Virtru
Virtru is a Washington, D.C.-based data security company that sells a unified encryption and access-control platform built on the open Trusted Data Format (TDF), serving 6,100+ enterprise, federal, healthcare, financial, and defense customers via annual subscriptions, channel partners, and developer APIs.
- Company typePrivate
- Founded2012
- HeadquartersWashington, United States
- Headcount251–500
- GTM typeB2B
- OfferingSoftware
What Virtru does
Virtru is a Washington, D.C.-based data security company founded in 2012 that sells a unified data-centric encryption and access-control platform built on the open Trusted Data Format (TDF) standard. Its platform binds AES-256 encryption, attribute-based access control (ABAC), and audit policies directly to data objects so that protection persists wherever the data travels — across email, files, SaaS applications, object storage, query engines, and vector databases. The product portfolio spans the Virtru Data Security Platform (the foundation), Virtru for Gmail and Outlook (end-to-end encrypted email), Virtru Gateway (SaaS-app data protection for Salesforce and Zendesk), Virtru Secure Share and Virtru for Desktop (file workflows), Virtru Collaborate (FedRAMP-authorized file collaboration), Virtru Private Keystore (customer-hosted keys), and developer-facing Secure Data Connectors (Object, Query, Vector) for S3-compatible storage, Trino, and pgvector; the underlying TDF/ZTDF/IC-TDF standards and the OpenTDF open-source project on GitHub anchor the technology stack.
The company serves approximately 6,100+ customers (per its homepage) to 8,000+ organizations (per its Trust Center) across U.S. federal government (Defense, Intelligence, State & Local), financial services, healthcare, manufacturing/aerospace & defense, education, legal, and technology/telecom — with logos including the U.S. Department of Defense, GDIT, Netflix, Capital One, Salesforce, Brown University, UC Berkeley, Associated Press, and Omada. Primary go-to-market is enterprise field sales with 'Book a Demo' funnels into Enterprise and dedicated Global Public Sector (Federal - Defense, Federal - Intelligence) motions, supplemented by channel partners (SIs, technology partners, cloud partners), marketplace listings (Google Workspace, Microsoft 365, Salesforce, Zendesk), an API/developer-led motion, and a free self-serve personal Gmail tier.
Revenue mechanics are predominantly annual subscription fees payable in advance per Order Form (with per-seat limits and a 30-day price-change notice after year one), available direct or via authorized resellers, plus optional managed-service revenue from the Hosted Gateway and professional services for onboarding and training. The company has raised approximately $190M+ across eight disclosed rounds, including a $60M Series C in January 2022 (ICONIQ Growth and Foundry Capital co-led) and a $50M Series D in July 2025 (ICONIQ-led, doubling valuation to $500M) with Bessemer Venture Partners, Foundry, and The Chertoff Group participating.
Virtru firmographics
Firmographics- Name
- Virtru
- Legal name
- Virtru Corporation
- Website
- https://virtru.com
- Company type
- Private
- Founded year
- 2012
- Operating status
- Operating
- Headcount range
- 251–500 employees
- Short description
- Virtru is a Washington, D.C.-based data security company that sells a unified encryption and access-control platform built on the open Trusted Data Format (TDF), serving 6,100+ enterprise, federal, healthcare, financial, and defense customers via annual subscriptions, channel partners, and developer APIs.
- Ownership category
- akta.pro rank
Virtru industry classification
Industry- Product category
- Data-Centric Encryption and Zero Trust Data Security Software
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Encryption (Data-at-Rest / In-Transit / In-Use) (HDADAFAB)
- akta.pro secondary industry
- Email Data Loss Prevention & Encryption (HDADAKAD)
Keywords
Where Virtru is headquartered
LocationHeadquarters
- HQ city
- Washington
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Virtru business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Enterprise Subscription (Virtru Data Security Platform): Annual subscription fees for Materials and Virtru Services payable prior to each annual subscription period, with automatic 1-year renewals. Virtru may raise annual subscription fees no more than once annually after the first contract year with 30 days' notice; invoices due within 30 days. Available via direct purchase or through authorized resellers. This is the primary commercial revenue stream.
- Personal Privacy Subscription (Free Consumer Tier): Royalty-free, revocable license for personal, non-business Gmail accounts using Virtru Email Data Protection Service and Virtru Data Protection Platform SDK Materials. Free to end users (not a revenue stream but reduces friction / drives awareness).
- Support and Professional Services: Front-end support, pre- and post-sale deployment services, and training of Customer Users as set forth in each Order Form or written support agreement; provided during normal business hours Mon–Fri with one-business-day response SLA. Includes onboarding, deployment services, and the Partner Training Bootcamp.
- Channel / Reseller Sales: Subscriptions sold via Virtru's authorized resellers, with payment and invoicing terms governed by the reseller's ordering documentation rather than Virtru's direct Order Form. Includes technology partners, GSIs, and cloud & infrastructure partners.
- Hosted Gateway Managed Service: Optional Hosted Gateway functionality offered as part of the Virtru Services subscription, governed by separate Hosted Gateway terms that control over the Subscription Agreement in case of conflict — a managed-service layer for SaaS-app data protection (Salesforce, Zendesk, etc.).
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise / commercial subscription — annual pricing per Order Form with per-seat limits, paid in advance of each annual term. |
| Freemium | Pay-as-you-go | Virtru for Personal Privacy — free tier for personal, non-business Gmail accounts (royalties-free, revocable). |
| Per seat | Annual | Hosted Gateway add-on — managed service pricing per Order Form. |
| Per seat | Monthly | Third-party industry pricing benchmark for encrypted-email healthcare solutions (~$6–$15 per user/month range). |
Go-to-market motion7 records
Distribution channels8 records
Marketing channels13 records
Virtru product offering
Product offeringCore offering
Virtru sells a data-centric security platform built on the open Trusted Data Format (TDF) standard that wraps email, files, and SaaS-application data in AES-256 encryption with attribute-based access control (ABAC) so protection travels with the data. It packages this platform as discrete products: Virtru for Gmail/Outlook, Virtru Secure Share, Virtru Collaborate (FedRAMP-authorized file collaboration), Virtru Gateway for SaaS apps (Salesforce, Zendesk), Virtru Private Keystore for customer-hosted keys, and a Developer Experience with SDKs and Secure Data Connectors for AI/RAG and data-pipeline use cases.
Product overview
Virtru offers a unified, platform-plus-modules data security architecture. The Virtru Data Security Platform is the core foundation, built on the open Trusted Data Format (TDF) / OpenTDF standard, and provides persistent, attribute-based access control (ABAC) for data shared across email, files, and SaaS apps. On top of this platform, Virtru sells a portfolio of targeted products: Virtru for Gmail and Virtru for Outlook for end-to-end encrypted email; the Virtru Data Protection Gateway (Virtru Gateway) for protecting SaaS app traffic (e.g., Salesforce, Zendesk); Virtru Secure Share and Virtru for Desktop for file workflows; Virtru Collaborate (FedRAMP-authorized) for cross-organizational file collaboration; and Virtru Private Keystore plus Google Workspace Client Side Encryption for customer-managed keys. For developers, the Virtru Developer Experience offers SDKs (Go, Java, JavaScript), the Apache NiFi processors, and Secure Data Connectors (Object, Query, and Vector Connectors) that extend the platform into custom applications, data pipelines, and AI/RAG workflows. Operational components include the Secure Reader recipient experience, the Control Center, and the Audit API for administrator visibility.
Differentiator
Problem solved
Functional benefit
Brands
- Virtru Data Security Platform: Core data-centric security platform built on the Trusted Data Format (TDF) open standard that powers Virtru's products and developer experience.
- Trusted Data Format (TDF)
- OpenTDF
- Virtru Collaborate
- Virtru Secure Share
- Virtru Private Keystore
- Virtru Gateway
Products and services
- Virtru Data Security Platform Foundational data-centric security platform built on the open Trusted Data Format (TDF) standard that provides persistent, attribute-based access control (ABAC) and AES-256 encryption over email, files, and SaaS-application data. Supports SaaS, self-managed, air-gapped, and cross-domain deployments and underpins Virtru's product portfolio.
- Virtru Collaborate FedRAMP-authorized file collaboration platform that embeds TDF-based encryption, policy, and access controls directly into data files, enabling secure cross-organizational collaboration with cryptographic control that persists with the data. Supports CMMC Level 2, HIPAA, GDPR, and GLBA compliance.
- Virtru for Gmail End-to-end encrypted email and attachment protection delivered natively inside Gmail, with granular controls including revocation, expiration, disable forwarding, and watermarking.
- Virtru for Outlook End-to-end encrypted email and attachment protection delivered natively inside Microsoft Outlook, with persistent access controls integrated with the broader Data Security Platform; no S/MIME required.
- Virtru Data Protection Gateway (Virtru Gateway) Gateway that automatically protects sensitive data flowing through SaaS applications such as Salesforce and Zendesk, enforcing encryption and access policies without changing user workflows. Optional Hosted Gateway managed-service offering is available under separate Hosted Gateway terms.
- Virtru Secure Share Cloud-based secure file sharing product with AES-256 encryption, flexible access control, full data visibility, and a recipient experience via the Secure Reader.
- Virtru for Desktop Desktop application that extends Virtru's data-centric protection to local files and workflows outside the browser, enabling users to encrypt, share, and control files on the desktop.
- Virtru Private Keystore Allows customers to host their own encryption keys on-premises, in a private/public cloud, or in a VPC, providing complete sovereignty and governance over protected data and preventing vendor-held key compulsion.
- Google Workspace Client Side Encryption (CSE) integration Virtru's integration with Google Workspace Client Side Encryption, providing customer-managed keys for Google Workspace files and emails through Virtru Private Keystore.
- Virtru Developer Experience Developer platform for building data-centric security into custom applications, data pipelines, and AI workflows, including Go, Java, and JavaScript SDKs, Secure Data Connectors (Object, Query, Vector), Apache NiFi processors, a public API reference, Postman collection, and CLI tools.
- Virtru for Personal Privacy (free consumer tier) Royalty-free, revocable license for personal, non-business, non-commercial Gmail accounts using the Virtru Email Data Protection Service and Data Protection Platform SDK Materials, governed by the Virtru for Personal Privacy Subscription Agreement.
Quantifiable outcome
- 90% decrease in support tickets for a big-4 bank (with 700,000+ data objects securely shared daily)
- +6 more outcomes
Companies that use Virtru
Customer profileNamed customers22 records
Segments12 records
Ideal customer profiles4 records
Virtru technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration18 records
Feature8 records
Virtru partnerships and signals
Strategic signalPartnerships
14 partnerships are on record, tiered flagship, core and minor.
- Rocket.ChatflagshipIntegrated Virtru's Data Security Platform as an external decision layer with Rocket.Chat's native attribute-based access control for real-time access governance in classified collaboration environments. Supports NIST SP 800-207 (Zero Trust) and deploys across U.S. government classified networks including NIPRNet, SIPRNet, and JWICS for defense agencies and intelligence community organizations.
- Cloudflare (R2 cloud storage)coreVirtru Data Security Platform now provides object-level data governance for Cloudflare R2 cloud storage, enabling cryptographic, attribute-based access policies on individual objects. Early-adopter deployments are available through Virtru.
- EverfoxflagshipStrategic partnership to enhance Zero Trust interoperability among U.S. national security agencies. Co-developing a secure enterprise platform for data sharing among U.S. and allied security agencies, focused on compliance with the ACP 240 standard, enabling secure and compliant data sharing across classification boundaries for multi-domain operations.
- Microsoft (Microsoft 365 — Outlook, OneDrive, SharePoint, Teams)flagshipNative integrations across the Microsoft 365 suite: Virtru for Outlook, Virtru Secure Share for OneDrive/SharePoint/Teams, and the Virtru Data Gateway for SaaS-app data protection. Includes a dedicated Microsoft 365 page and joint case studies.
- Google (Google Workspace — Gmail, Google Drive)flagshipNative integrations for Google Workspace: Virtru for Gmail, Virtru Secure Share for Google Drive, and Virtru Private Keystore for Google Workspace Client Side Encryption (CSE). Virtru was named 2024 Google Cloud Partner of the Year in Industry Solutions — Technology for Government and Education.
- SalesforcecoreVirtru Gateway for Salesforce protects data flowing through the Salesforce platform via automated encryption and access controls integrated with existing SaaS workflows.
- ZendeskcoreVirtru Gateway for Zendesk automatically protects data flowing through Zendesk, optimizing team collaboration and preventing data breaches.
- BugcrowdcoreVirtru runs a semi-public bug bounty program through Bugcrowd covering client-side software (browser extensions, mobile apps, SDKs) and SaaS network, with 1,200+ invited researchers providing continuous penetration testing.
- Wiz (Unified Vulnerability Management)coreVirtru uses the Wiz Unified Vulnerability Management platform to scan all hosts in its network for vulnerabilities and compliance with CIS Level 2 baselines; Wiz CLI is also integrated into CI/CD for IaC scanning of Terraform plans.
- GitHub (Advanced Security, Dependabot, CodeQL)coreVirtru uses GitHub Advanced Security for dependency review and secret scanning, Dependabot for ongoing monitoring, and CodeQL for static code analysis integrated into CI/CD pipelines.
- Amazon Web Services (AWS)flagshipVirtru hosts its production infrastructure primarily on AWS, using segregated accounts per environment/function, VPCs for network isolation, and AWS KMS-managed customer master keys for DNSSEC signing.
- Microsoft (executive alumni — Angel Smith)minorAngel Smith joined Virtru as President of Global Public Sector in January 2026 from Microsoft, where she led public sector sales and defense sector growth.
- Amazon Web Services (executive alumni — John Dancy)minorJohn Dancy joined Virtru as EVP of Customer Solutions and Engineering in January 2026; he previously served as Chief Transformation Officer at Nightwing and spent five years at AWS scaling professional services operations.
- Recorded FutureminorCo-mentioned with Virtru in Virtru's CMMC 2.0 blog post as a relevant cybersecurity vendor for defense contractors (not described as a formal integration partner in the source).
Scale indicators17 records
Recent moves6 records
Expansion highlights7 records
Virtru competitors and assessment
Company assessmentDirect peers
- Proofpoint: Proofpoint is a direct competitor in enterprise email encryption and data loss prevention, offering competitive products to Virtru's Gmail/Outlook encryption and SaaS-app data protection modules for similar regulated enterprise and government buyers.
- Mimecast: Mimecast is a direct competitor in email security, encryption, and compliance for the enterprise and mid-market, addressing the same regulated buyer (HIPAA, FINRA, SEC, GDPR) as Virtru's email encryption stack.
- Seclore: Seclore is a direct peer in data-centric security and enterprise digital rights management (DRM), pursuing a similar 'protect-the-data-object' architecture with persistent access controls for files shared outside the enterprise.
- KnowBe4 (Egress): Egress (acquired by KnowBe4) is a direct peer in email and file encryption for enterprises, offering intelligent email DLP and secure file sharing that competes head-to-head with Virtru's core Gmail/Outlook and Secure Share products.
- Digital Guardian: Digital Guardian is a direct peer in data-centric data loss prevention and encryption, serving regulated enterprises (financial services, healthcare, manufacturing) with overlapping data-protection positioning to Virtru's Data Security Platform.
Broad incumbents
- Forcepoint: Forcepoint (which acquired Bitglass) is a broad incumbent in data loss prevention and cloud access security, offering enterprise-grade encryption and policy controls that overlap with Virtru's Data Security Platform and Gateway offerings.
- Microsoft (Purview / Information Protection): Microsoft is the broad incumbent in enterprise data security, with Purview/Information Protection offering native sensitivity labels, encryption, and DLP across Microsoft 365 — the same suite Virtru integrates with and partially competes against for buyer mindshare.
- Zscaler: Zscaler is a broad incumbent in zero-trust security and data protection (ZIA/ZPA/DLP), operating a large cloud platform with overlapping zero-trust positioning to Virtru's ABAC and ZTDF-based architecture for enterprise buyers.
Emerging players
- Baffle: Baffle is an emerging data encryption and tokenization platform targeting data-at-rest protection in cloud databases and data pipelines, comparable to Virtru's Object and Query Connectors for S3/Trino environments.
- Skyflow: Skyflow is an emerging player in data privacy vaults and zero-trust data access, building developer-friendly APIs for protecting sensitive data in AI and SaaS workflows — overlapping with Virtru's Vector Connector and Developer Experience / API-first GTM.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat6 records
Key risks5 records
Key highlights7 records
Customer concentration
Virtru social profiles
Digital presenceVirtru compliance and trust
Trust signalCompliance17 records
Virtru financial estimates
Financial estimateRevenue estimate
Valuation estimate
Virtru leadership team
Management profileNumber of profiles
Profiles15 records
Virtru funding detail
Funding detailFunding overview
Funding rounds8 records
Investors17 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Virtru M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Virtru
What does Virtru do?
Virtru sells a data-centric security platform built on the open Trusted Data Format (TDF) standard that wraps email, files, and SaaS-application data in AES-256 encryption with attribute-based access control (ABAC) so protection travels with the data. It packages this platform as discrete products: Virtru for Gmail/Outlook, Virtru Secure Share, Virtru Collaborate (FedRAMP-authorized file collaboration), Virtru Gateway for SaaS apps (Salesforce, Zendesk), Virtru Private Keystore for customer-hosted keys, and a Developer Experience with SDKs and Secure Data Connectors for AI/RAG and data-pipeline use cases.
Is Virtru a public or private company?
Virtru is a private company. It is classified as venture growth investor backed and is currently operating.
When was Virtru founded?
Virtru was founded in 2012. It employs 251 to 500 people.
Where is Virtru based?
Virtru is headquartered in Washington, United States, in the North America region.
How does Virtru make money?
Five revenue lines are on record. Enterprise Subscription (Virtru Data Security Platform) is the primary driver. The others are personal Privacy Subscription (Free Consumer Tier), support and Professional Services, channel / Reseller Sales and hosted Gateway Managed Service.
Who are Virtru's main competitors?
Direct peers on record are Proofpoint, Mimecast, Seclore, KnowBe4 (Egress) and Digital Guardian. Broad incumbents are Forcepoint, Microsoft (Purview / Information Protection) and Zscaler. Emerging players are Baffle and Skyflow.
Does Virtru have an API?
Yes. Virtru exposes a suite of partner/developer-facing REST APIs and SDKs as part of the Virtru Data Security Platform (built on OpenTDF). Available APIs include the Policy Service API (programmatic access to attribute definitions and policy decisions), the Key Access Service (OIDC-authenticated key release tied to ABAC entitlements), the Tagging Service API (feed classification metadata into the platform for automatic policy mapping), and the Audit API (export audit logs to a SIEM). Authentication is handled via OIDC / OAuth 2.0. APIs are documented in OpenAPI form with a Postman collection, sample apps, and CLI tools provided. SDKs are available in Go, Java, and JavaScript. Deployment options include SaaS, self-managed, air-gapped, and cross-domain. Developer documentation is at opentdf.io/OpenAPI-clients.
What industry is Virtru in?
Virtru's product category is Data-Centric Encryption and Zero Trust Data Security Software. Its primary akta.pro industry code is HDADAFAB, Encryption (Data-at-Rest / In-Transit / In-Use), with a secondary code of HDADAKAD, Email Data Loss Prevention & Encryption. Its NAICS code is 513210 and its SIC code is 7372.