Acra vs Confidencial
Acra
cossacklabs.com
Confidencial
confidencial.ioSide by side
| Figure | Acra | Confidencial |
|---|---|---|
| Price from | $833.33/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | — | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Cloud Encryption Software | 9.5 (#1) | 7.6 (#11) |
| Deployment | Server components are distributed as Linux packages, Docker images and source builds, with Kubernetes-compatible images. | Confidencial offers self-hosted, hybrid, and hosted deployment; self-hosted supports cloud or on-premises environments and air-gapped setups. |
| Headquarters | London, United Kingdom | Menlo Park, California, United States |
| Key management | Key utilities support generation, export, backup, rollback and enterprise key rotation without re-encrypting data. | Encryption keys are generated and held in the customer’s key management service, including AWS KMS and Azure Key Vault. |
| What it does | Acra is a database security suite that protects sensitive fields and records throughout distributed applications’ data lifecycles. | Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data. |
Plans
Acra
- Acra Community EditionFree
- Acra Enterprise Edition$10,000 a year
- Acra bespoke solutionPriced on request
In their own words
Acra
Acra protects sensitive data in SQL and NoSQL databases, web applications and backend applications. It offers field-level and searchable encryption, tokenization and data masking. Teams can deploy it as a transparent SQL proxy, an HTTP/gRPC encryption API or client-side SDKs. AcraServer supports PostgreSQL and MySQL wire protocols, including MySQL 5.7+, PostgreSQL 9.4+ and MariaDB 10.3; listed NoSQL and KV stores include MongoDB, Redis, Cassandra and TimescaleDB. Key-management integrations include Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz and HSMs. Acra can detect requests for planted poison records or honeytokens, raise alarms and halt decryption. It provides security logging for SIEM/SOC analytics and a crypto-signed audit log. Server components run on Linux, with Docker and Kubernetes-compatible images documented; the maker describes Acra as cloud-agnostic and actively supported on Google Cloud Platform, AWS and DigitalOcean. Windows clients can connect to Acra on Linux, but server components should not run on Windows. Community Edition is free forever for non-profit and business use; Enterprise Edition starts at $10,000 a year, with price dependent on deployments and requested features.
Confidencial
Confidencial protects sensitive information at field, paragraph, or cell level while keeping controls attached to the data. Selective encryption can leave ordinary document content readable while protecting designated fields. Discover scans environments and classifies sensitive fields across more than 40 file types. Shield applies policy-based encryption, tokenization, redaction, deletion, or archiving. AI Guard protects retrieval-augmented generation, fine-tuning, and long-context workflows through sensitive-field tokenization and output filtering. Exchange handles sending, requesting, and signing protected files with access policies, activity tracking, and revocation. Transfers support up to 1 TB per send and more than 40 file types; external recipients can use a limited portal without accounts or installation at no cost. Deployment may be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys remain in the customer’s key-management service, including AWS KMS and Azure Key Vault.