Xcelcor Guardian

Guardian for MSPs: now taking design partners

Lower the risk of a scam call turning into a remote session on your client's PC.

Xcelcor Guardian for Windows 11 holds new remote connections from AnyDesk, TeamViewer, Quick Assist, ScreenConnect, Remote Desktop and other common tools until someone approves them. Planned wholesale price: $2.25 per device per month.

Become a design partner See how it works

The MSP dashboard described here is in build and not live yet. Design partners get it first.

The attack starts with a phone call

The attack your clients fall for often doesn't start with malware. It starts with a call. Huntress has described cases where a fake tech-support call led the victim to open Quick Assist, and the attacker then installed their own ScreenConnect. (Huntress)

Blocking ScreenConnect by name doesn't work for you, because you use ScreenConnect too. What matters is whose ScreenConnect it is.

How the MSP program is planned to work

  1. Deploy silently. Push the MSI from NinjaOne with your deploy key. Each client is created from the RMM site name. A Datto RMM script is planned next.
  2. Allow your own tools once. Add your own remote-access instance (matched by instance, not by product name). Every client inherits it. (Coming in the MSP build)
  3. Approve the rest from one queue. Any other new connection is held. The approver (you by default, the client, or either) sees the tool, the PC and the client, and decides. If nobody answers before the timeout (10 minutes by default, set per client), it stays blocked.

Planned for the first version

  • One approval queue across all clients.
  • Allow-list for your own tools by instance, inherited by every client. (Coming in the MSP build)
  • Per-client approver and timeout.
  • Silent MSI deploy with a NinjaOne script; Datto next.
  • Client-facing emails with your name and logo (no full white-label in this version).
  • Audit log kept 1 year, exportable as CSV.
  • MFA required for MSP staff.

Planned pricing

$2.25 per active device per month, wholesale. You bill your clients and keep the markup. Billed monthly on devices that checked in during the month. 5-device minimum per MSP account. Your own internal devices are free, up to 10. Month-to-month, no contract. Pricing is planned and may change before launch.

Windows 11 only. Guardian lowers the risk of remote-access scams. It doesn't see screens, files, passwords or banking, and it doesn't replace antivirus or EDR.

Design partners: the first 5 MSPs

We're looking for a few MSPs to shape the dashboard. You get early access, and your feedback decides what ships first.

  • 6 months free on up to 50 devices.
  • Then $1.75 per device per month, locked for 12 months.
  • Month-to-month, no contract.
  • In return: a short email survey every 2 weeks with your feedback. No calls.

Questions

Will it block my own ScreenConnect? In the MSP version you allow your own instance once and every client inherits it. Someone else's ScreenConnect is held. (Coming in the MSP build) Today's Guardian 1.0.x matches ScreenConnect by session only, not by instance.

Who approves, me or my client? You choose per client: you (default), the client, or either. In "either" mode the first answer wins.

What if nobody answers? The connection stays blocked when the timeout ends (default 10 minutes, set per client).

Which RMMs? NinjaOne script first, Datto RMM next. Using something else? Tell us.

Can I white-label it? Not in this version. Client emails show your name and logo.

Mac or Windows 10? Windows 11 only today.

Is it live? Guardian is live for Windows 11. The MSP dashboard is in build, and design partners get it first.