Precisely's Assure Security suite is the broadest single-vendor IBM i security platform on the market, spanning multi-factor authentication, encryption, compliance monitoring, and access control in one licensing family. It is the platform we point mid-size and enterprise IBM i shops to first when they need one vendor covering the most ground.
Strengths
- Widest single-suite coverage: MFA, encryption, exit point control, and compliance monitoring under one console
- Strong native IBM i journal-based monitoring with real-time SIEM forwarding (Splunk, QRadar, Sentinel)
- Assure Encryption supports field-level and full-database encryption without application changes in most cases
- Established install base and long IBM i-specific engineering history (originated from Townsend Security and Syncsort lineage)
Limitations
- Suite pricing and licensing complexity increases as modules are added; full-suite cost is not the cheapest entry point
- MFA client coverage for legacy green-screen sessions requires exit-point configuration that takes real implementation time
- Reporting UI is functional but less modern than some newer point-solution dashboards
Best fit: Mid-size to enterprise IBM i shops that want one vendor for MFA, encryption, and compliance monitoring rather than stitching together point products.
Fortra's Powertech line (formerly HelpSystems, formerly PowerTech Group) is the longest-running dedicated IBM i security vendor and still the largest install base by most industry surveys, including its own annual State of IBM i Security Study. Powertech Multi-Factor Authentication, Authority Broker, Exit Point Manager, and Compliance Monitor are each strong standalone products.
Strengths
- Largest install base among dedicated IBM i security vendors, with the deepest bench of IBM i-specific security expertise
- Powertech Authority Broker is a mature, well-regarded privileged access / elevated-authority management product
- Exit Point Manager provides granular network access control across FTP, ODBC, DDM, and remote command exit points
- Publishes the annual State of IBM i Security Study, a widely cited independent-feeling data source (though vendor-funded)
Limitations
- Product line grew through acquisition (PowerTech, Bytware, Robot, Vityl) and integration between modules is less unified than Precisely's single suite
- Some legacy product UIs (Robot Console-adjacent tooling) show their age relative to newer competitors
- Full stack pricing across MFA, Authority Broker, Exit Point Manager, and Compliance Monitor adds up for smaller shops
Best fit: Shops that specifically need best-in-class privileged access management (Authority Broker) or exit-point network control, and are comfortable managing several point products rather than one suite.
Raz-Lee's iSecurity suite covers firewall/exit-point control, antivirus, auditing, encryption, and MFA in a modular product line that is popular with mid-market IBM i shops, particularly in Europe. iSecurity Firewall and iSecurity Audit are the most commonly deployed modules.
Strengths
- iSecurity Firewall gives real-time, rule-based exit-point control with strong logging detail
- Native IBM i antivirus scanning (iSecurity Anti-Virus) is a differentiator versus vendors that rely on IFS-only scanning
- Modular licensing lets smaller shops buy only the modules they need rather than a full suite
- Strong presence and support infrastructure in European IBM i markets
Limitations
- US market share and analyst mindshare trail Fortra and Precisely
- Documentation and UI conventions can feel dated compared to Precisely's newer interfaces
- MFA module is a newer addition to the suite with a shorter track record than Fortra's or Precisely's MFA products
Best fit: Mid-market shops, especially in Europe, that want modular exit-point firewall and native antivirus scanning without committing to a full enterprise suite.
Trinity Guard (TGSecure, TGAudit, TGDetect) is a smaller, IBM i-focused vendor built by veterans of the original PowerTech engineering team. Its products are priced aggressively and aimed at shops that want core compliance and threat-detection coverage without enterprise-suite overhead.
Strengths
- Built by engineers with deep PowerTech/Powertech-era IBM i security experience
- TGDetect provides real-time threat detection with behavior-based alerting on journal activity
- Generally lower total cost of ownership than the two larger suite vendors
- Responsive, IBM i-specialist support with a smaller, more accessible team
Limitations
- Smaller company footprint means less bench depth for very large, multi-LPAR enterprise rollouts
- Narrower third-party SIEM and integration ecosystem than Fortra or Precisely
- Smaller analyst and public case-study presence makes independent verification of claims harder
Best fit: Cost-conscious mid-market shops that want solid compliance monitoring and threat detection without full enterprise-suite pricing.
Cilasoft is a France-based IBM i security vendor best known for QJRN/400 (journal-based auditing and compliance) and its anti-ransomware detection module. It has a long track record in European IBM i shops and growing presence elsewhere.
Strengths
- QJRN/400 is a mature, well-regarded journal auditing and reporting engine
- Anti-ransomware module specifically watches for IFS-side encryption behavior originating from network shares, a real and growing IBM i attack vector
- Strong compliance reporting templates for European regulatory frameworks (GDPR-adjacent controls)
Limitations
- Smaller North American market presence and partner network than Fortra, Precisely, or Raz-Lee
- Product line is narrower (auditing and anti-ransomware) rather than a full security suite
- English-language documentation and support resources are less extensive than French-language resources
Best fit: IBM i shops, especially in Europe, prioritizing journal-based audit reporting and IFS ransomware detection specifically.