Guardian360 vs Kertos
Works alongside Kertos
Guardian360 works alongside Kertos, covering the ground that vendor leaves open. A Munich compliance-automation platform selling ISO 27001, NIS2, TISAX and ISO 42001 readiness as software plus certified human experts.
What Kertos is good at
Kertos pairs compliance automation with certified German-speaking experts and an agentic assistant, KAIA, across nine framework pages including ISO 27001, TISAX, NIS2 and the EU AI Act. It holds ISO 42001 itself. It has no scanner of its own, so the evidence underneath its controls comes from an integration, and it publishes no Dutch content.
Side by side
How they compare
| Guardian360 | Kertos | |
|---|---|---|
| Company origin & data residency | Netherlands, EU-only | Germany (Munich/Berlin); Frankfurt AWS, Luxembourg per sub-processors |
| Partner model | Partner-only | Referral, reseller, MSP and vCISO tracks; contact form only, no tiers |
| Deployment approach | Agentless SaaS | API and no-code integrations plus a browser plug-in; no endpoint agent |
| Compliance coverage | 25+ frameworks, continuously mapped | Nine pages: ISO 27001, 27701, 42001, SOC 2, TISAX, GDPR, NIS2, AI Act, C5 |
| Intrusion detection | Built-in honeypots | Not published |
| Microsoft 365 insight | Included | Entra ID, Intune and Outlook for evidence only; no tenant posture |
| Container & cloud scanning | Planned for 2026 | No scanning; cloud integrations are asset inventory (Aikido supplies vuln data) |
| Mobile app | Yes (Android & iOS) | Not published |
| Automation & ease of use | High | High; agentic assistant KAIA and auto-checks, plus German-speaking experts |
| Pricing / MSP model | MSP pricing per employee / IP | Quote only; no pricing page |
| Auto-remediation | Partner-guided | Not published; automation stops at evidence and task assignment |
| Free trial / quick scan | Yes, incl. free WordPress plugin | No trial; demo plus a free NIS2 scope checker |
| Smallest client size | From 10 employees / IPs | Startup upward; no published floor |
| Data sovereignty (EU-only) | Yes | Claims no third-country transfers; sub-processor page lists US and AU processors |
| Supply-chain compliance | Yes, NIS2/Cbw + CRA questionnaires | Yes; vendor management with supplier monitoring and a Trust Center |
Based on publicly available information at the time of writing. Vendors evolve quickly, always verify the latest details with each provider.
When Kertos may fit better
A DACH mid-market buyer who wants compliance readiness as software plus certified German-speaking experts, and does not want to run the programme in-house.
When Guardian360 fits better
An organisation that wants the technical evidence underneath the controls: Guardian360 Lighthouse scans continuously, maps findings to 25+ frameworks including the Dutch norms, and adds detection and Microsoft 365 insight, EU-hosted and partner-delivered.
Common questions
Guardian360 vs Kertos, answered
Is Guardian360 an alternative to Kertos?
They solve related problems. Kertos automates compliance readiness with expert support; Guardian360 Lighthouse produces the technical evidence underneath, scanning the estate and mapping findings to frameworks. In DACH, Kertos's German-speaking experts are a real strength; on the Dutch norms and technical assurance, Lighthouse is.
What is the main difference?
Kertos has no scanner and takes vulnerability data from an integration, while Lighthouse does the scanning and detection itself and maps results to frameworks including Dutch norms such as NEN 7510 and BIO, hosted in the EU.
See it on your own environment
Run a free Quickscan, start a trial, or talk to a partner. Guardian360 is delivered exclusively through our partners.