Lookout CASB (Fortra)

Lookout CASB carries the CipherCloud heritage of cloud data encryption and tokenisation, which provides data sovereignty capabilities that most CASB vendors cannot match: sensitive data can be encrypted or tokenised before it reaches the SaaS application, ensuring the cloud vendor never has access to plaintext. For organisations in highly regulated industries with strict data sovereignty requirements, this capability is meaningful.

Fortra parent company context is relevant: the GoAnywhere MFT zero-day in 2023 affected a separate Fortra product line, but raises questions about the parent company's security development practices that buyers should investigate.

The verdict: Lookout CASB is right for highly regulated enterprises needing cloud data encryption and tokenisation for sovereignty compliance. Organisations without specific encryption requirements should evaluate Netskope, Microsoft Defender for Cloud Apps, or Zscaler.

Last reviewed: May 2026

Strongest: Shadow IT visibility

Watch out for: Compliance reporting

Best for

Enterprises needing mobile-integrated CASB with strong BYOD and data encryption controls.

Not suitable for: New deployments — evaluate Netskope or Zscaler unless mobile-CASB integration is a specific requirement.