Forcepoint ONE CASB

Forcepoint ONE CASB brings the Bitglass reverse proxy heritage, one of the original agentless CASB approaches that provides visibility into unmanaged BYOD devices without requiring agent installation, together with Forcepoint's mature DLP engine for unified data protection across CASB and endpoint. For organisations that need to extend security policy to contractor and personal devices that cannot be managed, the agentless reverse proxy approach is a genuine differentiator.

Francisco Partners PE ownership raises the same long-term investment questions as Forcepoint DLP. The Gartner SSE positioning is less prominent than Netskope or Zscaler.

The verdict: Forcepoint ONE CASB is right for enterprises already using Forcepoint DLP that want unified CASB and DLP from one vendor, particularly where BYOD and agentless access for unmanaged devices is a requirement. New CASB deployments should evaluate Netskope or Microsoft Defender for Cloud Apps.

Last reviewed: May 2026

Strongest: Data protection

Watch out for: Compliance reporting

Best for

Enterprises already using Forcepoint DLP wanting unified CASB and DLP from one vendor.

Not suitable for: New CASB deployments — Netskope and Zscaler offer better platform momentum.