Digital Guardian DLP in 2026: Deep Kernel Visibility, Pattern-Bound AI Controls

Digital Guardian has been a serious name in enterprise DLP for two decades. It was a Leader in Gartner's Enterprise DLP Magic Quadrant five times running, and its kernel-level agent still has a reputation for seeing almost everything that happens to a file. Today it lives inside Fortra, and Fortra's own pages now call it Fortra DLP. The question in 2026 is not whether Digital Guardian sees data. It is whether it understands an AI prompt it has never seen a pattern for. If you are comparing the whole category, our guide to the best data loss prevention tools ranks the field. This post goes deep on Digital Guardian.

The short answer

Digital Guardian is a deep, kernel-level endpoint DLP whose generative AI controls stop data that its classification tags and sensitive-data patterns already recognize, and on macOS its transparent web proxy only intercepts traffic from supported browsers and legacy Outlook. dope.security takes a different path: Dopamine DLP reads AI prompts and file uploads on the device and classifies their meaning with large language models, with no rule configuration required, while Cloud Application Control blocks personal AI accounts and keeps corporate ones working.

That is a testable claim. Paste a paragraph of unreleased product strategy, with no SSNs, no card numbers, and no classification label, into a personal AI account on a managed Mac, and see which tool stops it.

What is Digital Guardian?

Digital Guardian's history explains its strengths, and its packaging today.

• 2003. The company was founded as Verdasys.
• 2014. Verdasys rebranded as Digital Guardian at Black Hat while raising a $20 million round.
• 2017. Digital Guardian was named a Leader in the Enterprise DLP Magic Quadrant for the fifth consecutive time. That was the last edition of that Magic Quadrant; Gartner has covered DLP with a Market Guide since.
• June 2020. HelpSystems acquired data classification vendors Titus and Boldon James.
• October 2021. HelpSystems acquired Digital Guardian, calling it "the industry's only SaaS provider of DLP."
• November 2022. HelpSystems renamed itself Fortra.
• May 2025. Fortra acquired Lookout's Cloud Security business, which includes CASB, ZTNA, and a secure web gateway.

In October 2023, Fortra said Digital Guardian served about 600 customers and more than 5.5 million users. The agent and console still carry the Digital Guardian name, as DG Agent and DGMC, even where the product pages say Fortra DLP.

How Digital Guardian works

Digital Guardian is built around its endpoint agent, with network and cloud components around it.

• Kernel-level agent. Fortra's technical overview says the agent integrates "at the kernel" and enforces policy "prior to allowing execution of an operation," keeps working without a connection to the console, and includes tamper resistance and an optional Stealth Mode. It runs on Windows, macOS, and Linux, plus Citrix VDI.
• Classification. Digital Guardian classifies data by context, content, and user, and the tags travel with the file. Fortra claims support for more than 300 file types and 90 languages, plus database record matching. Fortra's Data Classification Suite, built from Titus and Boldon James, connects through an SDK.
• Network and cloud. A Network DLP appliance monitors traffic through SPAN or TAP and includes an inline mail transfer agent, and Cloud Data Protection scans services like Office 365 and Box through APIs.
• Delivery. Fortra says the platform has been cloud-delivered since 2017 on AWS, with SaaS, on-premises, and a Managed Security Program option, and an Analytics and Reporting Cloud (ARC) for reporting.

If you are weighing where DLP should enforce in the first place, our breakdown of endpoint DLP vs network DLP covers the trade-offs.

What Digital Guardian does well

Credit where it is due. Digital Guardian is not DLP-lite, and Fortra says so in its own slogan.

• Depth on the endpoint. A kernel agent that enforces before an operation executes sees file activity, print, removable media, and copy and paste at a level few products match.
• Visibility before policy. PeerSpot reviewers note that Digital Guardian detects activity with no rules configured, which matches Fortra's visibility-first pitch.
• Persistent classification. Tags that travel with the file, plus record matching, help regulated teams protect known data sets such as customer records or controlled technical data.
• A managed option. Fortra calls its Managed Security Program "the industry's first Managed Security Program for DLP" and claims full production mode in 90 days or less, which helps lean teams.

If your DLP program centers on regulated, well-classified data and you have the staff, or the managed service, to run it, Digital Guardian is a credible choice.

Where Digital Guardian gets complicated for AI in 2026

The AI story is where the design shows its edges. Everything below comes from Fortra's own documentation and release notes.

AI controls depend on patterns and classification

Fortra's 2023 guidance on ChatGPT describes three endpoint controls: block the ChatGPT site outright, flag or block prompts that match sensitive patterns such as Social Security numbers, card numbers, or ITAR terms, and block pasting of classified content. Its current Generative AI Content Pack adds prebuilt policies and reporting, and Fortra says it stops classified data leaving through AI sites via copy and paste, file upload, or form submission. That works well for data you have already labeled or can describe with a pattern. A prompt full of confidential strategy, unlabeled and unpatterned, is a harder case for any rules-and-tags model.

Mac web inspection has caught up slowly

Fortra's Mac release notes show a steady effort, and a long road. On macOS 11 and later, web inspection had to be configured as an explicit proxy from January 2021 until version 9.0 added a transparent proxy in March 2025, and that transparent proxy intercepts traffic only from supported browsers and legacy Outlook. Copy, paste, and screen capture control arrived on the Mac in April 2022, AirDrop in November 2023, Bluetooth in January 2026, and the Messages app in June 2026. Fortra's notes for new macOS releases say each certification "does not include support for any new data egress paths." If your engineers live on Macs, test AI controls there specifically.

Desktop AI apps are a separate question

People increasingly use AI through desktop apps, IDEs, and command-line tools. We did not find Fortra documentation describing prompt inspection inside desktop AI apps, and the documented macOS transparent proxy is scoped to supported browsers. Our guide to detecting shadow AI in desktop apps, IDEs, and CLIs explains why the browser is only part of the picture.

Corporate vs personal AI accounts

Fortra's documented AI controls are about blocking a site, matching patterns, and stopping classified pastes. We did not find Fortra DLP documentation for allowing a corporate ChatGPT workspace while blocking a personal account on the same domain. Fortra's May 2025 Lookout acquisition brought it an SSE stack, so ask how the two products work together today.

Customers report agent weight and policy effort

PeerSpot reviewers describe policy writing that takes real skill, a more complex first setup than alternatives, and agent CPU and memory use; a May 2026 review says the agent "needs to be more optimized in terms of CPU usage." Reviewers also report Mac and Linux feature gaps compared with Windows. These come from a small set of reviews, so treat them as directional and verify them in a proof of concept.

Digital Guardian vs dope.security: the head-to-head

Both products aim to stop sensitive data from leaving the endpoint. They decide what counts as sensitive in different ways. Here is the comparison, line by line.

• How AI prompts are judged. Digital Guardian's documented AI controls block prompts that match sensitive patterns or contain classified content. dope.security Dopamine DLP classifies the meaning of prompts and uploads with large language models through zero-retention OpenAI APIs, with no data retention and no training on your data.
• Policy effort. Digital Guardian reviewers describe policy writing as a skilled job, and Fortra offers a managed service to run it. Dopamine DLP requires no rule configuration and runs in Block, Monitor, or Off mode, with a plain-language Dopamine Summary explaining each detection.
• Mac coverage. Digital Guardian's macOS transparent proxy, added in March 2025, intercepts only supported browsers and legacy Outlook. dope.endpoint runs natively on Mac and Windows and inspects web traffic on the device.
• Corporate vs personal AI accounts. We found no Fortra DLP documentation for tenant-level control of AI accounts. dope.security Cloud Application Control blocks personal ChatGPT, Claude, Google, and Microsoft 365 logins while allowing approved enterprise tenants, and for Claude the control covers both browser and desktop app usage with OS-level enforcement.
• Endpoint footprint. Digital Guardian's kernel agent is built for depth, and reviewers report CPU and memory concerns. dope.endpoint uses under 100 MB of RAM.
• Web security. Digital Guardian is a DLP platform, with Fortra's SWG arriving through the Lookout acquisition. dope.security is a Fly-Direct secure web gateway first, with SSL inspection, URL filtering, and anti-malware on the device, and Dopamine DLP built in.
• Data at rest. Digital Guardian scans cloud services through Cloud Data Protection APIs. dope.security CASB Neural scans OneDrive and Google Drive for publicly or externally shared files containing PII, PCI, PHI, or IP, with one-click remediation, in the same console.
• Removable media and print. Digital Guardian's kernel agent controls print, USB, and other local egress channels in depth. dope.security focuses on web, SaaS, and AI egress; teams with heavy device control needs should map those channels before consolidating.

Dopamine DLP is protected by US Patent 12,464,023. Read how it works in meet Dopamine DLP.

Replace Digital Guardian, or run dope.security alongside it?

The honest answer depends on which channels your DLP program actually defends.

• Keep deep device control where you need it. If print, USB, and classified engineering files are your core risk, Digital Guardian's kernel agent is built for that.
• Put AI and web enforcement where the traffic is. Deploy dope.security on Mac and Windows, turn on Cloud Application Control for your AI tenants, and run Dopamine DLP in Monitor mode first to see what sensitive data flows into AI tools, labeled or not.
• Test the personal account split. Our walkthroughs on blocking personal ChatGPT while keeping the corporate account and blocking personal Claude accounts show the exact steps.
• Plan the consolidation. Our take on replacing legacy DLP covers sequencing, our guide to writing a DLP policy covers scope, and our reviews of Forcepoint DLP and Symantec DLP show how other incumbents handle AI.

Deployment is where teams feel the difference. Outreach Health secured 99% of its devices within one week and cut web access tickets by 70% in 90 days.

The bottom line on Digital Guardian

Put simply: Digital Guardian sees deeply into the endpoint and protects well-classified data with real rigor, but its documented AI controls recognize what its patterns and tags already describe, and its Mac web inspection reaches only supported browsers. If you want every AI prompt and upload judged on its meaning, on Mac and Windows, with personal AI accounts blocked and corporate ones working, that is what dope.security was built to do. Explore Dopamine DLP and the Fly-Direct Secure Web Gateway, or book a 20-minute demo and we will run the unlabeled strategy paste test live.

Frequently Asked Questions

Who owns Digital Guardian?

Fortra owns Digital Guardian. HelpSystems acquired Digital Guardian in October 2021 and renamed itself Fortra in November 2022. Fortra's product pages now call the product Fortra DLP, while the agent and console still carry the Digital Guardian name.

Is Digital Guardian the same as Fortra DLP?

Yes. Fortra's current pages present Digital Guardian as Fortra DLP, with endpoint DLP, network DLP, cloud data protection, and the Analytics and Reporting Cloud. Review sites still often list it as Fortra's Digital Guardian.

Does Digital Guardian support macOS?

Yes. Digital Guardian supports Windows, macOS, and Linux. Fortra's Mac release notes show macOS coverage added over time, including a transparent web proxy in March 2025 that intercepts traffic from supported browsers and legacy Outlook, and Messages app support in June 2026. Reviewers report some feature gaps on Mac and Linux compared with Windows.

Can Digital Guardian block ChatGPT data leaks?

Yes, for data its policies recognize. Fortra documents blocking the ChatGPT site, blocking prompts that match sensitive patterns, and blocking pastes of classified content, and its Generative AI Content Pack adds prebuilt policies and reporting. dope.security Dopamine DLP classifies prompts by meaning with large language models and needs no rule configuration.

Is there a Gartner Magic Quadrant for DLP?

Not anymore. Gartner's last Enterprise DLP Magic Quadrant was published in 2017, when Digital Guardian was named a Leader for the fifth time. Gartner has covered the DLP market with a Market Guide since then.

Can I run dope.security alongside Digital Guardian?

Yes. Teams with heavy device control needs often keep Digital Guardian for print, USB, and classified file protection, and add dope.security on the endpoint for web security and AI governance: Cloud Application Control for corporate AI tenants, Dopamine DLP for prompts and uploads, and CASB Neural for overshared files in OneDrive and Google Drive, all in one console.