Acra vs Fortanix Data Security Manager
Acra
cossacklabs.com
Fortanix Data Security Manager
fortanix.comSide by side
| Figure | Acra | Fortanix Data Security Manager |
|---|---|---|
| Price from | $833.33/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | Yes | — |
| Web | — | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Cloud Encryption Software | 9.5 (#1) | 7.7 (#10) |
| Deployment | Server components are distributed as Linux packages, Docker images and source builds, with Kubernetes-compatible images. | Secrets management works on-premises, natively in the cloud, and across hybrid and multicloud environments. |
| Headquarters | London, United Kingdom | Santa Clara, California, United States |
| Support | The maker offers multiple support tiers and describes integration assistance, solution support, and 24/7 solution support among its offerings. | Fortanix provides customer support, documentation, downloads, REST API documentation, FAQs, a technical support program, and professional services links. |
| What it does | Acra is a database security suite that protects sensitive fields and records throughout distributed applications’ data lifecycles. | DSM lets DevOps and security teams store, control, and manage secrets, credentials, certificates, API keys, and tokens outside source code. |
Plans
Acra
- Acra Community EditionFree
- Acra Enterprise Edition$10,000 a year
- Acra bespoke solutionPriced on request
Fortanix Data Security Manager
- Data Security Manager 30-days Free TrialFree
In their own words
Acra
Acra protects sensitive data in SQL and NoSQL databases, web applications and backend applications. It offers field-level and searchable encryption, tokenization and data masking. Teams can deploy it as a transparent SQL proxy, an HTTP/gRPC encryption API or client-side SDKs. AcraServer supports PostgreSQL and MySQL wire protocols, including MySQL 5.7+, PostgreSQL 9.4+ and MariaDB 10.3; listed NoSQL and KV stores include MongoDB, Redis, Cassandra and TimescaleDB. Key-management integrations include Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz and HSMs. Acra can detect requests for planted poison records or honeytokens, raise alarms and halt decryption. It provides security logging for SIEM/SOC analytics and a crypto-signed audit log. Server components run on Linux, with Docker and Kubernetes-compatible images documented; the maker describes Acra as cloud-agnostic and actively supported on Google Cloud Platform, AWS and DigitalOcean. Windows clients can connect to Acra on Linux, but server components should not run on Windows. Community Edition is free forever for non-profit and business use; Enterprise Edition starts at $10,000 a year, with price dependent on deployments and requested features.
Fortanix Data Security Manager
Fortanix Data Security Manager (DSM) gives DevOps and security teams a way to manage secrets, credentials, certificates, API keys and tokens outside source code. Secrets management can run on-premises, in the cloud, or across hybrid and multicloud environments. DSM provides REST APIs and supports standards and technologies including OAuth, OpenID (SAML), LDAP, JWT, PKI, Kubernetes and Docker.
Documented CI/CD integrations include HashiCorp Vault, Kubernetes Secret Store CSI Driver, Ansible, Jenkins, GitHub, GitLab, CyberArk, Delinea and Azure DevOps. Fortanix says the service stores secrets in a FIPS 140-2 Level 3 certified HSM and uses Intel SGX and Runtime Encryption technology. Role-based access controls, safeguards against unauthorized password changes, simultaneous-login alerts and audit logs support access oversight. Listed certifications include FIPS 140-2 Level 3, PCI-DSS, ISO 27001, CIS and SOC 2 Type 2. The DSM SaaS trial includes the full feature set for 30 days at free, with no credit card required to start. No numeric Enterprise price is listed.