Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Forcepoint ONE CASB review

#2 of 25 in Cloud Access Security Broker SoftwareSecure Access Service Edge Software

A flexible hybrid CASB combining proxy controls, API scanning, DLP and remediation.

9.3/10Editor score
Visit Forcepoint
Forcepoint ONE CASB9.3 Visit Forcepoint

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Forcepoint ONE CASB is a cloud-based cloud access security broker for organizations securing SaaS, IaaS and private-cloud usage. Its coverage suits enterprises that need controls across sanctioned and unsanctioned applications, managed and unmanaged devices, and data at rest as well as inline traffic. The platform supports web, Windows, macOS and API environments, with hybrid deployment, inline controls, API controls, DLP controls, shadow IT discovery and threat detection.

Its main distinction is the combination of API scanning with reverse- and forward-proxy enforcement. API scanning covers SaaS and IaaS data at rest, while reverse-proxy inspection applies inline controls and forward-proxy protection extends to managed and unmanaged devices. Security teams can use shadow IT reporting, access policies, SAML-based application SSO, sensitive-data detection, malware blocking and DLP policy enforcement. Remediation options include quarantine, encryption and file-sharing restrictions, giving the product breadth beyond visibility alone.

Forcepoint ONE CASB also fits environments built around Microsoft 365, Google Workspace, Salesforce, ServiceNow, Box, Dropbox, Confluence, GitHub, Webex Teams, Slack, AWS, Google Cloud Platform, Microsoft Azure and Egnyte. SIEM, ICAP DLP and SOAR integrations support wider security operations, while integration with Forcepoint DLP connects the CASB to related controls. Pricing follows a contact-sales model rather than a published plan structure, so it is better suited to organizations evaluating a broader enterprise security deployment than buyers seeking a self-service purchase. Choose it for flexible proxy-based CASB coverage and layered cloud controls; consider another option if open-source deployment or a simpler single-control approach is the priority.

Forcepoint ONE CASB pros and cons

  • Where it wins
    • Combines API, reverse-proxy and forward-proxy security controls
    • Supports DLP, shadow IT, malware blocking and file remediation
    • Connects with major SaaS, cloud, SIEM and SOAR platforms
  • Where it doesn't
    • Pricing requires contact with sales
    • Not available as an open-source deployment
    • Architecture spans multiple control modes and deployment paths

Forcepoint ONE CASB fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update