CurrentWare Data Loss Prevention

CurrentWare Data Loss Prevention is endpoint DLP software for organizations that need to restrict risky device and cloud activity while retaining file-transfer records. It suits teams managing Windows, macOS and Linux endpoints that want either cloud or self-hosted console deployment. Its breadth is a strong fit for operational controls, but paid subscriptions and a sales-led on-premises option make it less appealing to buyers seeking simple, fully priced entry.

Overview

CurrentWare brings endpoint monitoring, removable-device rules and cloud-transfer restrictions together in one console. Its useful distinction is the combination of controls and attributable file logs: teams can record who moved or changed a file, on which machine, when, and where it went. Monitoring continues when devices are away from the corporate network, which matters for distributed endpoints. The trade-off is that standalone on-premises pricing requires contacting Sales.

Founded in 2003 and headquartered in Canada, CurrentWare serves government organizations, schools, hospitals, libraries and businesses. Subscriptions include ongoing software updates and direct support.

Key features

Endpoint monitoring: The agent monitors copying, pasting, printing, screen capture and writes to removable media, including off-network activity. That gives administrators visibility into common routes for moving data, though it does not by itself explain how incidents are investigated.

Device rules: AccessPatrol can block, allow or make read-only USB storage, external drives, SD cards, optical media, Bluetooth, Wi-Fi and mobile devices. The range supports fine-grained device policies rather than a single USB-only switch.

File activity logs: Logs capture files copied, moved, renamed or deleted on endpoints or removable devices, with user, machine, timestamp, filename and destination. Those fields make the records more useful for audit review than an activity alert without attribution.

Cloud and web controls: BrowseControl and AccessPatrol can block uploads and downloads to unmanaged cloud apps such as Google Drive and Dropbox. This helps close a transfer route that device restrictions alone cannot address.

Identity and SIEM links: User and group synchronization with Active Directory or Microsoft Entra ID lets policies follow existing organizational structures. Logs can be exported in CEF to Splunk, QRadar, LogRhythm or Elastic, useful for teams centralizing security events.

Administrative safeguards: Password protection, TOTP two-factor authentication, single sign-on, role-based access control, custom retention, HTTPS and SQL Transparent Data Encryption support controlled administration and data handling.

Compliance alignment: Implemented controls align with ISO 27001/27002, NIST 800-171, the NIST Cybersecurity Framework and CyberSecure Canada Baseline Controls. Alignment is useful context for governance, not a substitute for an organization’s own compliance assessment.

Pricing

CurrentWare is paid software with no free plan and a 14-day trial. The published starting point is $1440 USD per year; the named plans are priced monthly with annual billing:

AccessPatrol (Standalone): $12 a month (billed annual) for USB/device control and DLP. It is the narrower choice for buyers focused on endpoint and removable-device controls. Standalone on-premises pricing requires contacting Sales.

Full CurrentWare Suite: $20 a month for AccessPatrol, BrowseReporter, BrowseControl and enPowerManager. It costs more but adds the other three named products, making it the more suitable option for organizations wanting the broader suite rather than standalone device control.

Both plans are subscription offerings, and updates and direct support are included. No seat quota or renewal term beyond annual billing is stated, so buyers should confirm those terms before committing.

Platforms

The endpoint client supports Windows, macOS and Linux. The management console can run in CurrentWare Cloud or on the customer’s own server, giving organizations a choice between hosted management and self-hosting. The broader platform listing also includes web access.

Who it's for

CurrentWare is a credible fit for organizations that need endpoint and cloud-transfer controls alongside records detailed enough to support audit review. Schools, hospitals, government bodies, libraries and businesses are among its target customers. It is particularly relevant where policy needs to account for off-network endpoints, varied removable media and existing directory groups. Buyers who need only email DLP, or who require a free product, should consider other options.

Pros and cons

Pro: File logs tie activity to a user, machine, time, filename and destination, providing practical context for investigations and audits.

Pro: Monitoring works off-network, and device controls cover more than USB storage, extending policies to Bluetooth, Wi-Fi and mobile devices.

Pro: Cloud upload/download controls, directory synchronization and CEF export connect endpoint policy to common cloud and security operations workflows.

Con: There is no free plan, and the trial lasts 14 days, limiting evaluation time for teams with a lengthy procurement process.

Con: Standalone on-premises pricing requires a sales inquiry, making that deployment harder to budget from the outset.

Con: The Full CurrentWare Suite bundles four products; buyers who need only AccessPatrol may not benefit from paying for the broader package.

Alternatives

For adjacent products, see Insider Risk Management Software, Workforce Analytics Software and Data Loss Prevention Software.

Proofpoint Email DLP and Encryption is a paid option for readers looking for email DLP and encryption rather than CurrentWare’s endpoint and device-control emphasis.

Teramind Insider Risk Management is worth considering for a reader seeking an insider-risk product with a free trial and an Enterprise plan that includes tailored deployment assistance, custom reporting and behavior-rule configuration, premium support and an SLA.

Cyberhaven Insider Risk Management is another paid insider-risk alternative.

Safetica Insider Risk Management may suit buyers who prefer per-user annual pricing: Standard is $72 a year and includes five reports, five admin accounts and 12 months of data retention; Premium is also offered.

Anexet Insider Threat Detection offers Standard and Advanced plans for readers considering a different paid insider-threat detection product.

DTEX Insider Risk Management is a paid alternative for buyers evaluating insider-risk management.

NetClean ProActive is another paid option to compare.

Veriato Insider Risk Management may suit organizations willing to seek a custom quote; its IRM offering has a 20-user minimum.

Verdict

Choose CurrentWare if your organization needs to control endpoint devices and unmanaged cloud transfers while keeping attributable file activity records across Windows, macOS and Linux. Its combination of off-network monitoring, broad device rules and deployment choice is the main reason to shortlist it. Look elsewhere if you need a free tier, a plainly priced on-premises standalone purchase, or a narrower email-focused DLP product.