What does Guardsix sell?

Guardsix sells Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. Guardsix SIEM: A SIEM for lean teams defending Europe, with sovereign log management and audit-ready evidence. Guardsix NDR: Network detection that pairs with Guardsix SIEM across IT and OT. Guardsix SOAR: The automation and response layer of Guardsix SIEM. Guardsix Governance: Audit-ready access control, built first for healthcare.

Who does Guardsix fit?

From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. It also addresses MSSPs and security service providers that run many customer environments. It names critical national infrastructure operators as a focus, and it describes its NDR for complex, regulated environments with IT/OT infrastructure. Guardsix Governance is aimed first at hospital IT and compliance teams. Guardsix frames its offer around organisations accountable to NIS2, DORA and GDPR, and says it is on-prem by default.

How does CISO Tribune file Guardsix?

CISO Tribune files Guardsix under SIEM, with SOAR and security automation and Network detection and response as secondary categories.

Where is Guardsix headquartered?

Guardsix is headquartered in Copenhagen, Denmark.

Guardsix is owned by Summa Equity, which acquired it in 2023.

Company record · security vendor

Guardsix

Where Guardsix appears on the record (56)

Every page on CISO Tribune and its network that carries this company, 56 in all.

Compared with (51): vs 7AI, vs Alphabet, vs Arista Networks, vs Binary Defense, vs Blackpoint Cyber, vs Cisco, vs Corelight, vs Cribl, vs CyberKord, vs Cynet, vs Cyware, vs D3 Security, vs Darktrace, vs DefenseStorm, vs Devo, vs Elastic, vs Elbit Systems, vs Exabeam, vs Exaforce, vs ExtraHop, vs Fidelis, vs Fortinet, vs Gigamon, vs Graylog, vs Gurucul, vs Hunters, vs Huntress, vs Mate Security, vs Mave, vs Microsoft, vs NEOX NETWORKS, vs NETSCOUT, vs Panther, vs Proficio, vs Proximus NXT, vs Rapid7, vs Realm Security, vs ReliaQuest, vs RunReveal, vs Securonix, vs SolarWinds, vs Splunk, vs Stellar Cyber, vs Sumo Logic, vs Swimlane, vs Tenfold Security, vs ThreatDefence, vs Tines, vs Torq, vs UnderDefense, vs Vectra AI
In the vendor directory (5): SIEM vendors · primary category
SOAR and security automation vendors · category
Network detection and response vendors · category
Network security vendors: who they are and how CISOs compare them · vendor guide
SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide

What the company sells

Guardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.

Guardsix says its platform is aimed at European organisations that protect society, such as energy, healthcare and public services, and the partners who serve them. Guardsix says cloud-first security shifts control away from defenders while leaving accountability behind, and says it closes that gap by giving customers control over their data, deployment and operations. Guardsix says it designs for European legal and operational requirements, partners with regional cloud providers, and offers on-prem and sovereign-ready deployments. Guardsix offers on-demand or instructor-led training to help analysts grow from day one.

Guardsix SIEM is for lean teams defending Europe in energy, healthcare and government, and for the MSSPs who serve them. Guardsix says it delivers sovereign log management across hybrid, on-prem, OT and cloud environments, and continuous audit-ready evidence for NIS2, DORA and GDPR Article 32. Guardsix SIEM is self-hosted and air-gappable, and its pricing is node-based, so spend scales with the infrastructure rather than with data volume. Content packs aligned with NIS2, DORA and GDPR requirements are ready to use. Guardsix SIEM brings logs from IT estates, OT environments, identity systems, network devices and applications into a single instance that the customer controls.

Guardsix NDR pairs with Guardsix SIEM as one platform with a chain of events across IT and OT. Guardsix says it uses machine-learning analytics and stitches related signals into a timeline across the seven phases of an attack. Guardsix says Guardsix NDR is designed so any analyst on a lean team can use it productively from day one. Guardsix SOAR is the automation and response layer of Guardsix SIEM, and its playbooks execute locally. Alerts from Guardsix SIEM and NDR enter SOAR with full context already attached, and Guardsix SOAR can expand with hundreds of additional integrations across EDR, identity, cloud and OT.

Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Guardsix says the access control model it built first for healthcare applies to any regulated environment where access has to be visible, explainable and defensible.

Guardsix describes two audiences. For critical national infrastructure operators, Guardsix says it helps them. Guardsix points to hospitals, energy grids, water management and transportation as systems whose failure harms communities. Guardsix says it prices by the number of nodes, devices or entities in an environment.

Guardsix was formerly Logpoint, which officially announced its transformation into Guardsix on March 12, 2026. Guardsix traces its history to a company founded in Denmark as a cybersecurity consulting business. Swedish investment firm Summa Equity acquired a majority stake in Logpoint, and Guardsix names Summa as its majority investor. Logpoint acquired the Danish cybersecurity company Muninn, specialised in AI-driven NDR. Logpoint also acquired the Israeli company SecBI, specialising in SOAR, XDR and automated threat detection. Mikkel Drucker joined Logpoint as CEO. Guardsix A/S carries the company reg. no. 26 30 19 39, and Guardsix says it is EU-HQ and EU-governed.^{[1][2][5][7][9][10][11][12][13][14]}

Categories: SIEM (primary category)
SOAR and security automation
Network detection and response
Compare Guardsix with companies in the same category
Headquarters: Copenhagen, Denmark^[3][8]
Founded: Not established from our sources
Ownership: Owned by Summa Equity since 2023^[3][4][6]
CISO on record: Not yet on our record. Send a verified source
Website: guardsix.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Guardsix SIEM^{[4][7][8][9][10]}
A SIEM for lean teams defending Europe, with sovereign log management and audit-ready evidence.
Guardsix SIEM delivers sovereign log management across hybrid, on-prem, OT and cloud. It is self-hosted and air-gappable, with node-based pricing. Ready-to-use content packs are aligned with NIS2, DORA and GDPR requirements.
Guardsix NDR^[4][9]
Network detection that pairs with Guardsix SIEM across IT and OT.
Guardsix NDR pairs with Guardsix SIEM as one platform. It uses machine-learning analytics and stitches related signals into a single timeline across the seven phases of an attack. Guardsix says any analyst on a lean team can use it productively from day one.
Guardsix SOAR^[4][10]
The automation and response layer of Guardsix SIEM.
Guardsix SOAR provides automated investigation and response workflows built into the same platform as Guardsix SIEM. Playbooks execute locally.
Guardsix Governance^[4][12]
Audit-ready access control, built first for healthcare.
Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Reviewers comment, approve and escalate in-browser, and every action is preserved alongside the evidence.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Guardsix's categories, then alphabetical. A list from the record, never a ranking.

On siem, Guardsix competes with Elastic, Gurucul, Securonix, Splunk, Alphabet, Exabeam, Graylog, Hunters, RunReveal, Stellar Cyber and 22 more.
On soar and security automation, Guardsix competes with D3 Security, Swimlane, Tines, Devo, Elastic, Gurucul, Securonix, Splunk, CyberKord, Cyware and 5 more.
On network detection and response, Guardsix competes with Arista Networks, Corelight, Darktrace, ExtraHop, Vectra AI, ThreatDefence, Fidelis, Gigamon, NEOX NETWORKS and NETSCOUT.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]Command centreGuardsix · guardsix.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]34576478235293 Logpoint is now guardsixGuardsix · servicedesk.guardsix.com · published March 12, 2026 · Tier A: the company, a regulator or a filing
[3]Summa equity invests in logpoint to create european cybersecurity powerhouseSumma Equity · summaequity.com · published March 2, 2023 · Tier A: the company, a regulator or a filing
[4]Guardsix | Your closest ally in cyber securityGuardsix · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
[5]Product UpdatesGuardsix · undated page, accessed October 25, 2026 · Tier A: the company, a regulator or a filing
[6]About guardsix | European Cybersecurity AllyGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[7]Guardsix SIEM | Built for Lean Security TeamsGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[8]Guardsix for Compliance | NIS2Guardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[9]Guardsix NDR | Network Detection & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[10]Guardsix SOAR | Security Automation & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[11]Guardsix Fleet | Centralised Security OperationsGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[12]Guardsix Governance | Audit-ready access controlGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[13]Guardsix Pricing | Predictable Cyber Security Platform CostsGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[14]Master Terms of Service for SaaS-version of Logpoint SIEMGuardsix · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Guardsix? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Guardsix. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Guardsix

What does Guardsix sell?: Guardsix sells Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. Guardsix SIEM: A SIEM for lean teams defending Europe, with sovereign log management and audit-ready evidence. Guardsix NDR: Network detection that pairs with Guardsix SIEM across IT and OT. Guardsix SOAR: The automation and response layer of Guardsix SIEM. Guardsix Governance: Audit-ready access control, built first for healthcare.
Who does Guardsix fit?: From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. It also addresses MSSPs and security service providers that run many customer environments. It names critical national infrastructure operators as a focus, and it describes its NDR for complex, regulated environments with IT/OT infrastructure. Guardsix Governance is aimed first at hospital IT and compliance teams. Guardsix frames its offer around organisations accountable to NIS2, DORA and GDPR, and says it is on-prem by default.
How does CISO Tribune file Guardsix?: CISO Tribune files Guardsix under SIEM, with SOAR and security automation and Network detection and response as secondary categories.
Where is Guardsix headquartered?: Guardsix is headquartered in Copenhagen, Denmark.
Who owns Guardsix?: Guardsix is owned by Summa Equity, which acquired it in 2023.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.