IRI DarkShield vs PK Protect

IRI DarkShield finds, classifies, extracts, reports on, and masks sensitive information in structured, semi-structured, and unstructured data. Searches can use regular expressions, lookup values, path filters, or named-entity recognition with NLP and machine learning. Masking options include deletion, encryption, hashing, pseudonymization, and randomization. Sources range from local or SMB files and cloud object storage to JDBC databases and NoSQL collections. Jobs can run through IRI Workbench, command-line tools, batch scripts, or API-calling programs; Version 6 added REST API support. An exportable HTML5 dashboard shows what sensitive data was found and whether it was masked, while logs can go to SIEM tools such as Splunk Enterprise Security and Datadog. DarkShield runs within customer-controlled infrastructure, on premises or in a customer-controlled cloud. It supports Windows, Linux, and macOS, with at least 4 GB RAM and two cores recommended. Pricing starts at $5,490, and a 30-day trial is listed. Standalone licenses are perpetual and charged per hostname; first-year support is included, with later support available at 20% of the license-fee basis per year.

PK Protect is PKWARE’s enterprise data security platform for discovering and protecting sensitive information across endpoints, servers, cloud environments, databases, data lakes, and mainframes. Its policy-driven actions include encryption, redaction, masking, moving, deleting, and quarantining data. PKWARE describes three products: Endpoint Manager, Data Store Manager, and PK Protect for z/OS. Endpoint Manager covers desktops, laptops, servers, file shares, and Microsoft 365; Data Store Manager works across structured and unstructured data, including databases, cloud repositories, applications, and ERPs. The z/OS product discovers applications and critical data elements, helps prevent leakage, and supports SBOM creation for audits. Integration with Microsoft Purview can apply sensitivity labels centrally and extend protection to file types Purview cannot label. PKWARE lists compliance coverage for frameworks including PCI DSS, HIPAA, GDPR, CCPA/CPRA, and ITAR. The platform supports hybrid deployment, multi-cloud coverage, and external KMS. Pricing is available on request. PKWARE says it was founded in Milwaukee in 1986.