Book a free 30 minute consultation

Cygnet Shield cyber security package

Safeguard your organisation and data from cyber threats. Professional cyber protection designed for real-world budgets – from £5.99 per user per month (volume and educational discounts available)

Managed device + web protection

Keep devices protected. Block more risky connections. Work more safely wherever your team connects.

Cygnet Shield

Cygnet Shield builds on the Nest Protect device baseline by adding DNS-layer protection that can help stop connections to known malicious websites and risky online destinations.

It is designed for smaller organisations that want stronger protection for laptops and desktops without moving straight to a full 24/7 monitoring service.

From £5.99 per protected device/month + VAT
  • Protect devices from malware
  • Keep supported software patched
  • Watch for ransomware encryption
  • Block more known malicious destinations

No pressure and no automatic upsell. We will tell you if Nest Protect would be enough, if Cygnet Shield fits, or if you actually need stronger monitoring.

Cygnet Shield managed cyber security package

Protect the device and the connection.

Device protection, automated patching, ransomware encryption protection and DNS-layer web protection in one managed package.

The problem it solves

Device security should not stop when somebody leaves the office.

Staff work from home, client sites, hotels, shared workspaces and mobile hotspots.

A protected laptop can still be pointed at a malicious website or fake sign-in page. That is the additional gap Cygnet Shield is designed to reduce.

1

People work beyond the office firewall

Laptops move between networks, so relying only on protection provided by the office connection leaves a gap.

2

One convincing link can be enough

Phishing pages and malicious websites rely on people reaching the destination before another control gets a chance to intervene.

3

Device basics still need managing

Antivirus, patching and ransomware protection still need to be configured, visible and maintained.

Cygnet Shield adds another question before the connection happens: "Is this somewhere the device should be going?"

Black Swan beside Cygnet Shield while a barrier blocks a malicious website connection

Glitch & Black Swan explain

A click does not have to become a connection.

"You clicked my link. Why can't I get you to my website?"

Glitch, discovering another check in his way

A convincing link can point to a fake sign-in page, malicious download or another dangerous destination.

Cygnet Shield adds DNS-layer protection to help block connections to domains identified as dangerous, giving the user another layer of protection if they do click.

It also includes the Nest Protect controls: next-generation antivirus, automated patching and ransomware encryption protection.

And it follows the protected device.

The DNS protection is applied to the protected device, so the additional layer can still help when somebody is working away from the office network.

Cygnet Shield adds connection protection, not a 24/7 security team. It cannot block every harmful link and it does not replace advanced email security, MFA, identity protection or backups.

What you actually get

A managed device baseline with an extra layer around where devices connect.

Cygnet Shield is not simply another web-filtering licence. It combines the Nest Protect controls with DNS-layer protection and Black Swan's managed setup and guidance.

The technology

Protect the device and its web connections

The managed service

Make the protection work around your organisation

  • Review your current device and browsing protection.
  • Deploy and configure the agreed Heimdal modules.
  • Configure security, patching and DNS policies.
  • Check enrolled devices are reporting correctly.
  • Help investigate legitimate sites that may need reviewing or allowing.
  • Explain any important risks outside the Cygnet Shield package.
Preventative protection is not the same as 24/7 monitoring.

If your organisation needs alerts investigated by human security specialists around the clock, Swan Guard Pro, Heimdal MXDR or another managed detection service may be more appropriate.

What changes for you?

Safer devices, fewer avoidable gaps and another layer between a click and a bad destination.

Safer browsing away from the office

DNS protection stays with the protected device, rather than depending only on the office network or firewall.

More chances to stop a bad click

A malicious destination can be blocked before somebody reaches the fake page or dangerous download.

Device basics stay managed

Antivirus, patching and ransomware protection remain part of the package.

Clearer boundaries

You know what Cygnet Shield covers and where email, identity, backup or 24/7 monitoring still need consideration.

Clear boundaries

Cygnet Shield reduces risk. It does not claim to solve everything.

DNS protection is useful because it adds another preventative control. It should still sit alongside other proportionate security measures.

It is not advanced email security

Cygnet Shield can help stop a connection to a known malicious destination, but it does not replace specialist email filtering and BEC protection.

It is not identity monitoring

Microsoft 365 identity activity, suspicious logins and account takeover detection need separate consideration.

It is not recovery

Microsoft 365, server and endpoint backup remain separate controls if data recovery matters to the organisation.

Choose the right level

Device protection, safer connections or 24/7 human monitoring?

The right answer depends on the risk, not which package happens to cost the most.

Managed device baseline

Keep devices protected and patched

Nest Protect

A good fit when your main requirement is centrally managed antivirus, patching and ransomware encryption protection.

From £3.99/device/month + VAT

Device + web protection

Protect devices wherever they connect

Cygnet Shield

Adds DNS-layer protection to the Nest Protect baseline for teams working across different networks.

From £5.99/device/month + VAT

24/7 managed monitoring

Make sure somebody is watching

Swan Guard Pro

Adds human-led detection and response where prevention alone is not enough for the organisation's risk or external requirements.

From £13.99/device/month + VAT

What happens first?

Review the gap. Configure the protection. Confirm what is covered.

We check suitability before deployment, so you know what Cygnet Shield will solve and where another control may still be needed.

Review

We look at your devices, remote working, current endpoint protection, patching and how people connect to the internet.

Protect

We deploy and configure NGAV, patching, ransomware protection and the DNS security policies.

Confirm

We check the devices are reporting, explain what is covered and identify any important remaining gaps.

Straightforward pricing

From £5.99 per protected device per month + VAT

Cygnet Shield is priced per covered device. These examples give you a sensible starting point before you speak to us.

10 protected devices From £59.90 + VAT/month
20 protected devices From £119.80 + VAT/month
30 protected devices From £179.70 + VAT/month
Each protected device requires the appropriate licence.
Device and operating system compatibility is checked first.
Any setup requirements are explained before deployment.
Optional services and add-ons are quoted separately.
You receive a clear price before agreeing to proceed.
Devices outside the agreed scope are identified clearly.

Final pricing depends on device count, compatibility, deployment requirements and any additional services selected. We confirm the full scope and cost before anything starts.

Is Cygnet Shield right for you?

A good fit when people work online from more than one place.

Cygnet Shield may fit when...

  • Staff regularly use laptops away from the office.
  • You want web protection that follows the protected device.
  • You want antivirus, patching, ransomware protection and DNS protection managed together.
  • You rely heavily on browser-based and cloud services.
  • You already have IT support but want additional security expertise.
  • You want stronger prevention without immediately paying for 24/7 monitoring.

You may need more when...

  • You need alerts investigated by people 24 hours a day.
  • Your insurer requires managed detection and response.
  • Microsoft 365 identity monitoring is an important requirement.
  • Advanced email security needs to be part of the service.
  • You need Microsoft 365, server or endpoint backup.
  • You need a broader managed service around multiple attack routes.

What customers value

"Staff aren't having to worry about whether they are compliant or not."
David Ratcliffe
Headteacher, Federation of Penny Acres and Wigley Primary Schools
Quick comparison

Protect the device, add safer web connections or add 24/7 response.

The packages build on one another, but the right option depends on what you actually need protected.

Protection Nest Protect
From £3.99/device/month
Cygnet Shield
From £5.99/device/month
Swan Guard Pro
From £13.99/device/month
Next-Generation Antivirus ✓ ✓ ✓
Ransomware Encryption Protection ✓ ✓ ✓
Patch & Asset Management ✓ ✓ ✓
DNS Web Protection Not included ✓ ✓
24/7 Detection & Response Not included Optional ✓
Best suited to Managed device protection Device + safer web protection 24/7 human-led monitoring
Need visibility across identities as well?

Huntress EDR and ITDR can add managed monitoring around devices and Microsoft 365 identity activity. Cygnet Shield does a different job: it focuses on prevention across the device, patching and web connections.

Why Black Swan?

Add another layer without replacing everything that already works.

You do not need to replace a trusted IT provider to use Cygnet Shield. Black Swan can work alongside your existing support company, providing the agreed security controls while they continue handling day-to-day IT.

We start by looking at what you already have. If Nest Protect would be enough, we will say so. If Cygnet Shield closes a genuine gap, we can put it in place. If the real requirement is 24/7 monitoring, identity protection, email security or backup, we will explain that too.

Advice first. Tools second. But when the right answer is a tool, we can manage that too.

Common questions

Straight answers before you buy.

What does Cygnet Shield add to Nest Protect?

Cygnet Shield includes the Nest Protect controls and adds DNS-layer protection.

That additional layer can help stop a protected device connecting to known malicious websites, phishing destinations and other risky domains.

Does the DNS protection still work away from the office?

The DNS protection is applied to the protected device, so it is designed to provide protection when that device is used across different internet connections, not only when it is connected to the office network.

Is Cygnet Shield a complete cyber security package?

No. It provides a strong preventative baseline around devices, patching, ransomware encryption and DNS web protection.

Email security, Microsoft 365 identity monitoring, backup, awareness training and 24/7 threat monitoring still need to be considered separately.

Can Cygnet Shield stop every phishing attack?

No security control can guarantee that.

DNS protection can help stop connections to destinations already identified as malicious, but it should sit alongside suitable email security, MFA, user awareness and other controls.

Is Cygnet Shield suitable for remote and hybrid workers?

Yes. That is one of the clearest reasons to consider it instead of Nest Protect alone.

The additional DNS protection is particularly useful where laptops regularly move between office, home and other networks.

Is Cygnet Shield managed or just software?

It is a managed preventative security service. Black Swan helps deploy and configure the protection, checks that enrolled devices are reporting and helps you understand issues or gaps that need attention.

It does not include continuous human-led threat investigation by default.

Does Cygnet Shield help with Cyber Essentials?

It can help strengthen relevant areas including malware protection, secure configuration and patch management.

Cygnet Shield does not guarantee certification because Cyber Essentials also considers other controls and the wider scope of the organisation.

When should we choose Swan Guard Pro instead?

Swan Guard Pro may be more appropriate where you need 24/7 managed detection and response, your insurer requires active monitoring or you want suspicious activity investigated by security specialists outside normal working hours.

What if we need identity monitoring as well?

Microsoft 365 identity monitoring is not included in Cygnet Shield.

Where identity attacks are a concern, we can look at options such as Huntress ITDR alongside the device protection.

How much does Cygnet Shield cost?

Cygnet Shield starts from £5.99 per protected device per month plus VAT.

Final pricing depends on device count, compatibility, deployment requirements and any additional services selected.

Start with the gap

Do your devices need better protection when they leave the office?

Tell us how your team works, where devices are used and what protection you already have. We will help you work out whether Nest Protect is enough, whether Cygnet Shield closes a useful gap or whether you need something stronger.

Meet Kevin: Founder of Black Swan

Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you! From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.

Ready to replace sleepless nights with peace of mind? It all starts with an informal chat! Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.