In short: Todyl is a security platform that combines SASE and zero trust access, EDR and NGAV, a cloud SIEM, 24/7 managed XDR, security automation and GRC behind a single agent and console. Modules are chosen per organisation and billed monthly per protected device, with no annual contract. Forever Systems supplies, deploys and manages Todyl.
What Todyl does
Todyl's platform brings networking and security together in one cloud service. Rather than separate VPN, web filter, antivirus, logging and monitoring products, Todyl delivers them as modules that share a single lightweight agent, one console and one data store.
The platform covers four jobs most organisations need doing:
- Connecting people safely: SASE with zero trust network access, a secure web gateway, DNS and web filtering and a cloud firewall, delivered through Todyl's Secure Global Network of cloud points of presence
- Protecting devices: endpoint detection and response (EDR) with next-generation antivirus (NGAV) in the same agent
- Seeing and responding to threats: a cloud-managed SIEM, security automation playbooks and a 24/7 managed XDR team
- Proving it: governance, risk and compliance (GRC) tools that map controls to frameworks such as CIS and NIST
Todyl sells only through IT service providers and does not compete with them for customers, so you buy and run it through a provider such as Forever Systems. In October 2026 Todyl also announced Todyl Email Security, an email protection module built with IRONSCALES and integrated into the same platform; ask us about availability.
The Todyl modules we supply
| Module | What it does | Licensed by |
|---|---|---|
| Todyl SASE | Zero trust network access, secure web gateway, cloud NGFW and DNS filtering, with LAN Zero Trust segmentation, static IPs and site-to-site tunnels as options | Device, with static IPs per tenant |
| Todyl Endpoint Security | EDR and NGAV in one agent, with host isolation and file quarantine | Device |
| Todyl SIEM | Cloud-managed SIEM collecting endpoint, identity, network and cloud logs, with retention from 7 days to 5 years | Device, by retention tier |
| Todyl MXDR | 24/7 managed detection and response, including identity threat detection for Microsoft 365 and Google Workspace | Device |
| Todyl Security Automation | SOAR playbooks that respond to Microsoft 365 and endpoint threats automatically | Tenant |
| Todyl GRC | Compliance mapping, assessments, policy repository and readiness dashboards | Device |
You can take one module or several, adding SIEM and MXDR later so everything is watched around the clock.
Todyl packages: Essentials, Advanced and Complete
Todyl also publishes three packages that bundle SASE, Endpoint Security, SIEM, MXDR and GRC with 24/7 support and single-agent deployment. They differ in retention, automation, mobile allowance and network options:
| Included | Essentials | Advanced | Complete |
|---|---|---|---|
| SIEM data retention | 30 days | 90 days | 1 year |
| SOAR playbooks | 5 | 5 | Unlimited |
| SSL inspection and 2 static IPs | No | Yes | Yes |
| LAN Zero Trust segmentation | No | Yes | Yes |
| SASE mobile device ratio | 1:1 | 1:2 | 1:4 |
| IPsec tunnel connections | No | No | Unlimited |
| Multi-engine download scanning | No | No | Yes |
| Compliance frameworks | Basic | Enhanced | Enhanced |
Todyl states the mobile allowance as a ratio for each package; we explain how it applies to your devices, and compare a package with hand-picked modules, when we quote.
How Todyl is licensed
Todyl is sold as a service rather than as perpetual software:
- Per device: most modules (SASE, Endpoint Security, SIEM, MXDR, GRC, LAN Zero Trust and multi-engine scanning) are counted by the devices you protect
- Per tenant: static IP addresses and the Security Orchestration and Response (automation) module are licensed once for your organisation
- Per gigabyte: SIEM data above the allowance for your retention tier is billed by volume
- Billing: charges are calculated monthly in arrears on usage, and Todyl states its service runs with no annual contracts, so modules can be switched on or off as needs change. A minimum monthly commitment can apply, which we confirm when we quote
There is no hardware to buy for the core service. Ask us for a quote for your device numbers and the modules you want, and we will show the options side by side.
Who Todyl suits
Todyl is designed for organisations that want enterprise-style controls without running a stack of separate products:
- businesses with remote and hybrid staff that want to retire a traditional VPN or RDP gateway
- smaller organisations that need 24/7 monitoring but cannot staff a security operations centre
- firms asked by a cyber insurer or customer for MDR, logging and evidence of access control
- multi-site organisations that want consistent web filtering and firewall rules at home, in the office and on the road
If you are working towards Cyber Essentials, Todyl's access control, malware protection and logging support several of the controls. Compare alternatives in SASE, ZTNA and business VPN and EDR, XDR and MDR.
Buying Todyl through Forever Systems
- Scope: we count your devices, sites and users, and check your identity platform (Microsoft 365 or Google Workspace) and any existing VPN, firewall or antivirus.
- Recommend: we suggest a package or a set of modules, the right SIEM retention for your obligations, and whether you need static IPs or site tunnels.
- Deploy: we roll out the Todyl agent through your device management tooling, build access and filtering policies, and connect your log sources.
- Run: we monitor the console, work alongside the Todyl MXDR team on any cases, and handle device changes, renewals and billing on one monthly invoice.
See every vendor we supply on our vendors A to Z.
Explore Todyl
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Can I buy Todyl directly?
Todyl sells only through IT service providers. Forever Systems supplies Todyl as part of a managed service, with the licences, deployment and day-to-day running on one account.
Is Todyl licensed per user or per device?
Most Todyl modules are licensed per protected device and billed monthly in arrears. Static IP addresses and the security automation module are licensed per tenant, and SIEM data above your allowance is billed per gigabyte.
Does Todyl need an annual contract?
Todyl states that its service is offered with no annual contracts, so modules can be turned on or off as your needs change. We confirm the terms for your order when we quote.
What is in the Todyl Complete package?
Complete includes SASE, Endpoint Security, SIEM, MXDR and GRC with 1-year data retention, unlimited SOAR playbooks, SSL inspection, static IPs, LAN Zero Trust, unlimited IPsec tunnels and multi-engine download scanning.
Does Todyl replace a VPN?
Yes. Todyl SASE uses an always-on agent and zero trust access policies to connect users to applications through its cloud points of presence, so for most organisations it can take over from a traditional VPN or RDP gateway.