Freedom251 › Cloud Encryption Software
IronCore Labs SaaS Shield
What IronCore Labs SaaS Shield is
IronCore Labs SaaS Shield adds application-layer encryption, data controls, and data access visibility to cloud applications, including multi-tenant SaaS products. It uses separate encryption keys for each tenant in a shared data store, and deterministic encryption supports exact-match searches on protected data. Customers can hold their own keys and configure customer-managed key arrangements. Listed key management integrations include Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault. The Tenant Security Proxy runs as a Docker container in customer infrastructure, while encryption can be connected through proxies or SDKs. The product describes proxies for Amazon S3, OpenSearch, and Elasticsearch. It supports key rotation, re-keying, algorithm and key-size changes, and separating key storage from data storage across cloud providers. IronCore Labs says its architecture keeps sensitive data and keys from being visible to the company, and encrypts configuration data sent to its Configuration Broker end to end. Pricing includes a one-tenant free trial; Pro starts at $1,954/mo plus $25 per tenant for up to 100 tenants.
Who it suits
SaaS providers seeking per-tenant protection and customer-managed keys may find SaaS Shield relevant, particularly those serving larger enterprise customers. Its deployment options include customer infrastructure and cloud integrations.
What it does well
- Separate encryption keys for each tenant
- Supports exact-match searches on encrypted data
- Integrates with four listed external key services
- Supports key rotation and re-keying
What to know first
- Free trial is limited to one tenant
- Multi-tenant support is not included in the free trial
- Pro starts at $1,954/mo plus per-tenant charges
Limits
The Free Trial costs $0 and allows one tenant, with multi-tenant support excluded. Pro supports up to 100 tenants and adds $25 per tenant; Enterprise has unlimited tenants but its base and per-tenant prices require contacting IronCore Labs.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free Trial | $0 /mo; one free tenant · 1 tenant · multi-tenant support not included · Community & Docs support | Free |
| Pro | $1,954 /mo plus $25 per tenant for up to 100 tenants · Up to 100 tenants · Email support · Cloaked Search +$10/tenant · Cloaked AI +$10/tenant | $1,954 a month |
| Enterprise | Contact us; base price and per-tenant price are listed as “Ask us” · Unlimited tenants · 24/7 Phone support · SLAs · On-prem Option | On request |
As ironcorelabs.com lists them, read 3 Oct 2026. The maker's own page has the final word.
Getting started
- Open the SaaS Shield website
- Choose the Free Trial, Pro, or Enterprise plan
- Install the Tenant Security Proxy as a Docker container in your infrastructure
- Connect encryption through proxies or SDK integrations
- Configure customer-managed keys with a supported KMS
- Set up storage or search connections for Amazon S3, OpenSearch, or Elasticsearch
Verdict
SaaS Shield combines tenant-specific encryption with customer-managed key options and storage or search integrations. Review the tenant limits and Pro’s per-tenant charge when assessing fit.
Questions
Does SaaS Shield have a free plan?
There is no free plan, but the Free Trial is billed at $0 and allows one tenant.
What does Pro cost?
Pro is $1,954 per month, plus $25 per tenant for up to 100 tenants.
Which key-management services integrate with it?
Listed integrations include Thales CipherTrust Manager, Google Cloud KMS, AWS KMS, and Microsoft Azure Key Vault.
Can customers control their encryption keys?
Yes. Customers can hold their own keys and use customer-managed key configurations.
Where does the security proxy run?
The Tenant Security Proxy is installed as a Docker container in the customer’s infrastructure.
What support comes with each plan?
Free Trial includes Community & Docs, Pro includes email support, and Enterprise includes 24/7 phone support.
Facts from IronCore Labs SaaS Shield's own pages
- Audit and controls
- The product offers real-time audit trail streams to customers, while the pricing comparison lists real-time audit trails and real-time security audit as Enterprise features. · ironcorelabs.com, 3 Oct 2026
- Company security
- IronCore Labs states on its Trust Center that it is SOC 2 certified. · ironcorelabs.com, 3 Oct 2026
- Compliance context
- The maker says the product is intended to help customers address data privacy and sovereignty requirements, including handling EU personal data by U.S. companies after Schrems II. · ironcorelabs.com, 3 Oct 2026
- Cryptographic flexibility
- SaaS Shield supports key rotation, re-keying, algorithm and key-size agility, and separating key storage from data storage across cloud providers. · ironcorelabs.com, 3 Oct 2026
- Customer-held keys
- Customers can hold their own encryption keys, and the product supports customer-managed key configurations. · ironcorelabs.com, 3 Oct 2026
- Data privacy
- IronCore Labs says its architecture keeps sensitive data and keys from being visible to the company, and configuration data sent to its Configuration Broker is end-to-end encrypted. · ironcorelabs.com, 3 Oct 2026
- Deployment
- The Tenant Security Proxy is a Docker container installed in the customer’s infrastructure; encryption can be integrated through proxies or SDKs. · ironcorelabs.com, 3 Oct 2026
- Intended users
- The maker positions SaaS Shield for SaaS providers seeking per-tenant security and customer-managed keys, including businesses selling to larger enterprise customers. · ironcorelabs.com, 3 Oct 2026
- Key management integrations
- Listed KMS integrations include Thales CipherTrust Manager, Google Cloud Key Management Service, AWS Key Management Service, and Microsoft Azure Key Vault. · ironcorelabs.com, 3 Oct 2026
- Per-tenant protection
- The product uses different encryption keys for each tenant to help protect tenant data in a shared data store. · ironcorelabs.com, 3 Oct 2026
- Purpose
- SaaS Shield adds application-layer encryption, data controls, and data access visibility to cloud applications, including multi-tenant SaaS apps. · ironcorelabs.com, 3 Oct 2026
- Search
- SaaS Shield supports exact-match searches on encrypted data using deterministic encryption. · ironcorelabs.com, 3 Oct 2026
- Storage and search integrations
- The product page describes proxies for Amazon S3, OpenSearch, and Elasticsearch, as well as SDK integrations. · ironcorelabs.com, 3 Oct 2026
- Support
- The pricing page lists Community & Docs support for Free Trial, Email for Pro, and 24/7 Phone for Enterprise. · ironcorelabs.com, 3 Oct 2026
Where IronCore Labs SaaS Shield stands on Freedom251
- Cloud Encryption Software#9 of 23