Virtru
Data-centric encryption platform built on an NSA-originated open standard that binds access policy directly to files and email.
Visit Website ↗ + Add to CompareOverview
Virtru provides data-centric encryption for email and files, built around the Trusted Data Format (TDF) — an open standard that binds granular access policy directly to a piece of data so that protection and control travel with the file wherever it is shared, rather than relying solely on perimeter or transport security. TDF was originally developed at the U.S. National Security Agency by Virtru co-founder and CTO Will Ackerly before he and his brother John Ackerly commercialized it in 2012.
Headquartered in Washington, D.C., Virtru has raised roughly $129 million in funding, including a $50 million Series D round led by ICONIQ that doubled the company’s valuation to approximately $500 million. Its differentiator is that TDF’s adoption extends beyond Virtru’s own commercial customer base: in April 2026, the NSA highlighted TDF (and its coalition variant, ZTDF) as an interoperability standard in its Zero Trust Implementation Guideline, with Five Eyes intelligence partners building on TDF’s extensibility for coalition data-sharing.
Virtru reports over 6,100 commercial and public-sector customers using its data security and privacy products, built on top of the open-source OpenTDF project the company stewards.
Innovation Matrix Assessment
Has extended its core TDF-based encryption from email into broader file sharing and collaboration use cases over more than a decade of steady development.
Data-bound access policy gives security teams control over sensitive data even after it leaves their own systems, a persistent operational gap in traditional perimeter-based tools.
Independently verified: NSA's Zero Trust Implementation Guideline explicitly cites TDF/ZTDF as an interoperability standard, and Virtru's $50M Series D at a $500M valuation was independently reported by CyberScoop.
Data-centric, rights-bound encryption is a structurally different approach from perimeter-based DLP, and government standard adoption is a genuine, independently verified signal of durability, though Virtru itself remains a mid-size commercial vendor around the idea.
NSA and Five Eyes adoption of the underlying TDF standard is strong independent validation of the approach; the specific 6,100-customer and usage-scale figures are company-published rather than independently audited.
Data-centric protection that travels with sensitive information is likely to grow in importance as data moves across more clouds, apps and AI systems.
Why CISOs Should Care
Keeps access control bound to sensitive data itself, so protection persists even after a file or email leaves the organization's own infrastructure.
What Makes It Different
Built on an NSA-originated open standard (TDF) that is now being adopted independently of Virtru's own commercial product, including by U.S. government Zero Trust guidance and Five Eyes partners.
The Matrix Verdict
65/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: Virtru's underlying TDF standard has unusually strong independent validation for a company of its size (NSA and Five Eyes adoption), giving it real staying power, though its commercial scale and market momentum remain moderate.
Editorial Note: Claims vs. Verified Findings
TDF/ZTDF adoption by the NSA and Five Eyes partners is independently reported; customer count and usage-scale figures come from Virtru's own disclosures and were not independently audited.
Sources
- GlobeNewswire (NSA Zero Trust TDF citation) — https://www.globenewswire.com/news-release/2026/04/08/3270234/0/en/trusted-data-format-highlighted-as-interoperability-standard-in-nsa-zero-trust-implementation-guideline.html
- CyberScoop (Series D) — https://cyberscoop.com/virtru-series-d-50-million-trusted-data-format/
- Virtru About Us — https://www.virtru.com/about-us
Alternatives to Virtru
Cyera
AI-powered, agentless data security platform combining DSPM, DLP, and AI-activity monitoring, and one of the fastest-funded startups in…
Bedrock Data
AI-native data security posture management (DSPM) platform using a Metadata Lake to discover, classify, and contextualize data across…
Halcyon
Ransomware-focused cyber resilience platform combining endpoint prevention, automated recovery, and data exfiltration protection.
Varonis
Data-centric security platform that monitors file, email, and cloud activity to detect insider threats and ransomware before data…
CyberRidge
Photonic-layer encryption that converts transmitted data into optical noise, defending fiber communications against quantum-era decryption.
AWS Wickr
AWS Wickr is Amazon's end-to-end encrypted messaging, voice, video, and file-sharing platform for regulated and government environments, holding…