Confidencial vs Fortanix Data Security Manager
Confidencial
confidencial.io
Fortanix Data Security Manager
fortanix.comSide by side
| Figure | Confidencial | Fortanix Data Security Manager |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Cloud Encryption Software | 7.6 (#11) | 7.7 (#10) |
| Deployment | Confidencial offers self-hosted, hybrid, and hosted deployment; self-hosted supports cloud or on-premises environments and air-gapped setups. | Secrets management works on-premises, natively in the cloud, and across hybrid and multicloud environments. |
| Headquarters | Menlo Park, California, United States | Santa Clara, California, United States |
| Integrations | The site lists AWS S3, Azure Blob, OneDrive, SharePoint, Box, Microsoft Entra, Okta, and Microsoft Purview integrations. | The product provides REST APIs and supports open standards including OAuth, OpenID (SAML), LDAP, JWT, and PKI, as well as Kubernetes and Docker. |
| What it does | Confidencial protects sensitive data at the field, paragraph, or cell level, with controls that travel with the data. | DSM lets DevOps and security teams store, control, and manage secrets, credentials, certificates, API keys, and tokens outside source code. |
Plans
Fortanix Data Security Manager
- Data Security Manager 30-days Free TrialFree
In their own words
Confidencial
Confidencial protects sensitive information at field, paragraph, or cell level while keeping controls attached to the data. Selective encryption can leave ordinary document content readable while protecting designated fields. Discover scans environments and classifies sensitive fields across more than 40 file types. Shield applies policy-based encryption, tokenization, redaction, deletion, or archiving. AI Guard protects retrieval-augmented generation, fine-tuning, and long-context workflows through sensitive-field tokenization and output filtering. Exchange handles sending, requesting, and signing protected files with access policies, activity tracking, and revocation. Transfers support up to 1 TB per send and more than 40 file types; external recipients can use a limited portal without accounts or installation at no cost. Deployment may be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys remain in the customer’s key-management service, including AWS KMS and Azure Key Vault.
Fortanix Data Security Manager
Fortanix Data Security Manager (DSM) gives DevOps and security teams a way to manage secrets, credentials, certificates, API keys and tokens outside source code. Secrets management can run on-premises, in the cloud, or across hybrid and multicloud environments. DSM provides REST APIs and supports standards and technologies including OAuth, OpenID (SAML), LDAP, JWT, PKI, Kubernetes and Docker.
Documented CI/CD integrations include HashiCorp Vault, Kubernetes Secret Store CSI Driver, Ansible, Jenkins, GitHub, GitLab, CyberArk, Delinea and Azure DevOps. Fortanix says the service stores secrets in a FIPS 140-2 Level 3 certified HSM and uses Intel SGX and Runtime Encryption technology. Role-based access controls, safeguards against unauthorized password changes, simultaneous-login alerts and audit logs support access oversight. Listed certifications include FIPS 140-2 Level 3, PCI-DSS, ISO 27001, CIS and SOC 2 Type 2. The DSM SaaS trial includes the full feature set for 30 days at free, with no credit card required to start. No numeric Enterprise price is listed.