CISO Tribune

Vendor comparison · 2 companies

Guardsix vs NEOX NETWORKS

Guardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance. NEOX NETWORKS provides network visibility for IT and OT observability and security. CISO Tribune files both under Network detection and response. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Guardsix
  • NEOX NETWORKS
Guardsix vs NEOX NETWORKS: Products, Customers and Funding Compared
GuardsixGuardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.guardsix.comNEOX NETWORKSNEOX NETWORKS provides network visibility for IT and OT observability and security.neoxnetworks.com
What it sells
  • Guardsix SIEM[4][7][8][9][10]A SIEM for lean teams defending Europe, with sovereign log management and audit-ready evidence.
  • Guardsix NDR[4][9]Network detection that pairs with Guardsix SIEM across IT and OT.
  • Guardsix SOAR[4][10]The automation and response layer of Guardsix SIEM.
  • Guardsix Governance[4][12]Audit-ready access control, built first for healthcare.
  • PacketRaven[1][7]Network TAPs that export a copy of data traffic so it can be evaluated with tools.
  • PacketOwl[2][3][8]A set of 10G, 25G, 40G, and 100G network security appliances for visibility and real-time threat detection.
  • PacketOwlVirtual[3]The virtual version of PacketOwl for cloud-native and virtualized deployments.
  • PacketRoo[1][9]A data diode that provides galvanic isolation of the networks and enables only unidirectional transmission.
  • NEOXSecureFileTransmitter[9]A software solution for secure, one-way file transfer from OT to IT systems.
  • NEOX PacketOps™ FrameworkA framework that unifies how organizations Access, Direct, Record, and Protect network traffic.
Categories
Headquarters
Copenhagen, Denmark[3][8]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Summa Equity since 2023[3][4][6]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. It also addresses MSSPs and security service providers that run many customer environments. It names critical national infrastructure operators as a focus, and it describes its NDR for complex, regulated environments with IT/OT infrastructure. Guardsix Governance is aimed first at hospital IT and compliance teams. Guardsix frames its offer around organisations accountable to NIS2, DORA and GDPR, and says it is on-prem by default.Its pages name the Banking, Utilities, Healthcare, and Government sectors, and target verticals such as Financial Services, Manufacturing, Transportation, Energy & Utilities, and Defense. PacketOwl is described as purpose-built for enterprises, data centers, service providers, HFT/HPC environments, edge networks, and other critical deployments. PacketOwl integrates into security environments that are on-premises, in the cloud, or hybrid.
Last verified
September 27, 2026November 8, 2026

Where they overlap

  • Guardsix and NEOX NETWORKS are both filed under Network detection and response.

Where they differ, field by field

  • Guardsix's primary category is SIEM; NEOX NETWORKS's is Network visibility and traffic brokering.
  • Guardsix is also filed under SOAR and security automation. NEOX NETWORKS is also filed under OT and ICS security and Unidirectional gateways and secure transfer.
  • Guardsix lists Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. NEOX NETWORKS lists PacketRaven, PacketOwl, PacketOwlVirtual, PacketRoo, NEOXSecureFileTransmitter and 1 more.
  • Guardsix is headquartered in Copenhagen, Denmark.
  • Guardsix is owned by Summa Equity, since 2023.

What it sells: Guardsix

What Guardsix SIEM does[4][7][8][9][10]
Guardsix SIEM delivers sovereign log management across hybrid, on-prem, OT and cloud. It is self-hosted and air-gappable, with node-based pricing. Ready-to-use content packs are aligned with NIS2, DORA and GDPR requirements.
What Guardsix NDR does[4][9]
Guardsix NDR pairs with Guardsix SIEM as one platform. It uses machine-learning analytics and stitches related signals into a single timeline across the seven phases of an attack. Guardsix says any analyst on a lean team can use it productively from day one.
What Guardsix SOAR does[4][10]
Guardsix SOAR provides automated investigation and response workflows built into the same platform as Guardsix SIEM. Playbooks execute locally.
What Guardsix Governance does[4][12]
Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Reviewers comment, approve and escalate in-browser, and every action is preserved alongside the evidence.

What it sells: NEOX NETWORKS

What PacketRaven does[1][7]
NEOXPacketRaven Secure Modular Fiber TAPs are designed for use in critical environments (CRITIS). NEOXPacketRaven Secure Modular Fiber TAPs have an optical isolator and an optical filter with data diode functionality. NEOXPacketRaven vTAP supports tapping of inter-Docker traffic.
What PacketOwl does[2][3][8]
PacketOwl operates as a unified NIDS, NSM, and NDR platform. PacketOwl offers up to 720TB of onboard SSD/SED storage. PacketOwl is integrated with the Stamus Clear NDR solution as a 100Gbps NDR probe.
What PacketOwlVirtual does[3]
NEOX PacketOwlVirtual brings similar capabilities to cloud-native and virtualized deployments. PacketOwl Virtual supports cloud and multi-cloud threat hunting and forensics for SDDC, AWS, Azure, and GCP.
What NEOXSecureFileTransmitter does[9]
NEOXSecureFileTransmitter works independently of the manufacturer and can be integrated into existing infrastructures that already have a data diode. NEOXSecureFileTransmitter combined with PacketRoo forms a solution for Windows and Linux environments.

Questions about Guardsix and NEOX NETWORKS

What do Guardsix and NEOX NETWORKS sell?
Guardsix sells Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. NEOX NETWORKS sells PacketRaven, PacketOwl, PacketOwlVirtual, PacketRoo, NEOXSecureFileTransmitter and 1 more.
Are Guardsix and NEOX NETWORKS in the same category?
They share Network detection and response. Guardsix's primary category is SIEM and NEOX NETWORKS's is Network visibility and traffic brokering.
Where are Guardsix and NEOX NETWORKS headquartered?
Guardsix is headquartered in Copenhagen, Denmark.
Who owns Guardsix and NEOX NETWORKS?
Guardsix is owned by Summa Equity, since 2023.
Who are Guardsix and NEOX NETWORKS sold to?
From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. Its pages name the Banking, Utilities, Healthcare, and Government sectors, and target verticals such as Financial Services, Manufacturing, Transportation, Energy & Utilities, and Defense.

About Guardsix

Guardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.[1][14]

Guardsix says its platform is aimed at European organisations that protect society, such as energy, healthcare and public services, and the partners who serve them. Guardsix says cloud-first security shifts control away from defenders while leaving accountability behind, and says it closes that gap by giving customers control over their data, deployment and operations. Guardsix says it designs for European legal and operational requirements, partners with regional cloud providers, and offers on-prem and sovereign-ready deployments. Guardsix offers on-demand or instructor-led training to help analysts grow from day one.

Guardsix SIEM is for lean teams defending Europe in energy, healthcare and government, and for the MSSPs who serve them. Guardsix says it delivers sovereign log management across hybrid, on-prem, OT and cloud environments, and continuous audit-ready evidence for NIS2, DORA and GDPR Article 32. Guardsix SIEM is self-hosted and air-gappable, and its pricing is node-based, so spend scales with the infrastructure rather than with data volume. Content packs aligned with NIS2, DORA and GDPR requirements are ready to use. Guardsix SIEM brings logs from IT estates, OT environments, identity systems, network devices and applications into a single instance that the customer controls.[7][9][11]

Guardsix NDR pairs with Guardsix SIEM as one platform with a chain of events across IT and OT. Guardsix says it uses machine-learning analytics and stitches related signals into a timeline across the seven phases of an attack. Guardsix says Guardsix NDR is designed so any analyst on a lean team can use it productively from day one. Guardsix SOAR is the automation and response layer of Guardsix SIEM, and its playbooks execute locally. Alerts from Guardsix SIEM and NDR enter SOAR with full context already attached, and Guardsix SOAR can expand with hundreds of additional integrations across EDR, identity, cloud and OT.[9][10]

Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Guardsix says the access control model it built first for healthcare applies to any regulated environment where access has to be visible, explainable and defensible.[12]

Guardsix describes two audiences. For critical national infrastructure operators, Guardsix says it helps them. Guardsix points to hospitals, energy grids, water management and transportation as systems whose failure harms communities. Guardsix says it prices by the number of nodes, devices or entities in an environment.[13]

Guardsix was formerly Logpoint, which officially announced its transformation into Guardsix on March 12, 2026. Guardsix traces its history to a company founded in Denmark as a cybersecurity consulting business. Swedish investment firm Summa Equity acquired a majority stake in Logpoint, and Guardsix names Summa as its majority investor. Logpoint acquired the Danish cybersecurity company Muninn, specialised in AI-driven NDR. Logpoint also acquired the Israeli company SecBI, specialising in SOAR, XDR and automated threat detection. Mikkel Drucker joined Logpoint as CEO. Guardsix A/S carries the company reg. no. 26 30 19 39, and Guardsix says it is EU-HQ and EU-governed.[1][2][5][10][11][12]

Guardsix on the record

Sources

Guardsix full record

  1. [1]Command centreGuardsix · guardsix.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]34576478235293 Logpoint is now guardsixGuardsix · servicedesk.guardsix.com · published March 12, 2026 · Tier A
  3. [3]Summa equity invests in logpoint to create european cybersecurity powerhouseSumma Equity · summaequity.com · published March 2, 2023 · Tier A
  4. [4]Guardsix | Your closest ally in cyber securityGuardsix · undated page, accessed October 25, 2026 · Tier A
  5. [5]Product UpdatesGuardsix · undated page, accessed October 25, 2026 · Tier A
  6. [6]About guardsix | European Cybersecurity AllyGuardsix · undated page, accessed November 3, 2026 · Tier A
  7. [7]Guardsix SIEM | Built for Lean Security TeamsGuardsix · undated page, accessed November 3, 2026 · Tier A
  8. [8]Guardsix for Compliance | NIS2Guardsix · undated page, accessed November 3, 2026 · Tier A
  9. [9]Guardsix NDR | Network Detection & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A
  10. [10]Guardsix SOAR | Security Automation & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A
  11. [11]Guardsix Fleet | Centralised Security OperationsGuardsix · undated page, accessed November 3, 2026 · Tier A
  12. [12]Guardsix Governance | Audit-ready access controlGuardsix · undated page, accessed November 3, 2026 · Tier A
  13. [13]Guardsix Pricing | Predictable Cyber Security Platform CostsGuardsix · undated page, accessed November 3, 2026 · Tier A
  14. [14]Master Terms of Service for SaaS-version of Logpoint SIEMGuardsix · undated page, accessed November 3, 2026 · Tier A

NEOX NETWORKS full record

  1. [1]neoxnetworks.comNEOX NETWORKS · neoxnetworks.com · undated page, accessed November 8, 2026 · Tier A
  2. [2]Neox stamus partnership clearndrNEOX NETWORKS · neoxnetworks.com · published May 5, 2025 · Tier A
  3. [3]New PacketOwl 100Gbps Security Appliance - NEOX NETWORKSNEOX NETWORKS · published May 6, 2025 · Tier A
  4. [4]NEOX NETWORKS and APEIRO NETWORKS Partnerto Offer Next-Generation Network Visibility Solutions - NEOX NETWORKSNEOX NETWORKS · published April 15, 2024 · Tier A
  5. [5]Unified Network Visibility For IT & OT | NEOX NetworksNEOX NETWORKS · undated page, accessed November 10, 2026 · Tier A
  6. [6]About Us - NEOX NETWORKSNEOX NETWORKS · undated page, accessed November 10, 2026 · Tier A
  7. [7]Network TAPs – a Cost-Effective Solution to Bring Transparency and More Security to the Network Infrastructure - NEOX NETWORKSNEOX NETWORKS · undated page, accessed November 10, 2026 · Tier A
  8. [8]PacketOwl - Suricata IDS Security Monitoring - NEOX NETWORKSNEOX NETWORKS · undated page, accessed November 10, 2026 · Tier A
  9. [9]The Revolutionary Solution for Secure Data Transmission in Critical Infrastructures at it-sa 2024 - NEOX NETWORKSNEOX NETWORKS · published October 10, 2024 · Tier A
  10. [10]Global GTM Reach Through Channel and Solution Partnerships - NEOX NETWORKSNEOX NETWORKS · published September 4, 2025 · Tier A
  11. [11]Financial Services - NEOX NETWORKSNEOX NETWORKS · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.