Platform · Deployment
On your premises by default. Everywhere else by choice.
GuardStance was built on-premises first, because the organizations that need DLP most often cannot send their data to someone else’s cloud. The managed editions run the same code.
Book a demo your network
- Endpoint agents
- Policy server and console
- Evidence store
your network
- Endpoint agents
hosted region
- Policy server and console
- Evidence store
Four editions, one license
| Edition | On-premises | Private cloud | Managed service | MSSP edition |
|---|---|---|---|---|
| Policy server and console | Your data center, appliance ISO or OVA | Your AWS, Azure or Google tenancy | Hosted by GuardStance, single-tenant per customer | Hosted by GuardStance or the MSSP, multi-tenant |
| Endpoint agents | Yours | Yours | Yours | Each client’s |
| Where content and evidence live | Inside your network | Inside your tenancy | In the hosted store, region of your choice | Per tenant, region of your choice |
| Time to first policy | Days | Days | Same day | Same day per client |
| Typical buyer | Banks, public sector, regulated industries | Cloud-first enterprises | Mid-market without a platform team | Service providers |
On-premises, in detail
-
Hardened appliance
Full-disk encryption, delivered as ISO or OVA.
-
Your hypervisor
The management appliance runs on VMware, Hyper-V or KVM.
-
High availability
For the policy server.
-
Directory integration
Active Directory or LDAP for users and groups.
-
Air-gapped operation
Updates arrive as signed offline packages.
-
No telemetry by default
Nothing leaves your network unless you turn it on.
Integrations
SIEM over syslog (CEF or RFC 5424), a JSON REST API and CSV or JSON export.
Not sure which edition fits?
Most customers start with the managed service to prove the policies, then decide.