdStrike) when installed via certain deployment sequences, and of requiring scripts or service stops for uninstall/upgrade cycles. - Performance / proxy slowdowns (especially around Microsoft 365) - Community discussions reference web gateway behavior and recommend bypass strategies for Microsoft 365 traffic to avoid timeouts or performance degradation. - Support and troubleshooting frustration - Some users report unhelpful or limited troubleshooting support and generic error messaging, leading to extended resolution times in certain incidents. - Outage/availability concerns (anecdotal) - Community posts reference specific regional incidents that were not independently validated for this report. - Why customers chose Forcepoint over alternatives - Integration with existing Forcepoint web filtering is a cited factor for some buyers selecting Forcepoint DLP. - Reported detection/tuning outcomes in some practitioner comparisons led organizations to prefer Forcepoint in those specific contexts. - Why some customers left for competitors (churn reasons) - Buyers migrate to Zscaler or Netskope when they prioritize a more cloud-native SSE/SASE architecture, simplified operations, or have concerns about endpoint/proxy operational complexity and support. - These trends are derived from community threads and comparison write-ups and should be validated with vendor references during procurement. - Deal-breakers and reasons customers didn't purchase - Pricing opacity (quote-driven, modular SKUs) is a common procurement concern in SSE/SASE and DLP markets. - Legacy architecture concerns (appliance/proxy-era complexity) and migration workload are recurring considerations in community discussions.

Vendor-published case studies and metrics

Forcepoint publishes case studies, brochures, and datasheets that include uptime and outcome claims (for example, a product datasheet references a vendor-stated extremely high uptime SLA).

Critical evaluation

SLA and outcome claims from vendor materials should be validated against contract terms (scope, measurement method, exclusions, credit structure) and compared to public status pages and incident history where available.
Many outcome metrics in vendor materials are vendor claims; independent, third-party-verified ROI studies were not identified in the sources reviewed for this report.

Third-party-style evaluations

A SANS-style review hosted on Forcepoint’s domain exists for Forcepoint ONE / cloud security simplification; buyers should review disclosure and context as it may be vendor-hosted.

Mixed results / failure modes

Community evidence indicates deployments can encounter problems when endpoint client reliability degrades in specific environments or when web gateway behavior introduces performance friction without bypass tuning.

04Best fit

Company sizes

Typical fit: mid-market to enterprise
- Heuristic: larger organizations where DLP and web controls justify a dedicated operations function.
- Smaller organizations may evaluate NGFW, but full DLP/SSE programs typically require more operational maturity.

Industries and verticals

Regulated industries (financial services, healthcare, government/defense contractors) and global enterprises with strict data governance.
Public-sector entities and critical infrastructure organizations are among sectors that evaluate these capabilities.

Roles and personas

Decision makers
- CISO / VP Security
- Head of Data Protection / Insider Risk
- Network Security leadership (for SWG/NGFW)
Operational roles
- Security engineers/analysts handling DLP incidents
- Network/security administrators managing web policies and traffic steering
- Endpoint engineering teams managing agent rollouts

Pain points the product addresses

Preventing sensitive data exfiltration (intentional or accidental)
Controlling web access and reducing malware/phishing exposure
Reducing unmanaged SaaS usage and governing cloud app access
Managing data leakage risks associated with generative AI and related tools (subject to supported integrations)

Qualification criteria (good fit)

Organization is prepared to invest in policy design and tuning
Has clear data classification and regulatory drivers
Can run pilots and allocate operational resources to DLP/SWG initiatives

05The pitch

What the product does (core value proposition in objective terms)

- Forcepoint is a cybersecurity vendor focused on protecting sensitive data and controlling user, web, and cloud access. It includes controls intended to identify and manage AI/GenAI-related data exposure risks (for example, inspecting user input and enforcing real-time controls in supported channels). - The portfolio spans multiple product lines that are often evaluated separately: - Data Loss Prevention (DLP) and Data Security Cloud (rebranding from Forcepoint ONE for data security messaging). - Secure Web Gateway (SWG)/web security, including Remote Browser Isolation (RBI). - Network security (Forcepoint Next-Generation Firewall / NGFW).

Target market and market positioning

Primarily mid-market to large enterprises and regulated/public-sector organizations that require centralized, policy-based controls for data movement across endpoints, email/web, and cloud channels and/or web access governance.
Competes both in traditional enterprise DLP/SWG/NGFW segments and in SSE/SASE and DSPM/DDR segments.

Get a comprehensive analysis of Forcepoint including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →

How it compares

Secure Email Gateway market report
Forcepoint is #6 of the top 10 Secure Email Gateway vendors by known customers (84 known customers).
Other top vendors: Barracuda Networks, Abnormal AI, Fortinet, Mimecast, Sophos.