IronCore Labs SaaS Shield
IronCore Labs SaaS Shield adds application-layer encryption, data controls, and access visibility to cloud applications, including multi-tenant SaaS products.
What IronCore Labs SaaS Shield is
IronCore Labs SaaS Shield adds application-layer encryption, data controls, and access visibility to cloud applications, including multi-tenant SaaS products. It uses a different encryption key for each tenant to help protect data held in a shared store, and deterministic encryption allows exact-match searches over encrypted data. Customers can hold their own keys, with support for customer-managed configurations and integrations with Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault. The Tenant Security Proxy runs as a Docker container in a customer's infrastructure; encryption can be connected through proxies or SDKs. The product page describes proxies for Amazon S3, OpenSearch, and Elasticsearch. SaaS Shield supports key rotation, re-keying, algorithm and key-size changes, and separating key storage from data storage across cloud providers. Enterprise pricing is listed as contact us, with base and per-tenant prices marked Ask us.
Good
- Uses separate encryption keys for each tenant.
- Supports exact-match searches on encrypted data.
- Integrates with four listed external KMS products.
- Offers Docker proxy and SDK deployment options.
- Supports key rotation and re-keying.
Watch out
- No free plan is listed.
- Free Trial includes one tenant and excludes multi-tenant support.
- Enterprise base and per-tenant prices require asking.
Who it suits
SaaS providers seeking per-tenant protection and customer-managed keys may find SaaS Shield relevant, particularly those selling to larger enterprise customers. It is also suited to teams deploying encryption through infrastructure-hosted proxies or SDKs.
Verdict
SaaS Shield combines tenant-specific encryption with search, key-management, and deployment options for cloud applications. Check the tenant limits and pricing structure against the intended deployment before choosing a plan.
Plans and prices
From IronCore Labs SaaS Shield's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free Trial | Free | 1 tenant · multi-tenant support not included · Community & Docs support · $0 /mo; one free tenant |
| Pro | $1,954 a month | Up to 100 tenants · Email support · Cloaked Search +$10/tenant · Cloaked AI +$10/tenant · $1,954 /mo plus $25 per tenant for up to 100 tenants |
| Enterprise | Priced on request | Unlimited tenants · 24/7 Phone support · SLAs · On-prem Option · Contact us; base price and per-tenant price are listed as “Ask us” |
The facts
Each one read from IronCore Labs SaaS Shield's own pages, with the date it was checked.
What it does
- Audit and controls
- The product offers real-time audit trail streams to customers, while the pricing comparison lists real-time audit trails and real-time security audit as Enterprise features.checked 3 Oct 2026
- Compliance context
- The maker says the product is intended to help customers address data privacy and sovereignty requirements, including handling EU personal data by U.S. companies after Schrems II.checked 3 Oct 2026
- Cryptographic flexibility
- SaaS Shield supports key rotation, re-keying, algorithm and key-size agility, and separating key storage from data storage across cloud providers.checked 3 Oct 2026
- Customer-held keys
- Customers can hold their own encryption keys, and the product supports customer-managed key configurations.checked 3 Oct 2026
- Data privacy
- IronCore Labs says its architecture keeps sensitive data and keys from being visible to the company, and configuration data sent to its Configuration Broker is end-to-end encrypted.checked 3 Oct 2026
- Deployment
- The Tenant Security Proxy is a Docker container installed in the customer’s infrastructure; encryption can be integrated through proxies or SDKs.checked 3 Oct 2026
- Intended users
- The maker positions SaaS Shield for SaaS providers seeking per-tenant security and customer-managed keys, including businesses selling to larger enterprise customers.checked 3 Oct 2026
- Key management integrations
- Listed KMS integrations include Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault.checked 3 Oct 2026
- Per-tenant protection
- The product uses different encryption keys for each tenant to help protect tenant data in a shared data store.checked 3 Oct 2026
- Purpose
- SaaS Shield adds application-layer encryption, data controls, and data access visibility to cloud applications, including multi-tenant SaaS apps.checked 3 Oct 2026
- Search
- SaaS Shield supports exact-match searches on encrypted data using deterministic encryption.checked 3 Oct 2026
- Storage and search integrations
- The product page describes proxies for Amazon S3, OpenSearch, and Elasticsearch, as well as SDK integrations.checked 3 Oct 2026
- Support
- The pricing page lists Community & Docs support for Free Trial, Email for Pro, and 24/7 Phone for Enterprise.checked 3 Oct 2026
The company
- Company security
- IronCore Labs states on its Trust Center that it is SOC 2 certified.checked 3 Oct 2026
Alternatives to IronCore Labs SaaS Shield
- 1
Acra
Free planOpen sourceAndroidiOSAPILinux8.2From $10,000 a year - 2
MySQL
Free planAPILinuxmacOSSelf-hosted7.9Free plan - 3
Cryptomator
Free planAndroidiOSWebLinux7.6From €10,000 a year - 4
Virtru Data Security Platform
AndroidiOSWebAPI7.5From $119 a month - 5
Cosmian Data Protection Suite
Free planWebAPIExtensionLinux7.1Free plan - 6
Evervault
AndroidiOSWebAPI6.8From $995 a month