Guardsix (formerly Logpoint)
Guardsix, the March 2026 rebrand of European SIEM/SOAR vendor Logpoint, delivers a 'sovereign' security operations platform for lean teams combining SIEM, network detection and response, SOAR, fleet management, and governance/compliance, aimed at European critical infrastructure operators.
Visit Website ↗ + Add to CompareOverview
Founded in Copenhagen in 2003 as a cybersecurity consulting business before evolving into a dedicated SIEM vendor under the Logpoint name, the company rebranded to Guardsix in March 2026 following continued expansion through acquisitions, with Swedish investment firm Summa Equity as majority shareholder since 2023.
Guardsix’s Command Centre platform integrates SIEM, network detection and response, SOAR, security fleet management, and governance/compliance capabilities, explicitly emphasizing European data sovereignty and regulatory alignment (NIS2, GDPR) for critical infrastructure operators in healthcare, energy, utilities, and municipal government.
Innovation Matrix Assessment
The recent evolution from Logpoint into the consolidated, multi-capability Guardsix Command Centre platform (SIEM, NDR, SOAR, fleet management) indicates active, ongoing platform development.
An integrated SIEM/NDR/SOAR/compliance platform explicitly designed for 'lean teams' targets a genuine operational challenge for under-resourced European critical infrastructure security teams.
501-1,000 employees, Summa Equity's 2023 majority investment, and a coordinated 2026 rebrand indicate a company with real institutional backing and scale, though the rebrand introduces near-term customer-communication risk.
SIEM/SOAR is a well-established category; Guardsix's differentiation is sovereignty and European regulatory alignment rather than a fundamentally new detection or response technology.
Two decades of operating history under the Logpoint brand, serving critical infrastructure customers, is a meaningful real-world track record, though independent, vendor-neutral detection-efficacy benchmarks were not found.
As NIS2 enforcement intensifies across the EU and data sovereignty becomes a procurement requirement for European critical infrastructure, a European-headquartered, sovereignty-focused SIEM/SOAR platform is likely to remain strategically relevant.
Why CISOs Should Care
European CISOs in critical infrastructure sectors who face NIS2 and GDPR obligations and prefer or are required to keep security operations data within European jurisdiction get a SIEM/SOAR platform explicitly built around data sovereignty rather than a US-headquartered alternative.
What Makes It Different
Guardsix's explicit 'European sovereignty' positioning — data residency, jurisdiction, and regulatory alignment as core product features rather than afterthoughts — differentiates it from the primarily US-based SIEM/SOAR incumbents that dominate the category globally.
The Matrix Verdict
52/100 — INCREMENTAL INNOVATOR
A financially backed (Summa Equity), two-decade-old European SIEM/SOAR platform mid-transition through a major rebrand, whose sovereignty-first positioning is a genuine and increasingly relevant differentiator for EU critical infrastructure buyers specifically.
Editorial Note: Claims vs. Verified Findings
Company history, ownership, and the March 2026 rebrand timeline are drawn from Guardsix's own about-us page; independent, vendor-neutral verification of platform capability claims was not obtained.
Sources
Alternatives to Guardsix (formerly Logpoint)
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Torq
AI-native hyperautomation platform positioning itself as an 'agentic SOC,' using a multi-agent system to autonomously execute large volumes…
Lumu Technologies
Network detection and response vendor using Continuous Compromise Assessment to show where compromise has actually happened, integrating with…
Google Security Operations
Google's cloud-scale SIEM/SOAR (formerly Chronicle), unifying a petabyte-scale data lake with Mandiant frontline threat intelligence and Gemini-powered investigation.