daspren.com

What It Is

Daspren is a cybersecurity company founded in Rennes, France. Its materials describe it as a DeepTech startup spun out of Inria Rennes. The product is positioned as a unified data security platform built around “Security by Clarity,” covering data discovery, mapping, classification, access control, DLP, DSPM, ransomware protection, data exfiltration prevention, and Zero-day detection. Its core narrative is not traditional perimeter defense, but continuous visibility into “who accessed which data, when, from where, and through which application.”

Core Capabilities and Deployment

In terms of protection scope, Daspren covers sensitive data identification, content inspection for PII/PHI/financial data, AI-based classification, UEBA behavioral analytics, Shadow IT and BYOD detection, and blocking of exfiltration channels such as cloud/SaaS, email, web, and USB. Its ransomware protection emphasizes real-time detection of abnormal file access, rapid encryption, extension changes, mass access, and similar behaviors, with automated isolation and blocking. For Zero-day protection, it describes behavioral analysis, heuristics, machine learning, memory protection, traffic analysis, and dynamic sandboxing.

Deployment is one of its differentiators: the website repeatedly emphasizes “100% on-premise,” meaning data does not leave the organization’s infrastructure and the vendor cannot access it, aligning with Zero Trust and data sovereignty requirements. It also mentions deployment via GPO, the use of discovery agents, centralized platform management, detailed logs, alerts, compliance reporting, and custom allowlists.

Pricing and Compliance

Pricing is not publicly disclosed. The sales motion mainly relies on booking a demo, contacting sales, and requesting a free consultation; several pages state that no credit card is required and expert support is included. On compliance, the materials mention RGPD, NIS2, and European data sovereignty, but do not disclose third-party certifications such as ISO 27001, SOC 2, or Common Criteria. During procurement, buyers should therefore request audit reports, a data processing agreement, and a security white paper.

Pros, Cons, and Who It’s For

Its strengths are broad product coverage, making it especially suitable for enterprises that want to perform data discovery, classification, and access governance within their own on-premises environment. Its integrated approach to DLP, ransomware protection, and DSPM may also help reduce tool fragmentation. The drawbacks are that public materials lack pricing, customer case studies, certifications, a detailed system compatibility list, and real-world detection benchmarks. In addition, the company’s roadmap indicates that product V1 is scheduled for release in August 2025, so maturity still needs to be validated through a PoC.

Access from China and Alternatives

There is no public information on access from China, payment methods, or Chinese-language support, so network connectivity should be considered unknown. For deployment in China, buyers would also need to assess localization support, alignment with MLPS, the Data Security Law, and the Personal Information Protection Law, as well as cross-border and procurement compliance. Comparable alternatives include Microsoft Purview, Forcepoint DLP, Broadcom DLP, Varonis, BigID, Cyera, Wiz DSPM, as well as domestic Chinese vendors in data security, DLP, and endpoint security.