Acra vs IronCore Labs SaaS Shield
Acra
cossacklabs.comIronCore Labs SaaS Shield
ironcorelabs.comSide by side
| Figure | Acra | IronCore Labs SaaS Shield |
|---|---|---|
| Price from | $833.33/mo | $1,954/mo |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | Yes | — |
| Web | — | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 3 |
| Spec score · Cloud Encryption Software | 9.5 (#1) | 8.0 (#8) |
| Deployment | Server components are distributed as Linux packages, Docker images and source builds, with Kubernetes-compatible images. | The Tenant Security Proxy is a Docker container installed in the customer’s infrastructure; encryption can be integrated through proxies or SDKs. |
| Intended users | The maker describes Community Edition as best for prototyping and small-scale projects and Enterprise Edition as suited to large-scale and enterprise deployments. | The maker positions SaaS Shield for SaaS providers seeking per-tenant security and customer-managed keys, including businesses selling to larger enterprise customers. |
| Key management integrations | The maker lists Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz, and HSMs for key storage and management integration. | Listed KMS integrations include Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault. |
| Purpose | Acra protects sensitive data in SQL and NoSQL databases, web applications, and backend applications. | SaaS Shield adds application-layer encryption, data controls, and data access visibility to cloud applications, including multi-tenant SaaS apps. |
| Support | The maker offers multiple support tiers and describes integration assistance, solution support, and 24/7 solution support among its offerings. | The pricing page lists Community & Docs support for Free Trial, Email for Pro, and 24/7 Phone for Enterprise. |
Plans
Acra
- Acra Community EditionFree
- Acra Enterprise Edition$10,000 a year
- Acra bespoke solutionPriced on request
IronCore Labs SaaS Shield
- Free TrialFree
- Pro$1,954 a month
- EnterprisePriced on request
In their own words
Acra
Acra protects sensitive data in SQL and NoSQL databases, web applications and backend applications. It offers field-level and searchable encryption, tokenization and data masking. Teams can deploy it as a transparent SQL proxy, an HTTP/gRPC encryption API or client-side SDKs. AcraServer supports PostgreSQL and MySQL wire protocols, including MySQL 5.7+, PostgreSQL 9.4+ and MariaDB 10.3; listed NoSQL and KV stores include MongoDB, Redis, Cassandra and TimescaleDB. Key-management integrations include Amazon KMS, Google Cloud KMS, HashiCorp Vault, Keywhiz and HSMs. Acra can detect requests for planted poison records or honeytokens, raise alarms and halt decryption. It provides security logging for SIEM/SOC analytics and a crypto-signed audit log. Server components run on Linux, with Docker and Kubernetes-compatible images documented; the maker describes Acra as cloud-agnostic and actively supported on Google Cloud Platform, AWS and DigitalOcean. Windows clients can connect to Acra on Linux, but server components should not run on Windows. Community Edition is free forever for non-profit and business use; Enterprise Edition starts at $10,000 a year, with price dependent on deployments and requested features.
IronCore Labs SaaS Shield
IronCore Labs SaaS Shield adds application-layer encryption, data controls, and access visibility to cloud applications, including multi-tenant SaaS products. It uses a separate encryption key for each tenant to help protect data held in shared storage, and deterministic encryption enables exact-match searches over encrypted data. Customers can retain control of their keys, with support for customer-managed configurations and integrations with Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault. The Tenant Security Proxy runs as a Docker container in customer infrastructure, and encryption can be connected through proxies or SDKs. Listed storage and search proxies cover Amazon S3, OpenSearch, and Elasticsearch. SaaS Shield supports rotation and re-keying of keys, changes to algorithms and key sizes, and separating key storage from data across cloud providers. The maker describes a design that keeps sensitive data and keys from its view. A free trial covers one tenant; Pro starts at $1,954/mo (annual) plus $25 per tenant for up to 100 tenants. There is no free plan.