CISO Tribune

Vendor comparison · 2 companies

Guardsix vs Sumo Logic

Guardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance. Sumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents. CISO Tribune files both under SIEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Guardsix
  • Sumo Logic
Guardsix vs Sumo Logic: Products, Customers and Funding Compared
GuardsixGuardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.guardsix.comSumo LogicSumo Logic sells a platform that combines telemetry pipeline control, log analytics, SIEM and DojoAI agents.sumologic.com
What it sells
  • Guardsix SIEM[4][7][8][9][10]A SIEM for lean teams defending Europe, with sovereign log management and audit-ready evidence.
  • Guardsix NDR[4][9]Network detection that pairs with Guardsix SIEM across IT and OT.
  • Guardsix SOAR[4][10]The automation and response layer of Guardsix SIEM.
  • Guardsix Governance[4][12]Audit-ready access control, built first for healthcare.
  • Sumo Logic SIEM[8][14]Sumo Logic SIEM gives security analysts and SOC managers visibility across the enterprise.
  • Cloud SOAR[4][9]Cloud SOAR delivers SOAR functionality in private cloud, single cloud, multi-cloud or hybrid cloud environments.
  • Sumo Logic DojoAI[10]Sumo Logic DojoAI puts agentic AI to work across security and cloud operations.
  • Logs for Security[2][4][11]Logs for Security collects and analyzes cloud-specific logs.
Categories
Headquarters
Copenhagen, Denmark[3][8]Redwood City, United States[3]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Owned by Summa Equity since 2023[3][4][6]Owned by Francisco Partners since 2023[1][4][5][9][13][19]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • September 21, 2026Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management so customers can control the cost and value of their telemetry.[17]
  • May 21, 2026Sumo Logic announced an integration with the Claude Compliance API that gives security and compliance teams visibility into Claude usage within the platform.[16]
  • May 6, 2026Sumo Logic hired Jeremy Powell as its CISO and Ben Cody as Senior Vice President of Product Management.[18]
  • December 1, 2025Sumo Logic announced new DojoAI agents, including a SOC Analyst Agent, a Knowledge Agent and a Model Context Protocol server.[15]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. It also addresses MSSPs and security service providers that run many customer environments. It names critical national infrastructure operators as a focus, and it describes its NDR for complex, regulated environments with IT/OT infrastructure. Guardsix Governance is aimed first at hospital IT and compliance teams. Guardsix frames its offer around organisations accountable to NIS2, DORA and GDPR, and says it is on-prem by default.From its own pages, Sumo Logic sells to security analysts and SOC managers through its SIEM. Sumo Logic positions one package for small-to-medium-sized DevOps and SecOps teams requiring ad-hoc investigation and troubleshooting. Sumo Logic positions a different package for maturing security teams looking for real-time threat detection, investigation and response. Sumo Logic describes parent org controls for MSSP and other parent org admins managing child orgs. Sumo Logic says its Kubernetes solution works for any setup on premise, AWS, Azure and GCP.
Last verified
September 27, 2026November 2, 2026

Where they overlap

  • SIEM is the primary category of both Guardsix and Sumo Logic.

Where they differ, field by field

  • Guardsix is also filed under SOAR and security automation and Network detection and response. Sumo Logic is also filed under Security data lakes and pipelines.
  • Guardsix lists Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. Sumo Logic lists Sumo Logic SIEM, Cloud SOAR, Sumo Logic DojoAI and Logs for Security.
  • Guardsix is headquartered in Copenhagen, Denmark. Sumo Logic is headquartered in Redwood City, United States.
  • Guardsix is owned by Summa Equity, since 2023. Sumo Logic is owned by Francisco Partners, since 2023.

How they differ

CISO Tribune files Guardsix under SIEM, SOAR and security automation, and Network detection and response, with SIEM as its primary category. CISO Tribune files Sumo Logic under SIEM and Security data lakes and pipelines, also with SIEM as its primary category. Both sell a SIEM and a SOAR product: Guardsix offers Guardsix SIEM and Guardsix SOAR, while Sumo Logic offers Sumo Logic SIEM and Cloud SOAR. Guardsix also sells Guardsix NDR, which pairs with its SIEM across IT and OT, and Guardsix Governance, built first for healthcare. Sumo Logic instead sells Sumo Logic DojoAI, which applies agentic AI to security and cloud operations, and Logs for Security, which collects cloud-specific logs. On deployment, Guardsix SIEM is self-hosted and air-gappable with node-based pricing, and Guardsix SOAR playbooks execute locally. Sumo Logic says customers pay only for the data being used, and its Cloud SOAR runs in private cloud, single cloud, multi-cloud or hybrid cloud environments.

Guardsix is headquartered in Copenhagen, Denmark, and has been owned by Summa Equity since 2023. Sumo Logic is headquartered in Redwood City, United States, and has been owned by Francisco Partners since 2023. Guardsix was formerly Logpoint and announced its transformation into Guardsix on March 12, 2026.

Guardsix says it sells mainly to lean security teams at European organisations in energy, healthcare, government and public services, as well as MSSPs. Sumo Logic sells to security analysts and SOC managers through its SIEM, and describes parent org controls for MSSP admins managing child orgs. On September 21, 2026, Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management. On May 21, 2026, Sumo Logic announced an integration with the Claude Compliance API.

What it sells: Guardsix

What Guardsix SIEM does[4][7][8][9][10]
Guardsix SIEM delivers sovereign log management across hybrid, on-prem, OT and cloud. It is self-hosted and air-gappable, with node-based pricing. Ready-to-use content packs are aligned with NIS2, DORA and GDPR requirements.
What Guardsix NDR does[4][9]
Guardsix NDR pairs with Guardsix SIEM as one platform. It uses machine-learning analytics and stitches related signals into a single timeline across the seven phases of an attack. Guardsix says any analyst on a lean team can use it productively from day one.
What Guardsix SOAR does[4][10]
Guardsix SOAR provides automated investigation and response workflows built into the same platform as Guardsix SIEM. Playbooks execute locally.
What Guardsix Governance does[4][12]
Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Reviewers comment, approve and escalate in-browser, and every action is preserved alongside the evidence.

What it sells: Sumo Logic

What Sumo Logic SIEM does[8][14]
Sumo Logic SIEM parses, maps and creates normalized records from structured and unstructured data. Sumo Logic UEBA baselines user and entity behavior. Detection-as-Code support helps security teams version and manage SIEM rules in GitHub.
What Cloud SOAR does[4][9]
In the War Room, security analysts get a complete, chronological and detailed picture of a specific incident process. Sumo Logic offers hundreds of out-of-the-box actions and playbooks.
What Sumo Logic DojoAI does[10]
Mobot lets users talk to their data in plain language. The SOC Analyst Agent automatically analyzes alerts, evaluates related activity and delivers an evidence-backed verdict. Sumo Logic MCP Server connects external AI clients to Log Analytics and SIEM.
What Logs for Security does[2][4][11]
Logs for Security integrates logs from AWS, Google Cloud and Azure. Sumo Logic offers pre-built PCI compliance dashboards.

Questions about Guardsix and Sumo Logic

What do Guardsix and Sumo Logic sell?
Guardsix sells Guardsix SIEM, Guardsix NDR, Guardsix SOAR and Guardsix Governance. Sumo Logic sells Sumo Logic SIEM, Cloud SOAR, Sumo Logic DojoAI and Logs for Security.
Are Guardsix and Sumo Logic in the same category?
Yes. SIEM is the primary category of both on CISO Tribune.
Where are Guardsix and Sumo Logic headquartered?
Guardsix is headquartered in Copenhagen, Denmark. Sumo Logic is headquartered in Redwood City, United States.
Who owns Guardsix and Sumo Logic?
Guardsix is owned by Summa Equity, since 2023. Sumo Logic is owned by Francisco Partners, since 2023.
Who are Guardsix and Sumo Logic sold to?
From its own pages, Guardsix sells mainly to lean security teams at European organisations in energy, healthcare, government and public services. From its own pages, Sumo Logic sells to security analysts and SOC managers through its SIEM.
What have Guardsix and Sumo Logic announced recently?
September 21, 2026: Sumo Logic unveiled enhanced Data Pipelines, extending its platform into data pipeline management so customers can control the cost and value of their telemetry.

About Guardsix

Guardsix is a European security company that sells a sovereign security platform for lean defenders, with products for SIEM, NDR, SOAR, fleet management and access governance.[1][14]

Guardsix says its platform is aimed at European organisations that protect society, such as energy, healthcare and public services, and the partners who serve them. Guardsix says cloud-first security shifts control away from defenders while leaving accountability behind, and says it closes that gap by giving customers control over their data, deployment and operations. Guardsix says it designs for European legal and operational requirements, partners with regional cloud providers, and offers on-prem and sovereign-ready deployments. Guardsix offers on-demand or instructor-led training to help analysts grow from day one.

Guardsix SIEM is for lean teams defending Europe in energy, healthcare and government, and for the MSSPs who serve them. Guardsix says it delivers sovereign log management across hybrid, on-prem, OT and cloud environments, and continuous audit-ready evidence for NIS2, DORA and GDPR Article 32. Guardsix SIEM is self-hosted and air-gappable, and its pricing is node-based, so spend scales with the infrastructure rather than with data volume. Content packs aligned with NIS2, DORA and GDPR requirements are ready to use. Guardsix SIEM brings logs from IT estates, OT environments, identity systems, network devices and applications into a single instance that the customer controls.[7][9][11]

Guardsix NDR pairs with Guardsix SIEM as one platform with a chain of events across IT and OT. Guardsix says it uses machine-learning analytics and stitches related signals into a timeline across the seven phases of an attack. Guardsix says Guardsix NDR is designed so any analyst on a lean team can use it productively from day one. Guardsix SOAR is the automation and response layer of Guardsix SIEM, and its playbooks execute locally. Alerts from Guardsix SIEM and NDR enter SOAR with full context already attached, and Guardsix SOAR can expand with hundreds of additional integrations across EDR, identity, cloud and OT.[9][10]

Guardsix Governance for Healthcare gives hospital IT and compliance teams the visibility, reporting and audit trails that healthcare regulators expect. Guardsix says the access control model it built first for healthcare applies to any regulated environment where access has to be visible, explainable and defensible.[12]

Guardsix describes two audiences. For critical national infrastructure operators, Guardsix says it helps them. Guardsix points to hospitals, energy grids, water management and transportation as systems whose failure harms communities. Guardsix says it prices by the number of nodes, devices or entities in an environment.[13]

Guardsix was formerly Logpoint, which officially announced its transformation into Guardsix on March 12, 2026. Guardsix traces its history to a company founded in Denmark as a cybersecurity consulting business. Swedish investment firm Summa Equity acquired a majority stake in Logpoint, and Guardsix names Summa as its majority investor. Logpoint acquired the Danish cybersecurity company Muninn, specialised in AI-driven NDR. Logpoint also acquired the Israeli company SecBI, specialising in SOAR, XDR and automated threat detection. Mikkel Drucker joined Logpoint as CEO. Guardsix A/S carries the company reg. no. 26 30 19 39, and Guardsix says it is EU-HQ and EU-governed.[1][2][5][10][11][12]

Guardsix on the record

Sources

Guardsix full record

  1. [1]Command centreGuardsix · guardsix.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]34576478235293 Logpoint is now guardsixGuardsix · servicedesk.guardsix.com · published March 12, 2026 · Tier A
  3. [3]Summa equity invests in logpoint to create european cybersecurity powerhouseSumma Equity · summaequity.com · published March 2, 2023 · Tier A
  4. [4]Guardsix | Your closest ally in cyber securityGuardsix · undated page, accessed October 25, 2026 · Tier A
  5. [5]Product UpdatesGuardsix · undated page, accessed October 25, 2026 · Tier A
  6. [6]About guardsix | European Cybersecurity AllyGuardsix · undated page, accessed November 3, 2026 · Tier A
  7. [7]Guardsix SIEM | Built for Lean Security TeamsGuardsix · undated page, accessed November 3, 2026 · Tier A
  8. [8]Guardsix for Compliance | NIS2Guardsix · undated page, accessed November 3, 2026 · Tier A
  9. [9]Guardsix NDR | Network Detection & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A
  10. [10]Guardsix SOAR | Security Automation & ResponseGuardsix · undated page, accessed November 3, 2026 · Tier A
  11. [11]Guardsix Fleet | Centralised Security OperationsGuardsix · undated page, accessed November 3, 2026 · Tier A
  12. [12]Guardsix Governance | Audit-ready access controlGuardsix · undated page, accessed November 3, 2026 · Tier A
  13. [13]Guardsix Pricing | Predictable Cyber Security Platform CostsGuardsix · undated page, accessed November 3, 2026 · Tier A
  14. [14]Master Terms of Service for SaaS-version of Logpoint SIEMGuardsix · undated page, accessed November 3, 2026 · Tier A

Sumo Logic full record

  1. [1]Francisco partners completes acquisition of sumo logicSumo Logic · sumologic.com · published May 12, 2023 · Tier A
  2. [2]sumologic.comSumo Logic · sumologic.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]ContactSumo Logic · sumologic.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Cloud log management, monitoring, SIEM tools Sumo LogicSumo Logic · undated page, accessed October 28, 2026 · Tier A
  5. [5]Sumo Logic Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
  6. [6]PricingSumo Logic · undated page, accessed November 3, 2026 · Tier A
  7. [7]Who we are and what we doSumo Logic · undated page, accessed November 3, 2026 · Tier A
  8. [8]Sumo Logic SIEM | Real-time detection, AI-powered responseSumo Logic · undated page, accessed November 3, 2026 · Tier A
  9. [9]Cloud SOAR (Security Orchestration, Automation, and Response)Sumo Logic · undated page, accessed November 3, 2026 · Tier A
  10. [10]Sumo Logic DojoAI - Meet the AI agents that detect and resolve threats so you can focus on the work that matters most.Sumo Logic · undated page, accessed November 3, 2026 · Tier A
  11. [11]Logs for security - secure, comply, and respond with an integrated cloud security platformSumo Logic · undated page, accessed November 3, 2026 · Tier A
  12. [12]Application reliability solutionSumo Logic · undated page, accessed November 3, 2026 · Tier A
  13. [13]What's newSumo Logic · undated page, accessed November 3, 2026 · Tier A
  14. [14]Professional servicesSumo Logic · undated page, accessed November 3, 2026 · Tier A
  15. [15]Sumo Logic Expands DojoAI to Transform Security Investigations with New Agentic AI CapabilitiesSumo Logic · published December 1, 2025 · Tier A
  16. [16]Sumo Logic Brings Comprehensive Visibility Across Claude Ecosystem via New Integration with the Claude Compliance APISumo Logic · published May 21, 2026 · Tier A
  17. [17]Sumo Logic enhances Data Pipelines, advancing its AI-first platform to lower observability and security TCOSumo Logic · published September 21, 2026 · Tier A
  18. [18]Sumo Logic Expands Leadership Team with New CISO and SVP of Product ManagementSumo Logic · published May 6, 2026 · Tier A
  19. [19]Sumo Logic Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 3, 2026 · Tier C

Spot a factual error? Request a correction.