aspg.com

What It Is

ASPG Inc. provides enterprise and mainframe software covering secure access, data security, and systems management. The site indicates that its product history dates back to 1986, with a focus on IBM Z/z/OS, RACF, DB2, CA IDMS, CICS, as well as Unix/Linux and Windows environments. Its cybersecurity-related products mainly include the MegaCryption encryption family, MegaZip compression and encryption, ReACT self-service password reset, ReACT MFA, OAR offline access recovery, ProACT user provisioning, and RACF security auditing and management tools such as ERA/ERQ.

Core Capabilities

In terms of protection scope, ASPG is not a standalone endpoint or cloud security product. Instead, it provides data encryption, identity and access management, and audit management around enterprise core systems. MegaCryption covers use cases across z/OS, PC, Unix/Linux, IDMS, DB2, and other environments, making it suitable for protecting data at rest and in process. ReACT MFA provides second-factor authentication, ReACT supports centralized enterprise self-service password reset, and OAR addresses device access recovery when there is no network, domain, or internet connectivity. ERA can generate customized reports for RACF security events, while ERQ is used for RACF security administration, reporting, and custom programming.

Pricing and Deployment

The official site does not disclose specific pricing, licensing models, free editions, or subscription fees. It only provides entry points such as Request Trial, Schedule Sales Call, Customer Login, and phone contact. Procurement therefore typically requires engaging with sales. In terms of deployment, the text explicitly lists platforms such as z/OS, IBM Z, DB2, IDMS, Unix/Linux, Windows, and CICS, but does not state whether SaaS, cloud-hosted, API-based, or containerized deployment options are available.

Pros and Cons

Its key strength is the very clear support for mainframe and legacy core systems, making it especially suitable for financial, government, healthcare, education, and other organizations that still rely heavily on IBM Z and RACF. It also covers encryption, MFA, password reset, auditing, and systems management, giving it a relatively complete product portfolio. The downside is that the publicly available information is mostly product-list oriented, with limited detail on pricing, compliance certifications, alerting mechanisms, SIEM/IAM integrations, implementation complexity, or service levels. Modern cloud security teams will need to request further documentation from the vendor during evaluation.

Best Fit and Access from China

ASPG is better suited to mid-sized and large enterprises with mainframe, RACF, DB2, IDMS, or CICS environments, rather than teams that only need lightweight cloud identity management or general endpoint security. The source text does not mention access from China, payment methods, or local reseller information, so buyers should confirm network accessibility, contract payment options, and local support before procurement. Comparable solutions include IBM Security Verify, Broadcom Mainframe Security, CyberArk, Delinea, Okta, and Microsoft Entra ID.