Xcelcor Guardian for Business
Your EDR decides whether a file is safe. Guardian decides whether this session was ever authorised.
Remote support is how a lot of work gets done, which is exactly why an unauthorised session blends in. Guardian refuses every remote connection that is not on your list, and asks a named person before anything else gets in.
$5 per device per month, billed annually. Minimum 5 devices; volume pricing on request.
How it fits
Your support desk keeps working. Nobody else gets in.
Requests go to IT, a manager or a shared queue — not to whoever happens to be at the keyboard. End users shouldn’t approve their own sessions.
Whitelist the addresses and tools your technicians use. Those sessions connect normally; everything else needs a person’s approval first.
Authorisation gets a session through the door. Guardian keeps looking at transfers and privilege escalation inside it, and ends one that turns.
MSI and RMM deployment, and one console for every machine and every approver.
When something happens
If something happens, Guardian can tell you how.
Guardian keeps a security-focused history of remote access and what followed it, so an incident doesn’t have to become a guessing game. The meeting afterwards has an answer in it.
Accounts PC · connection history
| Time | From | Tool | Decision |
|---|---|---|---|
| 09:41 | 102.54.9.17 | AnyDesk | RefusedNo approval given |
| 09:52 | 198.51.100.23 | ScreenConnect | AllowedWhitelisted · your IT desk |
| 10:05 | 203.0.113.44 | TeamViewer | AllowedApproved by S. Patel, IT |
| 10:31 | 102.54.9.17 | AnyDesk | Blocked5th failure · moved to Blocked IPs |
An example of what Guardian records for each attempt.
- A name against every session. Address, tool, time, decision — and who made it.
- Sessions nobody approved never started. So they are not on the list to explain.
- Repeat attempts stop being noise. Five failures and an address moves to Blocked IPs, where it stops generating requests.
Pricing
$5/device/month
Billed annually · 5-device minimum
Volume pricing on request
- Approval routing and a named audit log
- Central whitelist and Blocked IPs
- Approved sessions still watched
- Browser guard and financial protection
- MSI and RMM deployment
Managing clients as an MSP? See partner pricing.
Talk to us about a trial.
Business checkout is a conversation first: device count, how you deploy, which remote tools your support desk already uses, and who should hold approval.