On June 26, 2024, 1touch.io announced Mainframe Security Posture Management (MSPM), software designed to discover and classify sensitive data on IBM mainframes and make that context useful to enterprise security and governance teams. The approach connects mainframe data and access information with a broader view of data across cloud and on-premises environments. The capabilities described at launch were vendor claims, not independently tested results.
What 1touch.io announced
MSPM was presented as a way to continuously monitor and analyze sensitive mainframe data, then combine its context with information about structured and unstructured data elsewhere in an organization. The goal was to help security and governance teams understand what sensitive information resides on core systems and how it can be accessed as those systems operate alongside hybrid-cloud environments.
In the launch announcement, 1touch.io President and CEO Ashish Gupta said the product would “seamlessly integrate core mainframe systems with modern hybrid cloud environments.” That statement describes the company’s intended role for MSPM; it is not an independent assessment of the product.
Dark Reading reported on the announcement on June 28, 2024, framing the practical issue as how organizations can maintain visibility and security over long-running mainframe systems as they connect to modern environments. The product announcement itself is dated June 26, 2024. 1touch.io’s launch announcement and Dark Reading’s coverage provide those contemporaneous accounts.
#1 Best Overall
What MSPM said it could do at launch
The June 2024 announcement described support for VSAM files and Db2 on IBM Z. 1touch.io said MSPM could scan datasets with or without copybooks, classify sensitive data, and analyze RACF dataset permissions to identify entities able to access it. The company also said the software could update data catalogs for governance and reporting, and support air-gapped deployments.
Those are vendor-described functions. The announcement does not establish independent test results, customer outcomes, or how the capabilities performed in a particular mainframe environment. It also said IMS and flat-file support were planned; it did not describe them as launch support.
How the product scope has changed in later materials
The current MSPM product page uses the Kontxtual name and lists VSAM, QSAM, Db2 on z/OS, IMS, and other legacy systems. It describes discovery, contextual classification, metadata extraction, access intelligence, posture monitoring, policy enforcement, risk scoring, hybrid integration, and audit reporting. The page also claims agentless operation and no code changes. Because this is a current, undated product-page snapshot, it does not establish that every listed function was available in June 2024.
In November 2025, 1touch.io announced Kontxtual as an AI-driven platform spanning data classification, data security posture management (DSPM), data loss prevention (DLP), AI security, privacy, and compliance across cloud, on-premises, and mainframe environments. That release reflects later company positioning, not a dated product-version history. See the current MSPM page and the November 2025 Kontxtual announcement.
Rank #3
- Learn how to identify and reduce security weaknesses at your installation
- Know what it takes to adequately protect the operating system
- Understand security best practices
- Increase your security administration knowledge
- Improve your security skills and productivity
Why mainframe data visibility matters to security teams
A mainframe data inventory is more useful when it identifies the sensitive information in context and connects that information to access and governance. For security leaders, the launch proposition was to bring data classification and access visibility into the same enterprise picture used for cloud and on-premises data. For privacy and compliance teams, catalog updates and reporting could support oversight—if the described integrations and controls meet the organization’s requirements.
That distinction matters: discovering sensitive records is not the same as proving that access is appropriately restricted, policies are enforced, or risk is reduced. Those outcomes depend on implementation, configuration, source coverage, and the organization’s controls. The launch materials explain the intended workflow but do not independently verify those outcomes.
How to assess MSPM for an enterprise environment
Organizations evaluating a mainframe security posture tool should confirm the operational details against their own platform, data, and control requirements. The product materials point to several useful evaluation questions:
- Source coverage: Confirm support for the specific mainframe data stores and formats in scope. Distinguish launch-era VSAM and Db2 support from the broader formats listed on the current page.
- Classification quality: Ask how sensitive-data findings are contextualized, validated, and maintained as datasets change.
- Identity and permissions: Determine which access controls and identities the product can analyze, and how findings map to existing authorization processes.
- Monitoring and response: Clarify what “continuous” monitoring means operationally, how often findings update, and whether policy actions are automated or require review.
- Deployment constraints: If air-gapped operation is required, validate the architecture, update process, integrations, and support model for that environment.
- Evidence and reporting: Check how metadata reaches catalogs, what audit reports contain, and whether outputs meet internal or regulatory evidence needs.
- Validation: Treat availability, scale, and performance statements as vendor claims unless the vendor supplies evidence applicable to the organization’s workload and deployment.
1touch.io’s launch materials cited its own estimates that mainframes supported 68% of the world’s production IT workloads and were used by 71% of Fortune 500 companies; it also said its Inventa platform safeguarded data concerning more than 500 million individuals. These are company-attributed 2024 figures, not independently corroborated market statistics. The launch announcement does not identify an independent underlying study. The figures appear in the company’s announcement.
Recommended Free Tools
Best Value
1touch.io’s current company context
The 1touch.io homepage currently says, “1touch is now Everpure (Everpure has completed the acquisition of 1touch).” The homepage does not state when the acquisition occurred. It continues to display Kontxtual as the platform name. The current homepage is the source for that status.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
