In short: Guardz managed security is the Guardz platform deployed and operated for you by Forever Systems. Pro covers identity, email, managed antivirus, awareness training and dark web monitoring. Ultimate adds SentinelOne EDR and 24/7 MDR. Elite adds deeper EDR, outbound email encryption, threat hunting and forensics. All plans are licensed per user, monthly.
What every Guardz plan includes
The Guardz platform puts the security controls a small business needs into one console, with continuous risk analysis and a single list of issues, each with a playbook for fixing it. Through Forever Systems you do not have to operate that console yourself: we deploy it, tune it, respond to what it finds and report back to you.
Every plan, including Pro, is built on the same foundations:
- Identity threat detection and response (ITDR) for Microsoft 365 and Google Workspace accounts
- Email protection against phishing, spam, malware, zero-day attachments and malicious links, using the Check Point (Avanan) email engine through an in-line API, with a unified Microsoft 365 quarantine
- Endpoint posture and managed antivirus through the Guardz agent, which checks updates, firewall and disk encryption and manages Microsoft Defender Antivirus on Windows
- Cloud data protection, flagging files in OneDrive, SharePoint or Google Drive that are shared externally or by public link
- Security awareness training and phishing simulations for staff
- External footprint scans and dark web monitoring for exposed services and leaked credentials
Guardz also carries out automated remediations, such as suspending a compromised account or removing a public sharing link, so routine fixes do not wait for someone to log in.
Pro, Ultimate and Elite compared
| Capability | Pro | Ultimate | Elite |
|---|---|---|---|
| Identity threat detection and response | Yes | Yes | Yes |
| Managed antivirus and device posture | Yes | Yes | Yes |
| Check Point email engine with unified Microsoft 365 quarantine | Yes | Yes | Yes |
| Awareness training and phishing simulations | Yes | Yes | Yes |
| Cloud data protection, external footprint scan, dark web monitoring | Yes | Yes | Yes |
| SentinelOne EDR | No | Control | Complete |
| Check Point Advanced Email (console access, Email Explorer, secure outbound, custom banners) | No | Yes | Yes |
| Check Point Complete Email (outbound data loss prevention and encryption) | No | No | Yes |
| 24/7 managed detection and response | No | Yes | Yes |
| Forensic investigation for endpoints and active threat hunting | No | No | Yes |
SentinelOne Control brings SentinelOne's AI-based prevention and behavioural detection to each device, plus device control and firewall control. SentinelOne Complete adds the deep telemetry needed for threat hunting and forensic investigation. On plans with SentinelOne, Guardz's managed antivirus is not needed alongside it. Guardz can adjust the split between plans, so we confirm it against the current plan sheet when we quote.
Licensing and changing plans
All three plans use the same model: per user, with flexibility for the devices each person uses, billed monthly.
| Situation | What happens |
|---|---|
| Staff join or leave | Users are added or removed and the next monthly invoice reflects it |
| Very small team | There is no minimum user count, so a handful of users can start |
| Larger organisation | Volume pricing applies as user numbers grow |
| More devices than users | On Ultimate and Elite, additional SentinelOne seats can be added for servers or shared machines |
| Moving up a plan | Switch from Pro to Ultimate or Elite at any time; we deploy SentinelOne and set up MDR |
Prices depend on the plan, user numbers and the level of management you choose, so ask us for a quote.
Requirements and deployment
Guardz is cloud-hosted, so there is no server to install. Deployment has three parts:
- Connect your tenant: a Microsoft 365 or Google Workspace administrator authorises Guardz, which switches on identity monitoring, email protection and cloud file alerts. Google Workspace email protection needs one spare user licence for a service account.
- Deploy the agent: the Guardz agent supports Windows 10 and 11, Windows Server 2016, 2019 and 2022, and macOS on Intel and Apple silicon. We push it out through your device management or RMM tool, or Group Policy (MSI for Windows, PKG for macOS). On Ultimate and Elite the SentinelOne agent is deployed as well.
- Invite your team: staff are enrolled in awareness training and phishing simulations on a schedule we agree with you.
Guardz offers a 14-day trial, which we can use to run a baseline assessment before you commit.
Choosing the right plan
- Pro suits small offices that want accounts, email and devices covered and monitored, with us following up on what Guardz finds but without round-the-clock response.
- Ultimate suits most businesses that would struggle if an account takeover or ransomware attack happened at 2am on a Saturday. The Guardz MDR team investigates and contains confirmed threats around the clock.
- Elite suits firms handling client money, health data or legal matters, and anyone whose insurer or customers expect threat hunting, forensic capability and outbound email encryption.
If you only need one of these layers, compare specialist products in endpoint protection or security awareness training.
How we help
We start with a short review of your users, devices and Microsoft 365 or Google Workspace setup, recommend a plan and quote it. After deployment we tune policies, agree which automated responses are pre-approved, and work through the first set of findings with you, such as missing MFA, risky sharing or unprotected devices. From then on we watch alerts, send regular reports and handle user changes and renewals on your normal invoice. Contact us to start with a baseline assessment.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Which Guardz plan includes 24/7 MDR?
Ultimate and Elite. Both include the Guardz 24/7 managed detection and response service, which covers devices running SentinelOne and identity incidents detected by Guardz ITDR. Pro does not include MDR.
Does Guardz replace Microsoft Defender?
On Pro, Guardz manages Microsoft Defender Antivirus on Windows devices rather than replacing it. On Ultimate and Elite, SentinelOne EDR provides the endpoint protection layer and the managed antivirus is not needed alongside it.
Does Guardz include phishing simulations?
Yes, on every plan. Security awareness training and phishing simulations sit in the same console that handles email protection, so you can test staff and assign training in one place.
Can we start on Pro and upgrade later?
Yes. You can move from Pro to Ultimate or Elite at any time. We deploy the SentinelOne agent and set up MDR response preferences when you upgrade.