Periscope Shield · WatchGuard Gold Partner · SOC 2 Type II

Attackers don't hack in. They log in.

Secure remote access, endpoint protection and network security on one zero-trust architecture, watched 24/7 by one partner. Retire the VPN. Keep your firewall. For companies of 5 to 1,000 people.

  • WatchGuard Gold Partner
  • SOC 2 Type II
  • Switching included
  • Silicon Valley · Mumbai
AAA
SE Labs rating for WatchGuard Endpoint Security, the highest the test gives
SE Labs Endpoint Protection, Q4 2025
1 day
to a written price for your seats, from the calculator or your forwarded renewal quote
one business day
2 wks
of overlap with your current product while we switch you, included
no downtime, no gap
48 h
to results from the free check of the cloud and AI apps connected to your Microsoft 365 or Google Workspace
read-only, 30 days
What we solve

Eight problems. How Shield addresses each.

Most breaches start with a login, not a hack. Shield closes the eight gaps attackers use, on one zero-trust architecture managed by one partner.

01

A VPN that opens the whole network

Zero-trust access to one app at a time.

FireCloud ZTNA
02

Remote staff browsing unprotected

Web and firewall protection wherever they work.

FireCloud SWG + FWaaS
03

Stolen passwords and email fraud

MFA and single sign-on on every login.

AuthPoint
04

Ransomware on laptops and servers

Unknown software blocked by default, EDR on every device.

Endpoint Security
05

Offices and branches exposed

A next-generation firewall at every site.

Firebox
06

Attackers already inside the network

AI-driven detection of what slips past the perimeter.

ThreatSync+ NDR
07

Alerts nobody watches at 3 a.m.

Analysts who watch, hunt and contain, around the clock.

24/7 MDR
08

Too many tools, consoles and bills

One cloud console, one partner, one bill.

Periscope Console
Zero-trust architecture

Periscope Shield. Five layers, one price per person.

Nothing is trusted by default: not the user, the device or the network. Every layer is managed by Periscope in one cloud console, correlating firewall, endpoint and network alerts into one incident. Start with one layer, add the rest when ready.

1 · Identity

MFA and single sign-on on every login

Every login verified, with push, passkeys or tokens.

AuthPoint
2 · Access

ZTNA in place of the VPN

Identity- and device-aware access to private apps, with web protection everywhere.

FireCloud
3 · Device

EDR and deny-by-default on every device

Unknown software blocked until verified; a compromised machine isolated so ransomware stays on one device.

Endpoint Security
4 · Network

Firewalls, AI discovery and NDR

Next-gen firewalls at every site, AI-tool discovery across your organisation, and NDR to detect threats already inside.

Firebox · ThreatSync+ NDR
5 · Managed 24/7

Analysts watching, day and night

24/7 monitoring, hunting and containment, with a weekly and monthly readout.

24/7 MDR
Main offer · 30-day pilot

Retire the VPN. Keep the firewall.

Each person reaches the apps they need and nothing else, from anywhere, after proving who they are and that their device is healthy. Set up by us in a week, alongside your current firewall, and kept after the pilot at one per-person price.

 Old VPNPeriscope Shield
ReachWhole networkOne app at a time
ExposureAn open port to findNo inbound port
UpkeepAn appliance to patchCloud-delivered

What you get

  • FireCloud ZTNA. Identity- and device-aware access to private apps, in place of the VPN.
  • FireCloud SWG and FWaaS. Web filtering, app control and firewall protection that travel with the user.
  • AuthPoint MFA and SSO. Every login verified, with push, passkeys or tokens.
  • One agent, one console. Policies set once in Periscope Console.

30-day pilot on us; keep it afterwards at one per-person price, quoted for your organisation.

Endpoint offer · Priced to switch

Full EDR at antivirus prices.

Periscope ties the layers together, correlating firewall, endpoint and network alerts into one incident. Tell us what you pay per device; we match or beat it and handle the switch: new agent on, old agent off, no gap in cover. If what you run today works and is fairly priced, we will tell you to keep it.

01 · Prevent

Next-generation antivirus and exploit protection

On laptops, servers and virtual machines.

02 · Deny by default

Unknown software blocked until verified

Every application is classified before it runs.

03 · Detect and respond

Isolate the machine automatically

EDR spots suspicious behaviour and isolates the device, so ransomware stays on one machine.

04 · Watched 24/7

Analysts investigate and contain

Our MDR team investigates every alert and contains threats, day and night.

Who we replace

What you pay today, next to what you would pay with us.

List prices for the common products, for the number of people in the calculator (50). Your real price is on your renewal quote; forward it and we will put our number next to it.

Today's productTypical list, per person / monthPer yearPeriscope, per yearDifference, per year

Typical list prices as published by the vendors or price-tracking sites in Sept–Oct 2026, annual billing; street prices through resellers vary and the defaults are editable in the calculator. Premium managed bundles are compared against Endpoint plus our 24/7 detection and response add-on. Kaspersky cannot be sold or updated in the United States since 2024, so that switch is about compliance, not price.

What's included

One price for the endpoint. Add the rest only when it earns its place.

Periscope Shield Endpoint

Per person, per month, billed annually. Each person includes up to two computers.

  • WatchGuard endpoint protection, detection and response on Windows, Mac and Linux SE Labs AAA, Q4 2025
  • One central console, run by Periscope you can have read access, or never log in
  • The switch, done for you agent pushed by policy, old product removed, two weeks of overlap
  • People watching during US business hours, with a 24/7 option support by email and phone in your time zone
  • A plain-English monthly report what was blocked, what needs a decision, what to tell your insurer
  • Free 30-day cloud and AI exposure check read-only; results within 48 hours

Above the online limit we quote in writing within one business day; volume pricing applies.

When the savings land, add one of these

Each is one line on the same invoice and runs in the same console. Prices per person, per month.

Offices without an IT person usually want all of it done for them; that is the Shield packages page.

Get it in writing

Send the numbers. We send the price.

Your seat count and what you pay now is enough. If you have a renewal quote, forward it to and we will put our number next to each line.

We reply within one business day. No sequence, no follow-up calls unless you ask for one.

Free · 30 days · read-only

Which AI tools already have your company data?

Most companies have a policy that says company data stays out of public AI. Almost none can show it. One paste, one upload, and a client list is in a chatbot. The check lists what is actually connected to your Microsoft 365 or Google Workspace, with no agents to install.

  • Every cloud and AI app connected to your tenant, and who connected it
  • The permissions each one holds: read mail, read files, act as the user
  • Sign-in settings and mailbox rules an attacker would use
  • A one-page report in 48 hours, and a 30-minute call if you want one
AI tools your team uses today

Read-only access that you approve and can revoke at any time. We never see message contents.

Questions

What IT managers ask before they switch

We just renewed. Is there any point?
Yes. Tell us when the term ends and we will quote 90 days before renewal, in writing. In the meantime the free 30-day exposure check costs nothing and shows what your cloud and AI apps are sharing.
Is switching a project for my team?
No. We push the new agent by policy, the installer removes the old product, two weeks of overlap are included and there is no downtime. Five hundred computers is typically a one-week job. You approve the schedule; we do the rest.
Is WatchGuard as good as CrowdStrike or SentinelOne?
WatchGuard Endpoint Security earned the AAA rating in SE Labs' Q4 2025 Endpoint Protection evaluation, the highest score in that test. Every serious product stops the overwhelming majority of known threats; what differs is the bill, the console and who is watching. Ask us for the report.
Microsoft Defender is included in our Microsoft 365 plan. Why pay anything?
For an all-Windows company with someone watching the console every day, Defender for Business is a fine choice. Most teams we meet have Macs, contractors and nobody watching. For about the same money you get one console across Windows, Mac and Linux and people on the other end.
Our IT provider manages our antivirus today.
Good. We work with them or through them, and many of our customers arrive that way. Tell us who to copy on the quote.
What about the firewall and the VPN we already have?
Keep them. The endpoint switch does not touch your network. If you later want remote access without a VPN, that is an add-on you can turn on in the same console.
What happens if we cancel?
Annual plans run for the year. We hand back your console export and help you move to whatever comes next; we would rather you leave cleanly than stay unhappy.
Who is Periscope?
A WatchGuard Gold Partner based in San Ramon, California, with a delivery team in Mumbai working US hours. We have run security operations for banks, hospitals and manufacturers; references on request.

No IT person in the building?

Offices of 5 to 50 people usually want all of it done for them: endpoint, sign-in protection, cloud security, 24/7 response and the insurance paperwork, as one package. That is Periscope Shield.

Get your Shield price