No one connects to this PC unless it's approved.

Xcelcor Guardian refuses every new remote connection by default. To get in, somebody has to approve it — and by default that somebody is a person you trust, asked by email, on a device the caller has no way to reach. So a caller who has already talked their way onto the phone still doesn't get in.

14 days free · No credit card · Plans from $59.99/year

Windows 10 & 11

Xcelcor Guardian Protected

You're protected

This is the Guardian window when a stranger asks to connect. This page is not scanning your computer.

Signed Windows application · Works alongside your antivirus · Refuses new connections by default

Antivirus asks whether a file is dangerous. Guardian asks whether anyone actually approved this.

Scammers get people to install real remote-support tools. The file isn't malware, so a virus scan stays quiet. The problem is the person on the other end, and whether anybody agreed to let them in.

Traditional protectionGuardian
“Is this file malicious?”“Did anyone approve this connection?”
Malware, ransomware, virusesUnapproved remote access, and what happens after it's approved
Decides on its own, silentlyA named person decides, on purpose
Keep it installedUse alongside Guardian

Who allows a connection

One setting decides who holds the key, and there are only two honest answers: somebody else, or you. The difference is not convenience. It is whether the person approving is the same person the scammer is talking to.

  1. Strongest · Default

    Someone else approves

    A parent, a partner, anyone whose PC you look after.

    • The request goes to a person who is not at that PC and not on that call
    • They approve from their own email, or the dashboard here
    • Allow this one connection, or always allow that address
    • Nothing to install on their phone — it's an email and a web page
    • Nothing the caller says to the person at the keyboard can produce an approval, because that person isn't the one approving

    Survives a live scam call.

  2. Convenience

    You approve, for your own PC

    When there is nobody sensible to nominate. Two ways, and the same limit.

    • By approval link. It opens on a device you enrolled, never on the protected PC — so somebody controlling that PC cannot approve their own connection, even with your mailbox open on it
    • By PIN. Guardian holds the connection 30 seconds, explains what handing over control means, then asks for a PIN set here and never shown in the app
    • The link is the better of the two: it makes you read the address and the tool on a screen the caller has no control over
    • The limit both share: the decision is back with the person on the phone, and a good enough liar can still talk you round

    Stops strangers, automated attempts, and anyone controlling the PC. Not a determined live call.

What it stopsSomeone else approvesYou approve
A stranger connecting while nobody is at the PCStoppedStopped
Repeated automated attempts on the same addressStoppedStopped
Somebody controlling the PC approving their own connectionStoppedStopped
A caller talking the person at the PC into approvingStoppedNot reliably

Whichever you pick, the setting lives on this website, not in the app — so someone who is already controlling the PC cannot switch it off.

“But they'll be on the phone, telling her exactly what to click.”

Yes. That is the whole technique, and it is why asking the victim to make the decision does not work.

So Guardian moves the decision somewhere the caller cannot reach. In the default setting, the person at the keyboard has no approve button at all. The request goes to you, with the address and the time, in an email and a dashboard the caller has no access to.

It is also why approving for yourself is the convenience option rather than the headline. We've closed the part of it that can be closed: an approval link will not open on the machine the connection is destined for, so somebody who already controls that PC cannot wave their own session through, even with your mailbox sitting open on it. What no mechanism closes is you being talked round — because you are the one on the call. A second person cannot be talked into anything, since they are not on it.

See both, with what each one stops

Xcelcor Guardian Refused

A connection was refused

Someone at 102.54.9.17 asked to connect to this computer using AnyDesk at 2:14pm.

Guardian asked Dave. Nobody approved it.

The session was dropped before it started.

View Guardian Story
  1. A remote-support tool requested a connection.
  2. Guardian refused it and held it open for approval.
  3. An approval request went to Dave by email.
  4. No approval arrived.
  5. The session was dropped. Nothing was shared.
Show technical details

Inbound remote-control session from 102.54.9.17 refused at the connection stage. Approval mode: Trusted Guardian. No approval token presented. Failure 2 of 5 for this address.

An address that keeps trying stops getting asked about.

Refusing a connection is not the end of it. Guardian counts the failures per address.

Five failures and it's done

When the same address has been dropped five times, Guardian moves it to Blocked IPs. It stops asking you, and it stops asking your Trusted Guardian. That address simply cannot reach the PC any more.

The support you actually booked still works

Approve a technician once for a single session, or add their address to your whitelist so the next visit goes straight through. Guardian is a door with a lock, not a wall.

Approving a connection isn't a blank cheque.

Once a session is allowed in, Guardian keeps watching it. Approval gets someone through the door. It does not stop Guardian looking at what they do next.

  1. 01 Connection approved
  2. 02 Session running
  3. 03 File transfer
  4. 04 Privilege escalation
  5. 05 Guardian stops it
NormalUnusualSuspiciousDangerous

If an approved session starts transferring installers and reaching for administrator rights, Guardian can end it and tell you why — in the same plain language it uses for a refusal.

You hold the key to a computer you don't sit at.

Name yourself as their Trusted Guardian. Every request to connect to their PC comes to you first.

Mom's PC

Someone is asking to connect. Waiting for approval.

Email · Xcelcor Guardian

Approve a connection to Mom's PC?

102.54.9.17 · AnyDesk · 2:14pm

Allow once · Always allow · Refuse

No screen viewing. No passwords. No personal files. You approve connections, not her life.

$2.13 billion

reported lost to tech/customer-support scams in the U.S. in 2025.

47,794 reported incidents

Source: FBI IC3, 2025 Internet Crime Report. Tech/Customer Support losses were $2,134,675,818.

These scams rely on persuading a person, not on defeating software. That is the moment Guardian takes the decision away from them.

Guardian guards a door. It doesn't live your life for you.

Guardian needsGuardian does not need
Remote connection attempts and their addressesYour personal documents
Whether a connection was approved, and by whomYour photos
Activity inside an approved sessionYour passwords
Installation and security eventsContinuous screen recording
Minimal information required for approval requestsSelling your browsing history
  • Local-first detection
  • Encrypted communication
  • No sale of personal data
  • A clear data retention policy

Exactly what Guardian collects

Xcelcor Guardian Protected
Screen recordingOff
DocumentsNot collected
PhotosNot collected
PasswordsNot collected
StatusProtected

Trust should be earned.

Guardian is new. We won't pretend otherwise. Here's exactly what you can verify today.

Available now

  • Signed Windows application
  • Real company and legal entity
  • Clear privacy policy
  • 30-day money-back guarantee
  • Public changelog
  • Security contact
  • Real support

As Guardian grows

  • Independent testing
  • Verified customer reviews
  • Security-industry certifications
  • Published case studies
  • Protection statistics

Simple pricing

Annual is the default. Monthly stays plainly available.

Personal

One PC

$59.99/year

Equivalent to $5/month

  • Approval required for every new connection
  • Approval by a Trusted Guardian, or by you
  • Whitelist and Blocked IPs
  • Guardian Story
  • 1 PC
  • 14-day free trial
Choose Personal

14-day free trial. No credit card required. Cancel anytime.

30-day money-back guarantee on annual subscriptions.

Guardian for business

Keep the remote support your company runs on, and require approval for every session that isn't on the list.

ConsoleCentral approval

Who may approve, for which machines.

LogEvery request recorded

Address, time, decision, approver.

PolicyWhitelists and Blocked IPs

Your technicians pass. Nobody else does.

From $4/device/month

Explore Guardian Business

Questions people actually ask

A scammer is on the phone with my mother. Can't they just talk her through approving it?

Not in the default setting. She has no approve button — the request goes to you, by email and in your dashboard. The caller has no way to reach either. That is the reason approval sits with a second person rather than with whoever is being talked to.

What if I'm asleep and miss the approval email?

Then nothing connects. Guardian refuses by default, so a missed request is a refused request. The failure costs you a phone call later; the alternative costs a lot more.

Can a scammer turn Guardian off once they're talking to her?

Who may approve a connection is set on this website, behind your account — not in the app on the PC. Someone at the keyboard, or someone controlling it remotely, cannot change that setting.

Does this block my real IT support?

No. Approve their connection once for a single session, or add their address to the whitelist so the next visit goes straight through. Guardian is not a ban on remote support.

What is the 30 seconds for?

In PIN mode, Guardian holds the connection and spends those 30 seconds telling the person exactly what they are about to hand over. If no PIN is entered, or the wrong one is, the session is dropped. It is a deliberate pause in a conversation designed to rush people.

Where does the PIN come from?

You set it in your account on this website. It is never displayed in the Guardian app, so somebody watching or controlling the screen cannot read it, and cannot reset it.

What are Blocked IPs?

When the same address has had a connection dropped five times, Guardian stops asking about it and blocks it outright. You can see and edit that list in your dashboard.

What happens after a connection is approved?

Guardian keeps watching the session. If an approved session starts transferring installers or reaching for administrator rights, Guardian can stop it and explain what happened. Approval gets someone through the door, not a free hand.

Does Guardian replace my antivirus?

No. Guardian is designed to work alongside your existing security software. Antivirus judges files; Guardian judges who is allowed to connect.

Can Guardian see my screen?

No. Guardian does not record your screen. It sees connection attempts, approval decisions, and security-relevant activity inside an approved session.

Can my Trusted Guardian see what I'm doing?

No. They are asked to approve or refuse a connection, and they are told when something serious happened. They don't see your screen, messages, documents, passwords, or banking information.

What happens after my free trial?

The trial lasts 14 days. Because we never took a card, the trial does not turn into a surprise charge. Protection state changes clearly, and you can choose Personal or Family if you want it to continue.

Can I cancel at any time?

Yes. Cancellation is a straight path, not a maze.

Can I protect my parents if they live somewhere else?

Yes. Start Family, send them an installation link, and their PC shows up in your dashboard after they install Guardian. Approval requests for that PC then come to you wherever you are.

Scammers only need to be convincing once.
They still need someone to say yes.

14 days · No credit card · Windows 10 & 11