Is Fortra profitable in 2026?

Fortra is private and PE-backed, so no audited financials are public. Third-party and vendor-repeated estimates put annual revenue near $800 million as of mid-2026, but profitability itself has not been disclosed by the company or its PE owners (TA Associates, Harvest Partners, Charlesbank, HGGC).

Has Fortra had layoffs?

Workforce data from Revelio Labs shows Fortra headcount fell from 3,442 in 2023 to about 2,989 by December 2025, a 13.1% decline, with a 5.1% year over year drop in 2025 alone, suggesting cost cutting after years of acquisition driven growth.

Fortra is owned by a private equity consortium: TA Associates, Harvest Partners, Charlesbank Capital Partners, and HGGC. It has no IPO or public listing. Prior owners since 2005 included Summit Partners, Audax Group, and H.I.G. Capital before HGGC took the lead stake in 2018.

Is it safe to trust Fortra's GoAnywhere product after its breaches?

GoAnywhere MFT suffered two severe incidents: a January 2023 Clop ransomware breach that led to a $20 million settlement finally approved September 17, 2025, and a CVSS 10.0 zero day (CVE-2025-10035) disclosed September 2025 and actively exploited by Medusa ransomware affiliate Storm-1175.

Could AI replace Fortra's DLP products?

Fortra's core data loss prevention line (Digital Guardian, Titus) is built on rules based classification, which AI native competitors like Strac and Cyberhaven explicitly target as less adaptive. Fortra has responded by rebranding as an 'AI-Amplified Data Security Platform' as of mid-2026, though independent performance validation is not yet public.

Who is Fortra's biggest competitor?

Microsoft is Fortra's most structurally dangerous rival: Purview DLP and DSPM ship bundled inside Microsoft E5 licenses customers already own, directly pressuring Fortra's Digital Guardian and Titus product lines in the same accounts, per market analysis current through mid-2026.

Cybersecurity companies · United States

Fortra

fortra.com ↗

Fortra is a PE-owned cybersecurity roll-up selling file transfer, DLP, and threat intel tools to enterprises.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from through 2026 · Every call on the record Checkpoint: Ongoing GoAnywhere CVE 2025 10035 exploitation fallout and any new lawsuits or breach notices

The call

Fortra holds onto legacy customers while Microsoft bundles competing tools for free and its own flagship product keeps getting breached.

Fortra buys and combines older cybersecurity products, selling them to businesses worried about data theft and leaks. It is hard to compete because Microsoft now gives similar tools free inside its Office 365 bundles that customers already buy, and new AI-powered rivals like Cyberhaven understand modern threats better than Fortra's older rule-based approach. The company's reputation took serious hits from two major security breaches in less than three years, which makes customers less willing to trust it with their most sensitive data.

Why

AI pressure: Cyberhaven, Strac, and other AI-native DLP tools. These tools read content and intent with machine learning, aiming past Fortra's older rules based DLP setup. Could AI do the core job? Yes, likely.

Bigger players: Microsoft Purview. Purview DLP and DSPM ship free inside E5 licenses, letting IT teams drop paid add ons like Fortra's during renewal. Could a giant copy it? Yes, easily.

What protects it. Long term IBM i and legacy file transfer customers who are locked into Fortra's tools and slow to migrate.

What would change this call

Reports of a new critical GoAnywhere MFT CVE or breach disclosure within 12 months. Would mark a third major security failure, compounding 2023 and 2025 breach damage.
Public data or analyst notes on Microsoft Purview win rates against Fortra in DLP/DSPM deals. Would show whether bundled Purview is displacing Fortra in renewals.
News of PE consortium (TA Associates, Harvest Partners, Charlesbank, HGGC) selling or recapitalizing Fortra. Would signal owners seeking exit or restructuring amid roll-up pressure.

Key numbers

Revenue near $800M (2026-07-13)
Headcount down 13.1% since 2023, to 2,989 (2025-12-01)
GoAnywhere breach settlement of $20M approved (2025-09-17)

Named risks

Third serious GoAnywhere MFT vulnerability after two incidents in 30 months (Jan 2023, Sept 2025). Severity: high
Microsoft Purview bundling eroding core DLP/DSPM renewal accounts. Severity: high
Delayed and disputed payouts from 2023 breach settlement extending into 2026. Severity: medium
Declining headcount signaling cost pressure in a mature PE-owned roll-up. Severity: medium
No audited public financials, revenue figures rely on third-party estimates. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Microsoft (Purview)	losing to	Purview DLP/DSPM bundled into E5 licenses, pressuring Fortra DLP renewals as of mid-2026
Cyberhaven and Strac (AI-native DLP)	losing to	Competitor marketing explicitly targets Fortra/Digital Guardian rules-based DLP as less adaptive, 2026
CrowdStrike, Tenable, Rapid7	contesting	Overlapping vulnerability and exposure management space against Fortra's Tripwire and Alert Logic lines
Proofpoint and Netskope	contesting	Direct competitors in DLP/DSPM and cloud security following Fortra's May 2025 Lookout acquisition

Questions people ask

Is Fortra profitable in 2026?: Fortra is private and PE-backed, so no audited financials are public. Third-party and vendor-repeated estimates put annual revenue near $800 million as of mid-2026, but profitability itself has not been disclosed by the company or its PE owners (TA Associates, Harvest Partners, Charlesbank, HGGC).
Has Fortra had layoffs?: Workforce data from Revelio Labs shows Fortra headcount fell from 3,442 in 2023 to about 2,989 by December 2025, a 13.1% decline, with a 5.1% year over year drop in 2025 alone, suggesting cost cutting after years of acquisition driven growth.
Who owns Fortra?: Fortra is owned by a private equity consortium: TA Associates, Harvest Partners, Charlesbank Capital Partners, and HGGC. It has no IPO or public listing. Prior owners since 2005 included Summit Partners, Audax Group, and H.I.G. Capital before HGGC took the lead stake in 2018.
Is it safe to trust Fortra's GoAnywhere product after its breaches?: GoAnywhere MFT suffered two severe incidents: a January 2023 Clop ransomware breach that led to a $20 million settlement finally approved September 17, 2025, and a CVSS 10.0 zero day (CVE-2025-10035) disclosed September 2025 and actively exploited by Medusa ransomware affiliate Storm-1175.
Could AI replace Fortra's DLP products?: Fortra's core data loss prevention line (Digital Guardian, Titus) is built on rules based classification, which AI native competitors like Strac and Cyberhaven explicitly target as less adaptive. Fortra has responded by rebranding as an 'AI-Amplified Data Security Platform' as of mid-2026, though independent performance validation is not yet public.
Who is Fortra's biggest competitor?: Microsoft is Fortra's most structurally dangerous rival: Purview DLP and DSPM ship bundled inside Microsoft E5 licenses customers already own, directly pressuring Fortra's Digital Guardian and Titus product lines in the same accounts, per market analysis current through mid-2026.

Timeline

2026-04-02Fortra acquires Zero-Point Security, deepening offensive security training portfolio
2026-04-01Reports of continued delays paying out 2023 breach settlement claims
2025-12-01Headcount reported at approximately 2,989, down 13.1% from 2023
2025-10-06Microsoft publishes analysis of active exploitation of CVE-2025-10035
2025-09-17$20M GoAnywhere breach class action settlement receives final court approval
2025-09-01CVSS 10.0 zero day CVE-2025-10035 disclosed in GoAnywhere MFT, exploited by Medusa affiliate
2025-05-14Fortra completes acquisition of Lookout's Cloud Security business
2023-01Clop ransomware group breaches GoAnywhere MFT customers, triggering later litigation
2022-11HelpSystems rebrands as Fortra

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS