IRI DarkShield vs Lepide Data Classification

IRI DarkShield finds, classifies, extracts, reports on, and masks sensitive information in structured, semi-structured, and unstructured data. Searches can use regular expressions, lookup values, path filters, or named-entity recognition with NLP and machine learning. Masking options include deletion, encryption, hashing, pseudonymization, and randomization. Sources range from local or SMB files and cloud object storage to JDBC databases and NoSQL collections. Jobs can run through IRI Workbench, command-line tools, batch scripts, or API-calling programs; Version 6 added REST API support. An exportable HTML5 dashboard shows what sensitive data was found and whether it was masked, while logs can go to SIEM tools such as Splunk Enterprise Security and Datadog. DarkShield runs within customer-controlled infrastructure, on premises or in a customer-controlled cloud. It supports Windows, Linux, and macOS, with at least 4 GB RAM and two cores recommended. Pricing starts at $5,490, and a 30-day trial is listed. Standalone licenses are perpetual and charged per hostname; first-year support is included, with later support available at 20% of the license-fee basis per year.

Lepide Data Classification scans unstructured data to find and classify sensitive information such as PII, PHI, PCI, and intellectual property. It offers hundreds of predefined criteria sets for locating sensitive data and mapping it to compliance mandates, and users can create custom classifications. Supported sources include Windows File Server, NetApp Filer, Exchange, SharePoint, OneDrive, Dropbox, Linux, Unix, NAS, and cloud storage. The product can classify data incrementally as it is created or modified after an initial scan, and Lepide describes identifying sensitive data at creation for persistent classification. It can score data by content risk, add context through proximity scanning, and provide visibility into access and user activity. Classified data can also be used with predefined threat models for detection and automated response. Lepide Identify can schedule Windows File Server PII searches for DSAR, right-to-be-forgotten, and eDiscovery requests. Deployment is hybrid; the DDC Agent requires a Windows system and an accessible Microsoft SQL Server database. Pricing is quote-based, and a 15-day trial includes 24x5 Full Support evaluation assistance.