Guardsix (formerly LogPoint)

Guardsix (formerly Logpoint) is a security operations platform for collecting log data, detecting threats, and responding to incidents. The vendor sells it as Guardsix Command Centre, which has five modules: Guardsix SIEM (security information and event management), Guardsix NDR (network detection and response), Guardsix SOAR (security orchestration, automation, and response), Guardsix Fleet, and Guardsix Governance. The vendor positions it as a sovereign European platform that customers can run themselves, including in air-gapped environments.

Audience

Security operations teams at regulated organizations in Europe, and managed security service providers (MSSPs) that run security monitoring for multiple customers. The vendor targets lean teams and healthcare organizations.

Name Change Notice

Guardsix was sold as Logpoint until March 2026, when the vendor announced the rebrand on March 12. The vendor's press release states that the existing platform, service levels, and partnerships continue unchanged. The vendor's documentation lists the renamed products, which include Logpoint SIEM to Guardsix SIEM, Logpoint SOAR to Guardsix SOAR, and Logpoint Director to Guardsix Fleet. Documentation, release notes, and reviews under the Logpoint name describe earlier versions of these products.

Key Capabilities

• Guardsix SIEM: Centralizes log ingestion, search, correlation, and alerting. The vendor lists search and search templates, content packs aligned with NIS2, DORA, and GDPR requirements, and compliance dashboards. The vendor states that ingestion carries no volume penalty.
• Guardsix NDR: Network-based threat detection that the vendor describes as AI-driven. The vendor says it came from the 2024 acquisition of Muninn. I found no technical description of the detection methods.
• Guardsix SOAR: Automated incident response, with more than 80 ready-made playbooks stated by the vendor.
• Guardsix Fleet: Multi-customer and multi-environment visibility and control across cloud, hybrid, and on-premises deployments. The vendor sells this for MSSPs.
• Guardsix Governance: The vendor describes it as oversight for healthcare data. I found no detail beyond the tagline.
• Behavior analytics: The pricing page lists "advanced detection engines (e.g. anomalies/UEBA)" in a higher tier. User and entity behavior analytics is not otherwise described.
• Integrations: The vendor states that it integrates with hundreds of third-party security and operations products and gives no count. Support tiers are Premium (SLA-backed), Standard (best-effort), and Archived (kept for at least 12 months). The vendor states that there is no extra cost between tiers.

Technical Specifications

• Deployment: The vendor states on-premises, hybrid, public cloud, or sovereign EU cloud deployment. The SIEM page states "self-hosted, air-gappable." The vendor also offers SaaS, with pricing tailored to the environment.
• Compliance content: The vendor's NIS2 page maps the platform to Articles 20, 21, and 23, including the 24-hour early warning and 72-hour incident notification, and states that the platform provides an audit-ready evidence trail. A CADA (Cloud and AI Development Act) compliance page exists, and I did not read it.
• Sovereignty claims: The vendor states that it is EU-governed, with no exposure to the CLOUD Act or FISA Section 702.

Pricing and Licensing

The vendor states that pricing is based on the number of nodes, devices, or entities and not on data ingested. It offers four tiers: Govern (SIEM), Detect (SIEM), Defend (SIEM and NDR), and Respond (SIEM, NDR, and SOAR). Each tier includes annual "audit day" and "incident readiness day" credits, which the page does not define. A sizing calculator estimates daily ingested data. No prices are listed.

Logpoint was founded in Denmark in 2003, and the vendor is headquartered in Copenhagen. The vendor's company history page still contains placeholder text for several years, so I did not use it for dates. Search results report that Guardsix acquired LogManager, a log management company in Central and Eastern Europe, after the rebrand.