What Is Forcepoint? Forcepoint ONE and Data Security Cloud, Explained for 2026

Forcepoint shows up on a lot of security shortlists, usually because someone on the team remembers Websense or because its DLP carries a long institutional reputation. Then the evaluation starts and the questions get harder. What happened to Forcepoint ONE? Is Forcepoint a web gateway company or a data security company now? And what do you actually need to license to stop an employee pasting customer data into a personal ChatGPT account? This is the straight answer on what Forcepoint is heading into 2027, with sources.

If you are already past the "what is it" stage, the buyer-side view lives in our honest comparison of the top Forcepoint alternatives.

The short answer

Forcepoint is an Austin, Texas-based cybersecurity vendor, formerly Websense, that sells data security and web security products. Its flagship cloud platform used to be called Forcepoint ONE. Forcepoint has since renamed it Forcepoint Data Security Cloud, and it now bundles DSPM, DLP, data detection and response, web security, cloud app security (CASB), email DLP, remote browser isolation, and risk-adaptive protection under one policy framework.

Forcepoint's real strength is data classification and DLP. In 2026 it doubled down on that with AI data security launches. The trade-off is weight: it is a broad enterprise data security program first and a web gateway second. dope.security is the lighter, SWG-first alternative, with inspection that has run on the device since day one and AI governance built into a single console.

What is Forcepoint, exactly?

Forcepoint is what happened to Websense. Raytheon took a majority stake in Websense in 2015, and the combined business was renamed Forcepoint. Francisco Partners later bought Forcepoint from Raytheon. In July 2023, TPG agreed to buy Forcepoint's government and critical infrastructure business from Francisco Partners in a deal valued at about $2.45 billion, splitting that unit from the commercial company. Today Ryan Windham is CEO of the commercial business.

That history matters for a practical reason. The product line has been through several owners and a company split in under a decade, and roadmaps rarely survive that unchanged.

The portfolio splits into two halves:

• Data security. The DLP engine that made Forcepoint a standing name in the category, extended with DSPM and data detection and response from the 2025 Getvisibility acquisition. Forcepoint points to recognition like the IDC MarketScape for DLP (Leader, 2025).
• Web and network security. Forcepoint Web Security, CASB, and remote browser isolation, plus a separate NGFW and SD-WAN line.

Most people searching "what is Forcepoint" are trying to work out which half they are being sold.

What happened to Forcepoint ONE?

Forcepoint ONE was Forcepoint's cloud security service edge (SSE) platform: secure web gateway, CASB, and ZTNA, delivered from a large cloud footprint that Forcepoint described as more than 300 points of presence on AWS. Forcepoint's own site now says it plainly: "Forcepoint ONE is now Forcepoint Data Security Cloud."

The name change is more than branding. It tells you where Forcepoint sees its center of gravity: data security first, with web and SaaS controls as channels for enforcing data policy. If you were evaluating Forcepoint ONE as a pure SSE platform, expect the conversation to start with DSPM and DLP.

The platform was also assembled through acquisitions. When Forcepoint bought Bitglass in 2021 on top of its 2017 Skyfence purchase, Forrester warned of a "double integration whammy" as overlapping CASB codebases were merged. Forcepoint has since pushed a single-policy framework across the platform, so test how consistent policy actually feels across web, SaaS, and endpoint in your proof of concept.

What Forcepoint launched in 2026

Forcepoint shipped a lot this year, most of it aimed at AI.

• ARIA and a new endpoint agent (March 2026). ARIA is an embedded assistant that writes recommended policies in plain English. The new Data Security Everywhere agent brings data protection and web intelligence to the endpoint "without forcing traffic through a traditional proxy," and blocks sensitive data from reaching unsanctioned AI tools and personal cloud storage.
• Claude Enterprise coverage (May 2026). Forcepoint integrated with the Claude Compliance API, putting Claude Enterprise alongside Microsoft 365 Copilot and ChatGPT Enterprise in one AI security view.
• AI Data Security platform (July 2026). This launch adds real-time prompt and response inspection, DLP for AI, personal vs. corporate tenant detection for AI apps, an AI Agent Gateway for autonomous agents, and AI detection and response. Forcepoint said some of these capabilities would roll out over the following quarter, and existing customers can add them to their current Forcepoint deployment.

Credit where it is due. A year ago, Forcepoint's AI story leaned on ChatGPT Enterprise. In 2026 it covers the major assistants and agents.

How Forcepoint handles your traffic

Forcepoint now uses two enforcement points. Forcepoint Web Security and CASB inline controls run in Forcepoint's cloud, so steered traffic travels to a point of presence, gets inspected, and goes on to its destination. The 2026 endpoint agent adds protection on the device for data headed to AI tools and cloud storage.

That mix is worth mapping before you buy. Ask which controls run in the cloud and which on the device, and what happens to a laptop on hotel Wi-Fi in each case. Any request that still detours through a point of presence pays the latency tax: typically 40 to 80 milliseconds near a PoP and 150 to 400 milliseconds far from one. We worked through the arithmetic in the cloud proxy latency math.

Want to see what a detour costs on your own connection? Run the Fly-Direct Speed Test on this page to measure your live round-trip latency and compare a cloud-proxy hop with inspection on the device. Or book a 20-minute demo and we will run it with you.

What Forcepoint gets right

Forcepoint is not a weak product, and pretending otherwise would waste your time.

• Data classification depth. Forcepoint has classified sensitive data longer than most of the SSE field has existed. Organizations with heavy regulatory requirements often find its DLP policy depth hard to match.
• AI coverage breadth. Between the Claude, Copilot, and ChatGPT Enterprise integrations and the July 2026 launch, Forcepoint now covers sanctioned AI, shadow AI, and agents in one product family.
• Breadth under one contract. DSPM, DLP, web, SaaS, and email under a single vendor is simpler to procure than four vendors.

Where buyers get surprised

The surprises tend to show up after signing, not during the demo.

• It is a data security program, not a quick web gateway swap. If your goal is replacing an aging SWG, Forcepoint will likely steer you toward DSPM, classification, and DLP policy work. That is valuable. It is also a project.
• Pricing is per module and not published. The bundle you are quoted is rarely the bundle you end up needing, especially once AI Data Security features are added to an existing deployment.
• Roadmap timing. Several 2026 AI capabilities were announced as rolling out over a quarter. Test what is generally available in your tenant today, not what is on the slide.
• Two architectures to run. Cloud inspection for some controls and an endpoint agent for others means two sets of behaviors to understand and troubleshoot.

Forcepoint vs dope.security, point by point

Same goal, two different shapes.

• Starting point. Forcepoint starts from enterprise data security and extends into web and AI. dope.security starts from the secure web gateway and runs it on the device, with DLP and AI governance built in.
• Where inspection happens. Forcepoint inspects web traffic in its cloud and adds an endpoint agent for data protection. dope.security runs SSL inspection, URL filtering, Cloud Application Control, and DLP on the device, and traffic flies direct to its destination.
• Performance. dope.security delivers up to 4x performance over legacy proxy SWGs, and the agent is Mac native and Windows with under 100 MB of RAM.
• AI governance. dope.security AI Analytics shows every AI app, who used it, and whether the account was personal or enterprise-licensed. Cloud Application Control blocks the personal ChatGPT, Claude, Google, or Microsoft 365 login and allows the corporate tenant, from the same screen. The Dopamine agent answers plain-language questions about AI use in seconds.
• DLP approach. Dopamine DLP reads the document instead of matching patterns. Text is extracted on the device and classified by an LLM with zero data retention, with zero policy configuration needed to get value on day one.
• Time to value. dope.security offers an instant trial that converts to production with no reconfiguration. A Fortune 100 company scaled from 900 to more than 18,000 devices in weeks.
• Console. dope.console was built from scratch and runs dope.swg, CASB Neural, SSPM, and Dopamine DLP in one place.

A manufacturing customer made exactly this swap, and the story is in the manufacturing Forcepoint displacement case study. For the architecture contrast, see what changes when a Forcepoint replacement runs on the device.

Who should buy Forcepoint, and who should look on-device

Forcepoint fits organizations whose dominant requirement is regulated data classification, who already run Forcepoint DLP, who want DSPM and AI data security under the same contract, and who have the headcount to run a data security program.

It is the wrong shape when your real need is a fast, light web gateway for a distributed workforce, when your IT team is three people rather than thirteen, or when AI governance is a board-level ask this quarter and you need it working in days. The Forcepoint alternatives roundup lays out the field.

The bottom line on Forcepoint

Forcepoint is a capable data security vendor with a real DLP pedigree, and in 2026 it moved fast on AI. It is also a big platform with a data-first center of gravity, per-module pricing, and a mix of cloud and endpoint enforcement. If what you need is web security, AI tenant control, and DLP that run on the laptop, deploy in days, and live in one console, that is what dope.security was built to do. Start a trial from dope.security/pricing or book a 20-minute demo and bring your hardest policy with you.

Frequently asked questions

Is Forcepoint the same as Websense?

Yes, in lineage. Raytheon took a majority stake in Websense in 2015 and the company was renamed Forcepoint. Francisco Partners later acquired Forcepoint, and in 2023 TPG agreed to buy its government and critical infrastructure business. If you are migrating off an old Websense deployment, Forcepoint will point you to Data Security Cloud.

What happened to Forcepoint ONE?

Forcepoint renamed Forcepoint ONE to Forcepoint Data Security Cloud. The platform now combines DSPM, DLP, data detection and response, web security, CASB, email DLP, and remote browser isolation under one policy framework.

Can Forcepoint block personal ChatGPT while allowing the corporate account?

Forcepoint announced personal vs. corporate tenant detection for AI apps as part of its July 2026 AI Data Security launch, with some capabilities rolling out over the following quarter. Confirm availability in your tenant. dope.security does this today with Cloud Application Control, on the device, for ChatGPT, Claude, Google, and Microsoft 365.

Is Forcepoint SASE or SSE?

Forcepoint ONE was positioned as an SSE platform (SWG, CASB, and ZTNA). Under the Data Security Cloud name, Forcepoint positions itself as a data security platform, with separate NGFW and SD-WAN products for networking. Our explainer on SASE versus SSE architecture untangles the terms.

What is the best on-device alternative to Forcepoint?

dope.security is built for that swap: a fly-direct SWG with on-device SSL inspection, Dopamine DLP for file uploads and AI prompts (US Patent 12,464,023), CASB Neural for data at rest in Google Workspace and Microsoft 365, and Cloud Application Control for tenant-level SaaS access, all in one console.