PKWARE
A data discovery, classification, and encryption provider whose PK Protect and Smartcrypt products embed persistent, data-level protection directly into files and applications for regulated enterprises.
Visit Website ↗ + Add to CompareOverview
PKWARE has an unusual pedigree for a data security vendor: it was founded in 1986 by Phil Katz, who co-invented the .ZIP file format that still underlies most compressed archives in use today. That compression heritage evolved into a data security business, with the company’s Smartcrypt and PK Protect product lines built around persistent, data-level encryption — protection that travels with a file or field rather than relying solely on perimeter or storage-layer controls. A Smartcrypt Development Kit lets engineering teams embed that protection directly into existing applications with a small amount of code, aimed at cutting integration time from months to days.
The current product, PK Protect, extends this into automated discovery and classification of sensitive data across structured and unstructured stores, with out-of-the-box mappings to PCI DSS, HIPAA, GDPR, CCPA/CPRA, CMMC, GLBA, SOX, FISMA, CJIS, and ITAR — a broad compliance surface that positions the product for heavily regulated industries like banking, insurance, and financial services in particular.
PKWARE was acquired by St. Louis-based private equity firm Thompson Street Capital Partners in 2020 and remains headquartered in Milwaukee, Wisconsin. The company states it protects data for 21 of the 25 largest U.S. commercial banks and roughly 30% of the Fortune 100, figures that come from PKWARE’s own materials rather than independent audit but are broadly consistent with the company’s four-decade tenure and enterprise/financial-services customer base.
Innovation Matrix Assessment
PK Protect has expanded from Smartcrypt's core encryption engine into automated data discovery and classification with out-of-the-box mappings to a wide set of regulatory frameworks (PCI DSS, HIPAA, GDPR, CMMC, and others), showing sustained product investment, though PKWARE does not publish a detailed public roadmap.
A 40-year operating history, PE ownership since 2020 under Thompson Street Capital Partners, and a Milwaukee headquarters with an enterprise/financial-services customer focus reflect a stable, mature operation rather than an early-stage vendor.
No new funding rounds have occurred since the 2020 private equity acquisition; growth signals are limited to product expansion (Smartcrypt into PK Protect) and industry recognition (Stevie Award for data protection) rather than headline funding or customer-count disclosures from independent sources.
Data-level, persistent encryption that travels with the file rather than the storage layer is a meaningfully different architecture from perimeter- or disk-level encryption, though the approach itself is now well established in the data protection category rather than novel.
No independent third-party technical evaluation of PK Protect/Smartcrypt was found; the company's claim of protecting 21 of the 25 largest U.S. commercial banks and 30% of the Fortune 100 is vendor-sourced and unverified by independent audit, though the company's four-decade tenure in regulated industries is a plausible supporting signal.
Data discovery, classification, and encryption mapped directly to specific regulatory mandates is highly relevant to CISOs and compliance officers at banks, insurers, and other regulated enterprises managing multi-framework compliance simultaneously.
Why CISOs Should Care
PK Protect lets a CISO in a heavily regulated industry discover, classify, and encrypt sensitive data with built-in mappings to the specific regulations (PCI DSS, GDPR, GLBA, CMMC, etc.) their auditors will ask about, rather than building that mapping manually across a generic encryption tool.
What Makes It Different
PKWARE's persistent, data-level encryption model -- protection embedded in the file or field itself, developable via an SDK with only a few lines of code -- differs from data protection vendors that rely primarily on perimeter, database, or storage-layer controls.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
A mature, financially stable data protection vendor with real staying power in regulated industries; its self-reported customer penetration figures are impressive but unaudited, and buyers should validate them against references rather than take them at face value.
Editorial Note: Claims vs. Verified Findings
The claim that PKWARE protects 21 of the 25 largest U.S. commercial banks and roughly 30% of the Fortune 100 appears only on PKWARE's own site and in its case studies; it was not corroborated by an independent source and should be treated as a vendor claim. Case studies (Fortune 500 insurer, Global 500 professional services company) are PKWARE-published and were not independently verified with the named customers.
Sources
Alternatives to PKWARE
Cyera
AI-powered, agentless data security platform combining DSPM, DLP, and AI-activity monitoring, and one of the fastest-funded startups in…
Varonis
Data-centric security platform that monitors file, email, and cloud activity to detect insider threats and ransomware before data…
Bedrock Data
AI-native data security posture management (DSPM) platform using a Metadata Lake to discover, classify, and contextualize data across…
Halcyon
Ransomware-focused cyber resilience platform combining endpoint prevention, automated recovery, and data exfiltration protection.
CyberRidge
Photonic-layer encryption that converts transmitted data into optical noise, defending fiber communications against quantum-era decryption.
AWS Wickr
AWS Wickr is Amazon's end-to-end encrypted messaging, voice, video, and file-sharing platform for regulated and government environments, holding…