Expert Guide Editorially reviewed

The Best Data Loss Prevention Software in 2026

One of these is $12 a month on E3. Another is already inside a $60 E5 seat. Three will not print a number until a sales call.

Independently researched. No pay-for-placement. 5 tools compared
TL;DR

Microsoft Purview DLP is the only product on this list with a public sticker. Microsoft 365 E5 is $60 per user per month paid yearly and includes Purview. On E3 ($39 per user per month) the Purview Suite add-on is $12 per user per month. E3 already covers DLP for Exchange, SharePoint and OneDrive; the add-on is the rest of the suite.

Nightfall prices per user per year on nightfall.ai/pricing, but the dollar amounts did not render as text on 1 September 2026. Vendr's median from 41 purchases is $25,000 a year (range $12,000-$73,200). Forcepoint, Symantec DLP and Cyberhaven are quote-only. Third-party 2026 ranges sit around $30-$80 per user per year for the legacy suites; Vendr's Cyberhaven median is $37,872 a year.

Data loss prevention is sold as one category and invoiced as three different products. Microsoft folds DLP into an E5 seat or a $12 Purview Suite add-on. Forcepoint and Symantec still sell modular suites for endpoint, network, email and cloud, and they will not show the number on a page.

Nightfall and Cyberhaven sell a SaaS seat for SaaS apps, browsers and GenAI paste, and they also wait for a call.

You are not choosing a classifier library. You are choosing which channels the tool can actually see, and whether the invoice is a Microsoft SKU you already own or a second vendor with a deployment project attached.

Top Picks

Based on features, real-world fit, and value for money.

Best Data Loss Prevention Software in 2026: 5 tools compared, updated Sep 2026
ToolPricingBest for
Microsoft Purview DLPFrom microsoft.com/en-us/security, checked 1 September 2026. Microsoft 365 E5 $60.00/user/month paid yearly, includes…Microsoft 365 shops that already pay for E5, or E3 tenants that will take the $12 Purview Suite add-on before calling a second vendor
NightfallQuote-only for the dollar amount. nightfall.ai/pricing (checked 1 September 2026) lists Nightfall Complete and Complete…SaaS-heavy teams that need Slack, Google Drive, GitHub and GenAI paste covered, and do not have an on-prem file share to scan
Forcepoint DLPQuote-only. forcepoint.com/forcepoint-dlp-pricing (checked 1 September 2026) asks you to talk to an expert for…Hybrid estates that still have file shares, a network path and a need for one policy across email, web, endpoint and cloud
Symantec DLPQuote-only. Broadcom's Symantec DLP page (checked 1 September 2026) offers Buy via Partner and Contact Us. No public…Large enterprises that already run Symantec and need Exact Data Matching, Indexed Document Matching and a dedicated DLP team
CyberhavenQuote-only. cyberhaven.com/pricing returned 404 on 1 September 2026; the homepage is Talk to an expert. Vendr lists the…Teams whose question is where a file came from (source code, a design folder, a departing laptop), not only which regex it matched

Pricing read from each vendor's own published pricing page, checked Sep 2026. Every vendor here publishes a price.

Best for: Microsoft 365 shops that already pay for E5, or E3 tenants that will take the $12 Purview Suite add-on before calling a second vendor

PricingFrom microsoft.com/en-us/security, checked 1 September 2026. Microsoft 365 E5 $60.00/user/month paid yearly, includes Purview Suite (DLP, information protection, insider risk, eDiscovery). Microsoft 365 E3 $39.00/user/month paid yearly; E3 already includes Purview DLP for Exchange Online, SharePoint Online and OneDrive. Microsoft Purview Suite add-on $12.00/user/month paid yearly, requires E3 or Office 365 E3 plus EMS E3. Prices may vary by Microsoft agreement. USD list, VAT may apply.

+List prices you can put in a budget without a sales call
+If E5 is already paid, turning DLP on is a policy job, not a procurement cycle
+Native on Exchange, SharePoint, OneDrive, Teams and Copilot, which is where a lot of the files already sit
E5 at $60 is a whole productivity and security suite. Do not treat $60 as the DLP line
Coverage outside Microsoft 365 is the weak side: Slack, GitHub, consumer ChatGPT and a personal Drive need other controls
Visit Microsoft Purview DLP →

Best for: SaaS-heavy teams that need Slack, Google Drive, GitHub and GenAI paste covered, and do not have an on-prem file share to scan

PricingQuote-only for the dollar amount. nightfall.ai/pricing (checked 1 September 2026) lists Nightfall Complete and Complete + AI Agent Security as per-user-per-year packages; the $ figures did not render as text. FAQ: priced per user per year, final price depends on user count and data volume, 7-day proof of value, 2 endpoint devices per user, 150 GB data-at-rest scanning included with paid data-pack add-ons. Vendr 2026 (41 purchases): median $25,000/year, observed $12,000-$73,200. Vendr Business-tier list for 100-300 users typically $20,000-$60,000/year.

+API connectors for the SaaS apps Purview treats as someone else's problem
+Endpoint agent is meant to catch paste and upload into tools that have no API
+A 7-day proof of value on your own tenant, which is more useful than a slide
The pricing page exists and still will not tell you the number. Budget from Vendr until you have a quote
On-prem file shares and network DLP are not the product
Visit Nightfall →

Best for: Hybrid estates that still have file shares, a network path and a need for one policy across email, web, endpoint and cloud

PricingQuote-only. forcepoint.com/forcepoint-dlp-pricing (checked 1 September 2026) asks you to talk to an expert for customized pricing on Forcepoint DLP and DLP SaaS. No public list price. Sold as cloud SaaS or on-prem, with separate endpoint, cloud/web, email and Risk-Adaptive Protection add-on modules. Third-party 2026 ranges: about $30-$60 per user per year (Underdefense); about $40,000-$60,000 a year for 1,000 seats (Ciphers Security). Treat both as cited estimates, not a quote.

+Same policy engine across endpoint, email, web and cloud, including on-prem, which Purview and Nightfall do not fully replace
+SaaS deploy if you do not want appliances; on-prem if the data cannot leave
+Risk-adaptive controls exist as an add-on if you want enforcement to change with user behaviour
No list price, and the modules are easy to buy twice (endpoint plus cloud plus email)
A hybrid rollout is a project. Plan months, not a weekend
Visit Forcepoint DLP →

Best for: Large enterprises that already run Symantec and need Exact Data Matching, Indexed Document Matching and a dedicated DLP team

PricingQuote-only. Broadcom's Symantec DLP page (checked 1 September 2026) offers Buy via Partner and Contact Us. No public list price. Sold as a Core (on-prem) suite and a Cloud suite (CloudSOC CASB plus DLP Cloud Detection). Ciphers Security's 2026 estimate: about $50,000-$80,000 a year for 1,000 seats. Underdefense lists it as enterprise-only, quote-based. Treat those as cited ranges, not a Broadcom price list.

+Exact Data Matching and Indexed Document Matching are still the reason regulated shops keep it
+Core plus Cloud suites cover endpoint, network, email, web and sanctioned SaaS if you buy both
+MIP label enforcement from the endpoint agent, useful if Microsoft labels are already the source of truth
Broadcom will not publish a seat price. Partner quotes and professional services are the real bill
You need people who already know the product. A new team learning Symantec DLP is a long year
Visit Symantec DLP →

Best for: Teams whose question is where a file came from (source code, a design folder, a departing laptop), not only which regex it matched

PricingQuote-only. cyberhaven.com/pricing returned 404 on 1 September 2026; the homepage is Talk to an expert. Vendr lists the DDR SKU (CYB-SW-DDR) as priced per endpoint per year. Vendr contract data: median $37,872/year, observed $30,000-$193,993. Nightfall's 2026 competitor note: AI capability is packaged separately from the endpoint license on Cyberhaven order forms. No official list price.

+Lineage is a different signal from a keyword hit, which is why people use it for IP and insider cases
+Covers modern egress (browser, SaaS, GenAI, USB) without an on-prem appliance
+Vendr's median is at least a budget number while you wait for a quote
No public price list, and the high end of Vendr's range ($193,993) is a reminder that endpoint count moves the bill
AI features may be a second line on the order form. Ask before you compare it to Nightfall Complete
Visit Cyberhaven →

What it is

DLP software watches data at rest, in motion and in use, then blocks, encrypts, quarantines or coaches when someone tries to send it somewhere policy does not allow. The old channels are email, web upload, USB and a file share.

The channels that now decide a bake-off are Slack, a personal Drive account, a ChatGPT paste and an AI coding agent.

Classification is regex and templates on the legacy suites, machine-learning detectors on Nightfall, and data lineage on Cyberhaven (where the file came from, not only what string it contains). The engines differ. The invoice differs more.

Why it matters

Five hundred Purview Suite seats are $72,000 a year on top of E3. Five hundred Forcepoint seats at the commonly cited $50 per user per year are $25,000, if that quote includes the modules you need, which it often does not. Those two numbers are not the same product.

Purview is already in the Microsoft tenant. Forcepoint is a second console, a policy rewrite and, on a hybrid estate, months of rollout.

The other reason is coverage. Purview is strong inside Microsoft 365 and weaker the moment the file hits Slack, a personal browser session or a consumer AI tool.

That gap is what Nightfall, Cyberhaven and the Forcepoint cloud modules exist to close. Buying a second DLP without listing the channels you actually lose data through is how teams pay twice and still miss USB.

Key features to look for

License shape
Bundled Microsoft SKU, modular enterprise suite, or per-user SaaS. This decides the three-year cost more than any classifier count.
Channels covered
Email and Office files, or also endpoint, web, USB, SaaS APIs and GenAI paste. A DLP that only sees Exchange is a mail filter.
What E3 already includes
Purview DLP for Exchange Online, SharePoint Online and OneDrive sits in E3. Endpoint DLP, insider risk and auto-labelling sit in Purview Suite or E5. Read that split before you buy a second vendor.
On-prem and hybrid
File shares, network taps and appliances are still Forcepoint and Symantec work. Nightfall and Cyberhaven are cloud-first. Purview is a Microsoft estate with some endpoint reach.
How it decides
Exact Data Matching and fingerprinting on the legacy suites, ML detectors on Nightfall, lineage on Cyberhaven. False-positive load is the operating cost nobody puts on the quote.
Mistakes to avoid
×Buying Forcepoint or Symantec because a slide said 'enterprise DLP' when the company is already on E5 and the only real leak path is Outlook and OneDrive. The incremental Purview cost is $0. The second vendor is not.
×Treating Purview Suite's $12 as a DLP-only price, then being surprised that Slack, GitHub and a personal ChatGPT session were never in scope.
×Comparing a $50 per user per year Forcepoint blog estimate to Purview Suite at $144 per user per year as if both quotes included the same channels. Forcepoint's number is a cited range for DLP seats. Purview Suite is a published add-on that also buys insider risk and eDiscovery.
Expert tips
If you are on E5, turn Purview DLP on and list the channels it cannot see before you take a second demo. The bake-off should be about Slack, USB and GenAI, not about email you already cover.
On quote-only vendors, ask for the SKU list by channel (endpoint, email, web, cloud, RAP or AI add-on). Forcepoint and Symantec get expensive when each channel is a module. Cyberhaven gets expensive when AI is a second line.
Use Vendr's Nightfall median ($25,000) and Cyberhaven median ($37,872) as a floor for the conversation, not as the purchase order. Both pages are quote-only on 1 September 2026.

The bottom line

If the estate is Microsoft 365, start with Purview DLP. E5 at $60 already includes it. E3 at $39 plus Purview Suite at $12 is the published path when you need more than Exchange and OneDrive DLP.

Do not buy a second product until you can name the channel Purview misses.

Nightfall is the SaaS and GenAI call when that channel is Slack, Drive or a paste into ChatGPT, and you can live with a per-user quote (Vendr median $25,000 a year).

Forcepoint and Symantec DLP are still the right tools for hybrid and on-prem, and they will not give you a number on a webpage; cite $30-$80 per user per year only as a 2026 third-party range.

Cyberhaven is the lineage product, quote-only, Vendr median $37,872 a year, and a poor substitute for a network DLP stack.

Frequently asked questions

What is the best DLP software in 2026?
Microsoft Purview DLP if you already pay for Microsoft 365 E5, or if E3 plus the $12 Purview Suite add-on covers the channels you care about. Nightfall if the leaks are in SaaS and GenAI and you are not running on-prem file shares. Forcepoint or Symantec DLP if you still have network and on-prem repositories. Cyberhaven if the question is data lineage and insider movement rather than a regex library.
How much does data loss prevention software cost?
Checked 1 September 2026 on Microsoft's security pricing pages: Purview DLP is included in Microsoft 365 E5 at $60 per user per month, or added via Microsoft Purview Suite at $12 per user per month on E3 ($39 per user per month). Nightfall, Forcepoint, Symantec DLP and Cyberhaven do not publish a list price. Vendr's Nightfall median is $25,000 a year; Vendr's Cyberhaven median is $37,872 a year. Third-party 2026 ranges for Forcepoint sit around $30-$60 per user per year, and for Symantec around $50-$80 per user per year at 1,000 seats. Those last two are cited estimates, not vendor quotes.
Is Microsoft Purview DLP enough on its own?
For email and Microsoft 365 files, often yes, especially on E5. It is not enough if people move source code through GitHub, paste customer lists into consumer ChatGPT, or copy files to USB and a personal Drive. Those are the cases that justify Nightfall, Cyberhaven or a Forcepoint cloud and endpoint module, not a second copy of Outlook DLP.
Forcepoint vs Symantec DLP vs Purview: which should we buy?
Purview if the work is inside Microsoft 365 and you can live with that scope. Forcepoint if you want one vendor across SaaS and on-prem and you will staff the rollout. Symantec DLP if you already depend on Exact Data Matching and have people who know the product. Do not buy two legacy suites. Do not buy a legacy suite to cover Outlook you already have in E5.
Related guides

Get the Cyberpresso brief

Free daily newsletter, read in 5 minutes.

Subscribe free