
Endpoint Protector Cross-Platform DLP for Windows, macOS, and Linux
CoSoSys is a data loss prevention vendor founded in 2004 in Cluj-Napoca, Romania, and acquired by Netwrix in February 2024, after which its technology ships as Netwrix Endpoint Protector within the wider Netwrix data and identity security portfolio. Its buyers are organizations in regulated industries that must demonstrate control over where sensitive files travel: healthcare, financial services, legal, pharmaceutical, consulting, and manufacturing, with policy templates mapped to HIPAA, PCI DSS, GDPR, NIST, and ISO 27001.
Endpoint Protector runs as an agent on each workstation and enforces policy at the point data would leave the device. Four modules divide the work: Device Control restricts USB and peripheral use by vendor ID, product ID, and serial number; Content Aware Protection inspects files in motion using both content and contextual scanning; eDiscovery scans data at rest on the endpoint and can encrypt or delete what it finds; Enforced Encryption applies password-protected encryption to USB storage devices.
Classification uses n-gram based text categorization to recognize intellectual property and regulated data across hundreds of file formats, and policies extend to blocking uploads into generative AI tools. Equal support for macOS and Linux alongside Windows separates the product from DLP tools built Windows-first, which matters in engineering and design teams. Deployment options include SaaS, virtual appliance images in OVF and VHD formats, and self-hosted installs on AWS, Azure, or Google Cloud.



