In short: WatchGuard CloudDR (Cloud Detection and Response) monitors SaaS applications such as Microsoft 365, Google Workspace, Okta and Salesforce for compromised identities, risky misconfigurations and unsanctioned apps and AI tools, and can fix some issues automatically. Built on Perimeters.io technology acquired in May 2026, it is licensed per identity.
What CloudDR is
WatchGuard CloudDR, short for Cloud Detection and Response, is WatchGuard's newest product. WatchGuard launched it in May 2026 after acquiring the cloud application security company Perimeters.io, and it is now managed in WatchGuard Cloud alongside WatchGuard's other services.
Much of an organisation's data now lives in SaaS applications, where firewalls and endpoint agents see little. CloudDR connects to those applications through their APIs, watches for signs of account compromise and risky settings, and helps you fix what it finds.
What CloudDR covers
CloudDR concentrates on three kinds of risk:
| Risk | What CloudDR does |
|---|---|
| Compromised identities | Identity threat detection and response (ITDR): spots unusual access patterns and signs of stolen credentials, and can revoke access or apply extra safeguards |
| Cloud misconfigurations | Issue rules flag risky settings, security gaps and drift from good practice, including compliance issues |
| Shadow IT and shadow AI | Discovers unsanctioned applications, AI tools and OAuth connections linked to your accounts |
Some integrations support auto-fix, so CloudDR can correct a setting in the application itself, and responses can be guided, bulk or automated. Linking CloudDR with FireCloud extends shadow SaaS and AI discovery to personal accounts used on work computers.
Supported applications
Integrations include Microsoft 365 (with Entra ID, Teams, SharePoint and Intune), Google Workspace, Okta, OneLogin, Duo, Salesforce, HubSpot, Slack, Dropbox, DocuSign, Atlassian tools such as Jira and Confluence, AWS IAM, Jamf and OpenAI, along with professional services automation and documentation tools used by IT providers. WatchGuard keeps the current list in its documentation, and we check that the applications you rely on are covered before you buy.
How CloudDR is licensed
CloudDR is licensed per identity: a user or account with access to your cloud applications. Where one person has several accounts across applications, CloudDR groups them into a single identity. In Microsoft 365 and Google Workspace, only accounts that meet WatchGuard's criteria, such as active licensed users, count, and non-human accounts do not.
WatchGuard offers term licences and subscription licences billed monthly on the identities allocated. CloudDR protects Microsoft 365 and Google Workspace but does not include those subscriptions; Forever Group's Microsoft licensing team supplies Microsoft 365. Ask us for a quote for your user count.
Requirements and deployment
There is no agent to install. An administrator of each SaaS application grants CloudDR access through the application's own consent process, after which CloudDR builds an inventory of users and connected apps and starts applying its rules. Changes in an application usually reach CloudDR within a day. Deployment is mostly about deciding which findings should be fixed automatically and which should wait for a person. CloudDR works without other WatchGuard products, but sits naturally alongside Endpoint Security, AuthPoint and MDR in the same console.
Who it suits and how we help
CloudDR suits organisations that run on Microsoft 365 or Google Workspace and want to know when an account is misused, when a setting drifts or when staff connect unapproved AI tools, without hiring a cloud security specialist. We connect your applications, agree automatic fixes with you, tune the rules and review findings. See also identity, MFA and privileged access.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is WatchGuard CloudDR?
CloudDR is WatchGuard's Cloud Detection and Response service. It monitors SaaS applications such as Microsoft 365 and Google Workspace for identity threats, risky misconfigurations and unsanctioned apps and AI tools, and can fix some issues automatically.
When was WatchGuard CloudDR launched?
WatchGuard launched CloudDR in May 2026, after acquiring Perimeters.io, whose cloud application security technology it is built on.
How is WatchGuard CloudDR licensed?
Per identity. Each person or account with access to your cloud applications that meets WatchGuard's criteria needs a licence, with one person's accounts across several apps grouped as one identity.
Is CloudDR the same as WatchGuard SaaS DR?
No. SaaS DR, formerly ThreatSync+ SaaS, extends network detection to SaaS activity and is part of Total NDR. CloudDR is the separate, dedicated cloud application security service. We can advise which fits your needs.