Cygnet Shield cyber security package
Safeguard your organisation and data from cyber threats. Professional cyber protection designed for real-world budgets – from £5.99 per user per month (volume and educational discounts available)
Keep devices protected. Block more risky connections. Work more safely wherever your team connects.
Cygnet ShieldCygnet Shield builds on the Nest Protect device baseline by adding DNS-layer protection that can help stop connections to known malicious websites and risky online destinations.
It is designed for smaller organisations that want stronger protection for laptops and desktops without moving straight to a full 24/7 monitoring service.
- Protect devices from malware
- Keep supported software patched
- Watch for ransomware encryption
- Block more known malicious destinations
No pressure and no automatic upsell. We will tell you if Nest Protect would be enough, if Cygnet Shield fits, or if you actually need stronger monitoring.

Protect the device and the connection.
Device protection, automated patching, ransomware encryption protection and DNS-layer web protection in one managed package.
Device security should not stop when somebody leaves the office.
Staff work from home, client sites, hotels, shared workspaces and mobile hotspots.
A protected laptop can still be pointed at a malicious website or fake sign-in page. That is the additional gap Cygnet Shield is designed to reduce.
People work beyond the office firewall
Laptops move between networks, so relying only on protection provided by the office connection leaves a gap.
One convincing link can be enough
Phishing pages and malicious websites rely on people reaching the destination before another control gets a chance to intervene.
Device basics still need managing
Antivirus, patching and ransomware protection still need to be configured, visible and maintained.
Cygnet Shield adds another question before the connection happens: "Is this somewhere the device should be going?"

Glitch & Black Swan explain
A click does not have to become a connection.
"You clicked my link. Why can't I get you to my website?"
Glitch, discovering another check in his way
A convincing link can point to a fake sign-in page, malicious download or another dangerous destination.
Cygnet Shield adds DNS-layer protection to help block connections to domains identified as dangerous, giving the user another layer of protection if they do click.
It also includes the Nest Protect controls: next-generation antivirus, automated patching and ransomware encryption protection.
And it follows the protected device.
The DNS protection is applied to the protected device, so the additional layer can still help when somebody is working away from the office network.
Cygnet Shield adds connection protection, not a 24/7 security team. It cannot block every harmful link and it does not replace advanced email security, MFA, identity protection or backups.
A managed device baseline with an extra layer around where devices connect.
Cygnet Shield is not simply another web-filtering licence. It combines the Nest Protect controls with DNS-layer protection and Black Swan's managed setup and guidance.
Protect the device and its web connections
- Heimdal Next-Generation Antivirus for malware protection.
- Patch & Asset Management for supported operating system and third-party software updates.
- Ransomware Encryption Protection to watch for unauthorised file encryption.
- DNS-layer protection to help block known malicious destinations.
- Windows Firewall configuration support where applicable.
- Central visibility of protected devices and software assets.
Make the protection work around your organisation
- Review your current device and browsing protection.
- Deploy and configure the agreed Heimdal modules.
- Configure security, patching and DNS policies.
- Check enrolled devices are reporting correctly.
- Help investigate legitimate sites that may need reviewing or allowing.
- Explain any important risks outside the Cygnet Shield package.
If your organisation needs alerts investigated by human security specialists around the clock, Swan Guard Pro, Heimdal MXDR or another managed detection service may be more appropriate.
Safer devices, fewer avoidable gaps and another layer between a click and a bad destination.
Safer browsing away from the office
DNS protection stays with the protected device, rather than depending only on the office network or firewall.
More chances to stop a bad click
A malicious destination can be blocked before somebody reaches the fake page or dangerous download.
Device basics stay managed
Antivirus, patching and ransomware protection remain part of the package.
Clearer boundaries
You know what Cygnet Shield covers and where email, identity, backup or 24/7 monitoring still need consideration.
Cygnet Shield reduces risk. It does not claim to solve everything.
DNS protection is useful because it adds another preventative control. It should still sit alongside other proportionate security measures.
It is not advanced email security
Cygnet Shield can help stop a connection to a known malicious destination, but it does not replace specialist email filtering and BEC protection.
It is not identity monitoring
Microsoft 365 identity activity, suspicious logins and account takeover detection need separate consideration.
It is not recovery
Microsoft 365, server and endpoint backup remain separate controls if data recovery matters to the organisation.
Device protection, safer connections or 24/7 human monitoring?
The right answer depends on the risk, not which package happens to cost the most.
Keep devices protected and patched
Nest ProtectA good fit when your main requirement is centrally managed antivirus, patching and ransomware encryption protection.
From £3.99/device/month + VAT
Protect devices wherever they connect
Cygnet ShieldAdds DNS-layer protection to the Nest Protect baseline for teams working across different networks.
From £5.99/device/month + VAT
Make sure somebody is watching
Swan Guard ProAdds human-led detection and response where prevention alone is not enough for the organisation's risk or external requirements.
From £13.99/device/month + VAT
Review the gap. Configure the protection. Confirm what is covered.
We check suitability before deployment, so you know what Cygnet Shield will solve and where another control may still be needed.
Review
We look at your devices, remote working, current endpoint protection, patching and how people connect to the internet.
Protect
We deploy and configure NGAV, patching, ransomware protection and the DNS security policies.
Confirm
We check the devices are reporting, explain what is covered and identify any important remaining gaps.
From £5.99 per protected device per month + VAT
Cygnet Shield is priced per covered device. These examples give you a sensible starting point before you speak to us.
Final pricing depends on device count, compatibility, deployment requirements and any additional services selected. We confirm the full scope and cost before anything starts.
A good fit when people work online from more than one place.
Cygnet Shield may fit when...
- Staff regularly use laptops away from the office.
- You want web protection that follows the protected device.
- You want antivirus, patching, ransomware protection and DNS protection managed together.
- You rely heavily on browser-based and cloud services.
- You already have IT support but want additional security expertise.
- You want stronger prevention without immediately paying for 24/7 monitoring.
You may need more when...
- You need alerts investigated by people 24 hours a day.
- Your insurer requires managed detection and response.
- Microsoft 365 identity monitoring is an important requirement.
- Advanced email security needs to be part of the service.
- You need Microsoft 365, server or endpoint backup.
- You need a broader managed service around multiple attack routes.
What customers value
"Staff aren't having to worry about whether they are compliant or not."
Headteacher, Federation of Penny Acres and Wigley Primary Schools
Protect the device, add safer web connections or add 24/7 response.
The packages build on one another, but the right option depends on what you actually need protected.
| Protection | Nest Protect From £3.99/device/month | Cygnet Shield From £5.99/device/month | Swan Guard Pro From £13.99/device/month |
|---|---|---|---|
| Next-Generation Antivirus | ✓ | ✓ | ✓ |
| Ransomware Encryption Protection | ✓ | ✓ | ✓ |
| Patch & Asset Management | ✓ | ✓ | ✓ |
| DNS Web Protection | Not included | ✓ | ✓ |
| 24/7 Detection & Response | Not included | Optional | ✓ |
| Best suited to | Managed device protection | Device + safer web protection | 24/7 human-led monitoring |
Huntress EDR and ITDR can add managed monitoring around devices and Microsoft 365 identity activity. Cygnet Shield does a different job: it focuses on prevention across the device, patching and web connections.
Add another layer without replacing everything that already works.
You do not need to replace a trusted IT provider to use Cygnet Shield. Black Swan can work alongside your existing support company, providing the agreed security controls while they continue handling day-to-day IT.
We start by looking at what you already have. If Nest Protect would be enough, we will say so. If Cygnet Shield closes a genuine gap, we can put it in place. If the real requirement is 24/7 monitoring, identity protection, email security or backup, we will explain that too.
Advice first. Tools second. But when the right answer is a tool, we can manage that too.
Straight answers before you buy.
What does Cygnet Shield add to Nest Protect?
Cygnet Shield includes the Nest Protect controls and adds DNS-layer protection.
That additional layer can help stop a protected device connecting to known malicious websites, phishing destinations and other risky domains.
Does the DNS protection still work away from the office?
The DNS protection is applied to the protected device, so it is designed to provide protection when that device is used across different internet connections, not only when it is connected to the office network.
Is Cygnet Shield a complete cyber security package?
No. It provides a strong preventative baseline around devices, patching, ransomware encryption and DNS web protection.
Email security, Microsoft 365 identity monitoring, backup, awareness training and 24/7 threat monitoring still need to be considered separately.
Can Cygnet Shield stop every phishing attack?
No security control can guarantee that.
DNS protection can help stop connections to destinations already identified as malicious, but it should sit alongside suitable email security, MFA, user awareness and other controls.
Is Cygnet Shield suitable for remote and hybrid workers?
Yes. That is one of the clearest reasons to consider it instead of Nest Protect alone.
The additional DNS protection is particularly useful where laptops regularly move between office, home and other networks.
Is Cygnet Shield managed or just software?
It is a managed preventative security service. Black Swan helps deploy and configure the protection, checks that enrolled devices are reporting and helps you understand issues or gaps that need attention.
It does not include continuous human-led threat investigation by default.
Does Cygnet Shield help with Cyber Essentials?
It can help strengthen relevant areas including malware protection, secure configuration and patch management.
Cygnet Shield does not guarantee certification because Cyber Essentials also considers other controls and the wider scope of the organisation.
When should we choose Swan Guard Pro instead?
Swan Guard Pro may be more appropriate where you need 24/7 managed detection and response, your insurer requires active monitoring or you want suspicious activity investigated by security specialists outside normal working hours.
What if we need identity monitoring as well?
Microsoft 365 identity monitoring is not included in Cygnet Shield.
Where identity attacks are a concern, we can look at options such as Huntress ITDR alongside the device protection.
How much does Cygnet Shield cost?
Cygnet Shield starts from £5.99 per protected device per month plus VAT.
Final pricing depends on device count, compatibility, deployment requirements and any additional services selected.
Do your devices need better protection when they leave the office?
Tell us how your team works, where devices are used and what protection you already have. We will help you work out whether Nest Protect is enough, whether Cygnet Shield closes a useful gap or whether you need something stronger.

Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.