Managed
Cybersecurity
Services
The Guardian Zone Defense™ Framework and representative pricing - for organizations building or rebuilding their security foundation.
security zones
monitoring
guarantee
The Challenge
Cybersecurity budgets don't fail because organizations are careless. They fail because strategy is the part that always gets pushed to later. Money gets spent on tools, subscriptions, and one-off fixes with nothing tying them together. Guardian Zone Defense™ is that map - five integrated stages that cover the full lifecycle of a threat, from preparation through recovery, so you know exactly what you have, what you need, and what you can defer.
Most security gaps trace back to one of two places. See if either sounds familiar.
No Formal Security Strategy
Companies that have grown without dedicated security leadership accumulate risk through ad-hoc tool purchases, inconsistent policies, and reactive firefighting. Attackers specifically target these environments because defenses are predictable and gaps are exploitable.
Single-Vendor Dependency
Consolidating with one vendor seems simpler - until that vendor suffers a breach, outage, or zero-day vulnerability. Your entire security stack is compromised simultaneously, with zero fallback protection. No vendor excels at everything. When they fail, you have no coverage at all.
That figure doesn't include reputational damage, lost customers, or regulatory penalties - all of which compound for months after the incident itself.
A methodology, not just a menu.
Most cybersecurity frameworks tell you what to buy. Guardian's Zone Defense™ is a methodology that shows you your security posture across five stages of a threat's lifecycle - so you can see where you're covered, where you're exposed, and where your next dollar should go.
All services are fully managed by Guardian's team of certified security professionals, providing enterprise-grade protection without the burden of building and maintaining an in-house security operations team.
Guardian Zone Defense™
Five integrated security zones plus specialized Post-Breach Cleanup services. Click any zone to explore the services within it.
you stand.
A comprehensive and objective risk and security assessment of business practices that overlays compliance needs, assigning a risk score and a remediation plan. "Always On" in your portal.
Guardian Lumen
Security & compliance posture as-a-service
+
Continuous visibility into your security and compliance posture - with someone to actually do it for you. Enables gap analysis, satisfies regulators and auditors, supports cyber insurance qualification, and in some jurisdictions helps achieve Safe Harbor status to protect from punitive lawsuits. It's hard but necessary - and Guardian handles it.
Guardian Aware
Security awareness training & phishing simulation
+
Over 90% of successful cyberattacks begin with human error - typically a clicked phishing link or compromised credential. Your employees are either your greatest vulnerability or your first line of defense. Guardian Aware trains them to be human firewalls.
Guardian Cloak
Risk / incident response planning & documentation
+
When a breach occurs, every minute of confusion costs money and reputation. Organizations without documented response plans take 50% longer to contain incidents. Cloak ensures your team knows exactly what to do before crisis strikes - and supports Safe Harbor, compliance, and cyber insurance.
coming first.
We look at more than just your perimeter. Guardian views the infrastructure from the bad actor's point of view - attack surface, dark web, and beyond.
Guardian Glass
External Attack Surface Monitoring, Dark Web & Always-On Vulnerability Assessment
+
Five proactive technologies at once. Attackers scan for vulnerabilities constantly - your systems are being probed right now. Glass combines external attack surface visibility, dark web credential monitoring, and continuous vulnerability assessment to find weaknesses before criminals do.
Guardian Probe
Autonomous Penetration Testing - Always Available
+
Annual pen tests provide a snapshot, but attackers don't wait for your next scheduled test. Probe runs continuous autonomous penetration testing, finding exploitable vulnerabilities in real-time so you can remediate before attackers strike.
Heal.
Repeat.
Best-of-breed defense across all network access points - endpoints to data center to edge - with auto-remediation via AI-powered playbooks. Choose a complete platform or build around what you have.
PrismX™
Unified XDR + SIEM + SOAR with 24/7 SOC & automated response
+
A single integrated platform eliminates the gaps between point solutions where attackers hide. PrismX™ provides complete visibility and coordinated response across your entire environment - no integration headaches, no blind spots. Think traditional MDR, but with 24×7 internal and external vulnerability assessments to verify it's doing its job.
Guardian Visus
Enhanced Monitoring Solutions
+
You cannot secure what you cannot see. Visus answers the foundational question: what is actually in your environment (including the cloud), what is it doing, and how is it performing?
Guardian Shield
Extended Detection & Response (XDR)
+
Attackers don't respect boundaries - they move laterally across endpoints, networks, and cloud systems. XDR correlates data across your entire environment, catching complex attacks that point solutions viewing only one layer would miss.
Guardian Pass
Identity & Access Management (IAM)
+
Stolen credentials are the #1 attack vector. Without proper identity controls, a single compromised password gives attackers the keys to your kingdom. Pass ensures only the right people access the right resources at the right time.
Guardian Paratus
Proactive threat containment & automated protection
+
Prevention is always cheaper than remediation. Paratus deploys automated protection policies that block threats before they execute - stopping ransomware, lateral movement, and data exfiltration at machine speed before human analysts even see the alert.
Guardian Vigil
24/7 Security Operations Center (SOC) Monitoring
+
Cyberattacks don't wait for business hours - most ransomware deploys at 2 AM on weekends. Vigil is SOC-as-a-service for organizations that have endpoint and/or SIEM in place and need expert human eyes watching around the clock. Without 24/7 coverage, alerts go unnoticed and attackers have hours to operate undetected.
business.
Not just data.
Our 3-2-2-1-0 approach and continuity solutions don't just restore files - they restore operations. Immutable copies. Air gaps. No ransom required.
Guardian Resurgent
Enterprise backup - O365, AWS, Azure, GCP coverage
+
Ransomware attackers know organizations without reliable backups will pay. Cloud providers offer limited data retention - if an attacker deletes your O365 data, Microsoft won't save you. Resurgent ensures you can recover without paying ransom.
Guardian Nimbus
Object storage, BUaaS & archive solutions
+
Sophisticated attackers now target backups first, encrypting or deleting them before launching ransomware. Immutable, air-gapped backups cannot be altered or destroyed - guaranteeing you always have a clean recovery point, no matter what.
happens -
we're ready.
Hypervigilant incident response and recovery from a cyber incident while limiting damage and reducing recovery time and costs. The clock is ticking - don't wait until you need this to find out who you'd call.
Guardian Phoenix
Incident response, remediation, digital forensics & litigation support
+
When a breach occurs, the clock is ticking - regulatory notification deadlines, evidence preservation, business continuity. Organizations without an IR retainer wait days for help while paying premium emergency rates. Phoenix ensures experts are on-call and ready the moment you need them.
Within each zone, Guardian selects and integrates the strongest available solutions - not the "good enough" option from a single vendor's portfolio. Your endpoint protection, SIEM, backup, and identity solutions each come from vendors who specialize in that domain, all unified under Guardian's management layer through Guardian AttackSOC™ - a single pane of glass, staffed 24/7/365.
How does your investment compare?
Select your industry and company size to see how the Guardian Foundation Package compares to the IBM-published average breach cost for organizations like yours.
For general business organizations of your size, IBM reports the average breach costs $3.9M - roughly 5.1× the cost of three full years of Guardian coverage.
Where does your defense actually stand?
Six questions. Two minutes. A clear picture of your security gaps - and which Guardian zones matter most for your organization right now.
Your answers are not stored or shared. This tool is for your own clarity - and to help us have a better first conversation with you.
Reactive - significant gaps in key zones
Based on your responses, Guardian can build a remediation roadmap starting with your highest-priority gaps. No obligation - just a clear picture of where you stand.
Representative Pricing
All services are fully managed by Guardian AttackSOC™. Pricing reflects a 36-month preferred term sized for 100 users / 250 external assets / 350 internal assets. Click any zone to explore services and pricing. Quarterly true-ups apply.
Prepare
Prepare
| Service / Solution | Monthly | One-Time Setup |
|---|---|---|
| Guardian Lumen - Security & Compliance Posture Service Foundation | $1,500 | $1,500 |
| Guardian Aware - Security Awareness Training & Phishing Simulation 100 users Foundation | $500 | $500 |
| Guardian Cloak - Risk Assessment, Documentation & IR Plan Development | $600 | $600 |
Predict
Predict
| Service / Solution | Monthly | One-Time Setup |
|---|---|---|
| Guardian Glass - External Attack Surface, Dark Web Monitoring & Always-On Vulnerability Assessment 250 external / 350 internal assets Foundation | $2,500 | $2,500 |
| Guardian Probe - Autonomous Penetration Testing Always Available | $3,500 | $3,500 |
Protect / Detect
Protect / Detect
| Service / Solution | Monthly | One-Time Setup |
|---|---|---|
| Option A - PrismX™ Full Solution | ||
| PrismX™ - Unified XDR + SIEM + SOAR + EDR + 24/7 SOC 350 assets Foundation | $10,500 Foundation: $12,500 | $10,500 |
| PrismX™ - Identity & Access Management Add-On 100 users Foundation | $900 Foundation: $1,200 | $900 |
| PrismX™ - Custom Playbook Development | - | $1,500/ea |
| Option B - À La Carte Services | ||
| Guardian Visus - Enhanced Monitoring 350 endpoints | $2,000 | $2,000 |
| Guardian Shield - XDR Platform 350 assets | $3,500 | $3,500 |
| Guardian Pass - Identity & Access Management 100 users | $800 | $800 |
| Guardian Pass - Multi-Factor Authentication 100 users | $600 | $600 |
| Guardian Paratus - Automated Protection Policies 350 OS devices | $2,100 | $2,100 |
| Guardian Vigil - 24/7 SOC Monitoring Bring your own endpoint | $5,500 | $5,500 |
| SIEM Integration & Log Management Bring your own SIEM | $2,800 | $2,800 |
Recover
Recover
| Service / Solution | Monthly | One-Time Setup |
|---|---|---|
| Guardian Resurgent - O365 Backup 100 users Foundation | $500 | $500 |
| Guardian Resurgent - AWS/Azure/GCP Backup up to 5TB | $750 | $750 |
| Guardian Nimbus - Object Storage 5TB included | $400 | $400 |
| Guardian Nimbus - Immutable Backup Archive 5TB | $600 | $600 |
| Guardian Nimbus - Air-Gapped Recovery Solution | $2,500 | $2,500 |
Post-Breach
Post-Breach Cleanup
| Service / Solution | Fee | Type |
|---|---|---|
| Guardian Phoenix - Incident Response Retainer 40 hrs/yr Foundation | $1,000/mo Foundation: $2,000/mo | Retainer |
| Guardian Phoenix - Emergency Response Non-retainer | $450/hr | On-demand |
| Guardian Phoenix - Digital Forensics | From $15,000 | Project |
| Guardian Phoenix - Remediation Support | From $10,000 | Project |
| Guardian Phoenix - Litigation Support | $350/hr | As needed |
Governance Layer
Spanning All Zones
| Service / Solution | Monthly | One-Time Setup |
|---|---|---|
| Virtual CISO (vCISO) Services 20 hrs/mo | $6,000 | $6,000 |
| Compliance Management SOC2, HIPAA, PCI-DSS, etc. | $3,500 | $3,500 |
| IT / Cyber / Privacy / Risk Assessments | - | $8,500 |
| Table-Top Exercises Included in service | - | $4,500/ea |
| Included Service | Zone | Monthly |
|---|---|---|
| Guardian Lumen - Security & Compliance Posture Dashboard | Prepare | $1,500 |
| Guardian Aware - Training & Phishing 100 users | Prepare | $500 |
| Guardian Glass - Attack Surface, Dark Web & Vuln Assessment | Predict | $2,500 |
| PrismX™ - Full XDR + SIEM + SOAR + EDR + 24/7 SOC | Protect | $12,500 |
| PrismX™ - Identity & Access Management Add-On | Protect | $1,200 |
| Guardian Resurgent - O365 Backup 100 users | Recover | $500 |
| Guardian Phoenix - IR Retainer 40 hrs/yr | PBC | $2,000 |
Starting point &
terms of engagement.
Foundation Security Package
For organizations with no existing cybersecurity strategy or those consolidating from a single-vendor approach. Essential coverage across all five zones, sized for your environment - all managed through Guardian AttackSOC™.
Terms & Conditions
You now know where the gaps are.
Let's talk about what to do next.
Guardian doesn't sell packages. We build strategies around your environment - what you have, what you need, and what makes sense for your business right now.