[ad_1]
eSecurity Planet content material and product suggestions are editorially impartial. We could earn cash once you click on on hyperlinks to our companions. Study Extra.
Encryption software program are safety instruments that obfuscate knowledge to render it unreadable and not using a decryption key. Encryption protects knowledge in opposition to unauthorized entry or theft, but one of the best software to select relies upon closely on the use case and the answer’s match with present wants and sources. In my analysis of instruments, I chosen three prime options in 5 encryption classes: free file sharing, enterprise file sharing, e mail, software layer, and end-to-end encryption.
The highest encryption options are:
Prime Free Encrypted File Sharing
- 7-Zip: Greatest for worldwide use
- GnuPG: Greatest for passwordless sharing
- VeraCrypt: Greatest for ultra-private sharing
Prime Enterprise File Sharing Encryption
Prime E mail Encryption
Prime Software Layer Encryption
Prime Finish-to-Finish Encryption
Featured Companions: Cybersecurity Software program
Prime Encryption Software program Comparability
The next desk offers the kind of knowledge encrypted and the pricing for every prime resolution:
| File & Folder Encryption | Full-Disk Encryption | E mail Encryption | App Layer Encryption | Month-to-month Price | |
|---|---|---|---|---|---|
| 7-Zip | ✔️ | ❌ | ❌ | ❌ | Free |
| GnuPG | ✔️ | ❌ | ❌ | ❌ | Free |
| VeraCrypt | ✔️ | ❌ | ❌ | ❌ | Free |
| AxCrypt | ✔️ | ❌ | ❌ | ❌ | $12/person |
| NordLocker | ✔️ | ❌ | ❌ | ❌ | $29.99/2 TB |
| Development Micro Endpoint Encryption | ✔️ | ✔️ | ❌ | ❌ | • Perpetual License: $100/person • Annual Renewal: $20/person |
| Cisco | ❌ | ❌ | ✔️ | ❌ | $2.08/person |
| Paubox | ❌ | ❌ | ✔️ | ❌ | • Normal $37.70/person • Plus: $76.70/person • Premium: $89.70/person |
| Proton Mail | File sharing solely | ❌ | ✔️ | ❌ | • Necessities: 7.99/person • Enterprise: $12.99/person • Enterprise & Non-Revenue: contact for customized quotes |
| Opaque | ❌ | ❌ | ❌ | ✔️ | Contact for pricing |
| Thales | ❌ | ❌ | ❌ | ✔️ | Contact for pricing |
| Vaultree | ❌ | ❌ | ❌ | ✔️ | Contact for pricing |
| IBM Safety Guardium | Software Servers | ❌ | ❌ | ✔️ | Contact for pricing |
| OpenText Voltage | File sharing solely | ❌ | ✔️ | ✔️ | Contact for pricing |
| Virtru | File sharing solely | ❌ | ✔️ | ❌ | • Starter: $119/5 customers • Enterprise: $219/5 customers |
✔️=Sure ❌=No/Unclear
Prime Free Encrypted File Sharing Software program
The highest free encrypted file sharing software program present an answer to encrypt single recordsdata or folders for safe sharing with others. Small workplace and residential workplace (SOHO) customers or customers with restricted sources ought to select considered one of these three free file sharing encryption instruments: 7-Zip, GnuPG, or VeraCrypt.
7-Zip – Greatest for Worldwide Encrypted Free File Sharing
7-Zip is a free file sharing software that delivers robust encryption safety with worldwide acceptance. It presents help for 89 totally different overseas languages and most main character units. First launched in 1999, the software recurrently updates to repair bugs, add options, or to extend the variety of supported languages.
Why We Picked It
I chosen 7-Zip as a result of I’ve used it in skilled settings for over 15 years to share recordsdata with internationally based mostly colleagues, together with forensic engineers and different security-sensitive professionals. The tried-and-true monitor report and vast acceptance of this software ensures minimal person error when sharing recordsdata throughout a spectrum of abilities, working methods, and languages.
Professionals
Cons
GnuPG – Greatest for Passwordless Encrypted Free File Sharing
The GNU Privateness Guard (GnuPG or GPG) is a free file sharing software that additionally offers a novel choice to generate public encryption keys to share recordsdata with out exchanging passwords. With a monitor report of almost 30 years of use, the software continues to be trusted, up to date, and constructed into different commercially out there instruments.
Why We Picked It
I chosen GnuPG due to the shared public encryption key choice that allows passwordless safe file sharing. The software, which comes pre-installed in most Linux distributions, additionally helps Home windows and macOS to allow file sharing with a broad variety of customers. GnuPG implements the heavily-tested Open Fairly Good Privateness (OpenPGP) open-source encryption normal.
Professionals
Cons
VeraCrypt – Greatest for Extremely-Personal Free File Sharing
VeraCrypt is an open-source free file sharing encryption software program with distinctive capabilities. One function can obfuscate file sorts which labels the encrypted file to look like a unique file sort. An alternative choice makes use of two totally different passwords for an encrypted container to indicate totally different content material relying upon the password used. Customers with robust secrecy wants can mix options to cover knowledge successfully even in opposition to doubtlessly involuntary password disclosure.
Why We Picked It
I selected VeraCrypt as a result of it presents distinctive privateness options that can be utilized by a wide range of customers on Home windows, macOS, and Linux methods. Developed by the French safety consultants from Idrix, VeraCrypt forks off of the favored, however discontinued, open supply TrueCrypt encryption software and continues to be developed and improved by Idrix and the VeraCrypt group.
Professionals
Cons
Prime Enterprise File Sharing Encryption Software program
The very best enterprise file sharing encryption software program delivers centralized management and extra options required for extra skilled community safety that are unavailable from free options. The highest three choices embody AxCrypt, NordLocker, and Development Micro Endpoint Encryption.
AxCrypt – Greatest for Simplified Enterprise File Sharing
AxCrypt is an area file encryption and sharing software that gives simplified administrator administration of encryption grasp keys and subscription licenses. The software helps laptops and desktops utilizing Home windows or macOS in addition to iOS or Android cell gadgets. AxCrypt encrypts native vaults on the gadgets or particular recordsdata and folders for sharing.
Why We Picked It
I selected AxCrypt based mostly on excessive buyer satisfaction rankings, ease of deployment, and its fundamental performance to offer native drive and shared file encryption. Admins will recognize the easy administration that pushes extra tedious file administration duties to finish customers.
Professionals
Cons
NordLocker – Greatest for Cloud-Primarily based Enterprise File Sharing
NordLocker is a enterprise file sharing encryption software that deploys a software-as-a-service (SaaS) resolution for companies allowed to make use of cloud-hosted file sharing platforms. The administration console enforces coverage and offers restoration choices for forgotten passwords. NordLocker synchronizes cloud vaults with designated person vaults and makes NordLocker a sensible choice for small companies that need fast deployment and centralized management.
Why We Picked It
I discover that NordLocker offers the standard turn-key expertise anticipated from the Nord household of merchandise that additionally contains NordVPN, NordLayer, and NordPass. Customers can preserve separate local-only encrypted vaults limitless in dimension or share recordsdata by means of designated cloud-synch folders. Directors can handle encryption keys within the cloud for improved management, safety, and restoration capabilities.
Professionals
Cons
Development Micro Endpoint Encryption – Greatest for Managed Enterprise File Sharing
Development Micro Endpoint Encryption is a full-disk encryption software that may additionally present safe enterprise file sharing. It deploys as an agent to ship enterprise-wide, centrally managed, and absolutely enforceable full disk, file, folder, and detachable media encryption. Admins can deploy brokers to each firm and user-owned gadgets to fulfill formal encryption and compliance reporting necessities.
Why We Picked It
I chosen Development Micro’s Endpoint Encryption resolution as a result of it permits centralized administration management and may implement compliance necessities equivalent to full drive encryption and safe file sharing. Customers can’t evade encryption or expose the enterprise to pointless threat for the sake of comfort. The answer helps widespread PC and macOS gadgets and extends encryption features to USB flash or transportable exhausting drives.
Professionals
Cons
Prime E mail Encryption Software program
The highest e mail encryption software program present safe e mail, seamless built-in experiences for customers, and centralized reporting and management. The highest common e mail merchandise, Microsoft 365 and Google Mail, provide encryption choices that fail to encrypt e mail despatched to incompatible mail servers. To fulfill secrecy or compliance necessities with out investing in a safe gateway take into account an e mail encryption software from Cisco Safe E mail, Paubox E mail Suite, or Proton Mail.
Cisco Safe E mail Encryption Service: – Greatest GRC for In depth Options
Cisco’s Safe E mail Encryption Service offers a fast, straightforward, and cheap plug-in resolution for the numerous customers that depend on Microsoft Outlook and 365 e mail. It makes use of registered envelopes and a Cisco-hosted non permanent vault to make sure that solely the right recipient receives each the message and the decryption key wanted to learn the encrypted message.
Why We Picked It
I chosen Cisco’s Safe E mail Encryption Service as a result of it delivers a simple resolution for e mail encryption wants that customers will instantly belief because of the Cisco model identify. The service makes use of a segregated e mail service that shortly integrates to customers’ e mail accounts for minimal disruption. It’s out there as a standalone service or an built-in function of Cisco Safe E mail gateways.
Professionals
Cons
Paubox E mail Suite – Greatest for HIPAA Compliance E mail Encryption
The Paubox E mail Suite is an e mail encryption software optimized for compliance with the USA’ HIPAA rules to guard healthcare info from unauthorized entry. Though the Normal choice offers efficient e mail encryption, the Plus and Premium licenses add further options equivalent to geofencing, spam filtering, malware safety, knowledge loss prevention (DLP), and voicemail transcription.
Why We Picked It
I selected Paubox for this checklist as a result of it helps all main enterprise e mail platforms, implements shortly, and delivers necessary safety and encryption features even with the bottom stage license. Greater than 5,000 prospects belief the answer and ship greater than 99 million emails month-to-month.
Professionals
Cons
Proton Mail – Greatest for Full-Area E mail Encryption
Proton Mail is an encrypted e mail resolution to safe a whole e mail area or firm. The enterprise license for this Swiss-based vendor bundles safe e mail, privateness, calendar, and VPN options to allow further choices for safe entry and encrypted file sharing.
Why We Picked It
I chosen Proton Mail for its privateness fame and concentrate on a complete encryption resolution. Though based in 2014 by means of crowdfunding by 10,000 people, the centralized administration will fulfill most enterprise wants even for the Mail Necessities license. The Enterprise and Enterprise licenses ship much more worth with enterprise stage options equivalent to customized DNS, built-in two-factor authentication, and devoted account managers.
Professionals
Cons
Prime Software Layer Encryption (ALE) Software program
The very best software layer encryption (ALE) options encrypt software knowledge to guard the trendy app setting in opposition to breaches from uncovered containers, net servers, database servers, and third-party companies (purchasing carts, bank card processing, and so forth.). The highest ALE options to contemplate embody Opaque Methods, Thales CipherTrust, and Vaultree.
Opaque Gateway – Greatest ALE for Multi-Get together AI Collaboration
Opaque System’s Gateway offers a novel ALE resolution by means of encryption protection in depth. The answer delivers a platform to share encrypted knowledge collaboratively that begins with {hardware} enclaves that segregate encrypted knowledge in reminiscence, even from the working system or the hypervisor. It then provides further layers of encryption distinctive to every get together for collaborative calculations and evaluation of delicate knowledge with out sharing the information itself.
Why We Picked It
Opaque Methods earns my choice by offering a novel resolution to allow safe and consolidated synthetic intelligence (AI) evaluation on segregated knowledge units. Completely different corporations can combine knowledge or an organization can combine knowledge from a number of regulated sources (EU, California, and so forth.) with the absolutely encrypted knowledge protected in opposition to leak or commingled knowledge dangers.
Professionals
Cons
Thales CipherTrust – Greatest ALE for In-Home App Knowledge Encryption
The Thales CIpherTrust Knowledge Safety Platform is an ALE resolution that not solely encrypts databases, but in addition tokenizes knowledge inside the appliance and permits encryption key administration. These capabilities prolong encryption protection additional alongside knowledge flows between apps, databases, and storage for extra full safety. Prospects should purchase parts individually for partial options or buy pre-packaged or cloud-services bundles.
Why We Picked It
I picked the Thales resolution as a result of it offers versatile choices for fully-controlled software safety all through the event and deployment course of. Their ALE platform combines Vormetric Software Encryption know-how with the SafeNet ProtectApp resolution with centralized administration and software program improvement and operations (DevOps) integration.
Professionals
Cons
Vaultree – Greatest ALE for Totally-Encrypted Database Queries
Vaultree encrypts knowledge for storage in databases after which encrypts future queries as properly to carry out encrypted looking. The Vaultree software program improvement package (SDK) offers plug-and-play encryption for any database shopper.
Why We Picked It
I chosen Valutree for its absolutely homomorphic knowledge encryption and question capabilities in addition to its concentrate on the supply of a really particular service (encrypted queries). This makes their resolution simpler to grasp to shortly decide match for specialised database search wants.
Professionals
Cons
Prime Finish-to-Finish Encryption Options
The highest end-to-end encryption options not solely defend knowledge at relaxation, by means of transit, and even throughout use, in addition they present centralized administration, encryption key administration, and safety software integrations. These prime multifaceted options embody IBM Safety Guardium, OpenText Voltage, and Virtru.
IBM Safety Guardium Encryption – Greatest for Finish-to-Finish App Knowledge Encryption
IBM’s Safety Guardium Encryption suite offers end-to-end safety for software knowledge throughout servers, functions, databases, and containers in addition to choices to handle encryption keys. These instruments mix to totally encapsulate software knowledge at relaxation, in movement, throughout analytics, and upon receipt from web sites. In addition they combine with different IBM enterprise choices equivalent to certificates administration and knowledge safety options.
Why We Picked It
I selected IBM Safety Guardium Encryption due to the software’s trade fame and complete capabilities to guard software knowledge in a number of use instances. The answer not solely encrypts knowledge throughout the software layer, but in addition offers choices for built-in software infrastructure encryption (containers, servers, and so forth.). IBM’s analysis into absolutely homomorphic encryption provides additional credibility to the corporate’s present model power.
Professionals
Cons
OpenText Voltage – Greatest for Finish-to-Finish Self-Hosted Encryption
The OpenText Voltage end-to-end encryption resolution encompasses a full vary of enterprise wants equivalent to file encryption, encrypted e mail, cell encryption, safe file collaboration, PCI fee encryption, key administration, and extra. OpenText offers versatile licensing choices and prospects can deploy the software program domestically, within the cloud, or in hybrid environments.
Why We Picked It
I picked OpenText Voltage as a result of its many alternative encryption options will defend the widest vary of enterprise wants. Every resolution integrates with one another and third get together instruments for enterprise-friendly centralized management, coverage consistency, and consolidated reporting to present safety instruments. OpenText Voltage was previously often known as Micro Focus Voltage or HPE Voltage.
Professionals
Cons
Virtru – Greatest for Finish-to-Finish Zero Belief Entry Governance
The Virtru end-to-end encryption resolution offers clear pricing and zero-trust entry by wrapping knowledge with trusted knowledge format (TDF) format recordsdata. TDF recordsdata granularly monitor permissions, expirations, and revocations in addition to stay absolutely encrypted to offer end-to-end entry governance even after supply.
Why We Picked It
I chosen Virtru due to its clear pricing, encryption capabilities, and compliance reporting help. Based in 2011, the answer builds on TDF normal developed by Virtru co-founder Will Ackerly and at present serves over 6,700 prospects. Not like easy file sharing and e mail encryption options, Virtru routinely encrypts and not using a hosted portal requirement, permits self-hosted options, and offers encryption key administration options.
Professionals
Cons
Quantum Encryption Options
Regardless of some availability, quantum chips undergo errors and stability points so encryption cracking with quantum computer systems stays a number of know-how generations away. Nonetheless,many organizations with excessive safety considerations look to develop quantum-safe cryptography ASAP in preparation for this eventuality.
The US Nationwide Institute of Requirements and Expertise (NIST) accredited quantum-safe cryptographic algorithms and different analysis informs the next preliminary quantum resistant encryption options:
For these unwilling to turn into an early adopter, present encryption requirements can stay quantum-resistant by means of bigger key dimension use, layers of encryption, and cautious encryption key administration.
Select the Greatest Encryption Software program for Your Enterprise
The highest profit for all encryption is that the software program scrambles knowledge to render breached info unreadable. Nonetheless, encryption instruments concentrate on particular forms of knowledge and totally different instruments provide totally different ranges of safety, compliance help, integration complexity, upkeep, and management.
The very best encryption software program will maximize the professionals(improved safety and decreased breach damages) in addition to reduce the cons (slower efficiency and elevated useful resource drain). Fortuitously, the four-phased course of to determine, match, evaluate, and check potential options offers an efficient information to determine one of the best encryption software program for your enterprise wants.
Determine True Encryption Wants & Minimal Necessities
Step one requires an inner wants evaluation to find out the necessities that any potential encryption resolution should meet.
- Key knowledge: Look at and classify the information that requires safety, find knowledge storage, monitor knowledge transmission channels, decide what or who accesses key knowledge.
- Methods: Test for alternatives to boost encryption in key-data-related methods equivalent to encrypting the storage drives that host delicate databases.
- Compliance rules: Examine knowledge in opposition to potential rules (privateness, fee info, and so forth.) and decide required encryption, exams, and studies.
- Organizational wants: Take into account that minimal compliance necessities (ex: AES-128) may not meet inner threat discount wants in comparison with stronger encryption.
- Technical sources: Look at inner sources realistically to find out the out there bandwidth, abilities, and infrastructure limitations into which an answer should match.
Match Encryption Candidates Towards Recognized Wants
After inner want identification, test the potential options available in the market to find out what encryption instruments fulfill the necessities.
- Encryption class: Choose an answer that matches the recognized knowledge, system, compliance rules and company wants (file encryption for recordsdata, and so forth.).
- Encryption necessities: Select encryption options that match minimal necessities and supply choices for even stronger encryption algorithms or strategies.
- Reporting necessities: Look at reporting choices to test if the answer can adequately detect utilization or produce documentation to fulfill compliance necessities
- Technical sources: Distinction the software necessities in opposition to the bandwidth and technical capabilities of inner groups and repair supplier companions.
- Monetary sources: Examine preliminary and ongoing licensing prices, anticipated labor prices, and any potential further infrastructure prices in opposition to anticipated budgets.
Examine Encryption Options That Matched Necessities
variety of instruments ought to match the necessities, so the subsequent step is to check these options in opposition to one another to create a ranked checklist of contenders.
- Adoption necessities: Estimate set up, integration, and deployment necessities for time, problem, technical stage, and expense.
- Upkeep necessities: Examine the parts to keep up, inner sources wanted, replace developments, and what can be maintained by the seller.
- Person expertise: Look at the person set up and use expertise after which test in opposition to the person base technical stage and tolerance for course of adjustments.
- Non-essential choices: Listing the choices and options above minimal necessities that will enhance safety or admin and person expertise.
- Useful resource calls for: Whole the adoption, upkeep, and licensing monetary prices and time calls for.
Check the Prime-Ranked Encryption Options
A comparability yields a brief checklist of contending encryption options, so now comes the check drive to see if the idea matches the precise efficiency.
- Admin expertise: Confirm that the extent of complexity to handle customers, implement encryption, and handle encryption keys matches expectations and necessities.
- Person expertise: Affirm that customers can simply undertake the brand new encryption software and test to make sure customers can’t simply evade the software.
- Efficiency hit: Set up the answer on typical person and infrastructure methods to confirm minimal or not less than acceptable system useful resource slowdown.
- Customer support: Test that the assistance a vendor can present in case of bother matches the wants and expectations of the customers and admin group.
- Safety stack match: Confirm that the encryption resolution can combine with the present safety stack for defense, monitoring, and reporting.
On the finish of this course of, decide your favourite resolution that handed the entire remaining exams. Simply remember the fact that encryption solely offers one layer of safety and doesn’t present a magic resolution that eliminates all different safety dangers.
How I Chosen This Listing of Encryption Options
To develop this checklist of 15 options, I first researched encryption classes to find out the key enterprise wants and encryption sorts. Then, based mostly upon product evaluations, trade discussions, and trade rankings, the checklist was narrowed to the highest candidates based mostly on software options, worth, prominence, integrations, centralized encryption controls, key administration, and different out there choices.
Encryption is regularly added as options of different instruments equivalent to endpoint detection and response. Encryption accelerating {hardware} can be added to numerous laptop methods as choices to boost safety. Nonetheless, this text expects potential encryption software consumers to be centered on standalone options as a substitute of options or choices. Due to this fact, I excluded such partial options from this checklist.
Backside Line: Begin with In the present day’s Necessities, However Look Forward
Breached knowledge prices a lot extra to an organization when unencrypted. Encrypted breaches defend in opposition to regulatory disclosure necessities, lawsuits, regulatory fines, and extra. Put encryption in place now to guard in opposition to a breach.
Nonetheless, future quantum computing advances will break the minimal encryption requirements in place at the moment. In the present day’s protected encrypted knowledge breach could turn into tomorrow’s uncovered knowledge. Begin investigating alternatives to use extra superior encryption, apply a number of layers of encryption, or different further safeguards at the moment to defend in opposition to future threats.
To deploy efficient encryption, take into account studying about greatest practices for robust encryption.
[ad_2]
