SYSMarshal - Professional (Annual)
The full SYSMarshal platform, licensed annually per PC. Real-time Windows Security event analysis, autonomous Windows Firewall blocking, the AI Security Assistant with thousands of free queries included, full hostnames in the Baseline blacklist, and the worldwide Global Data toggle covering every SYSMarshal customer. One license per PC, one API key per machine, volume discounts from five licenses.
Regular price: $399.00
$199.00
PRICE BREAKS - The more you buy, the more you save
| 5+ | 10+ | 30+ | 50+ | 100+ |
| $189.00 | $179.00 | $159.00 | $149.00 | $139.00 |
SYSMarshal Professional — autonomous defense for Windows servers and workstations
Professional is the complete SYSMarshal platform with nothing held back. It is licensed annually, one license per PC, and every machine on your license reports into the same customer account — so one view covers the whole site, not just the box you happen to be sitting at.
Everything in the trial, plus the Professional-only capabilities
- AI Security Assistant — ask about your own events, firewall activity and logs in plain English. Professional ships with thousands of free AI queries; top up later if you need more.
- Full hostnames in Baseline — complete attacker and target detail instead of masked values.
- View Global Data — switch the Baseline blacklist between your own site data (every machine on your license) and worldwide data contributed by every SYSMarshal customer. That is the difference between reacting to attacks you have already seen and blocking attackers before they ever reach you.
- Auto-Inoculation — pre-block IPs from the shared feed above a confidence threshold you set, with a recency gate that prunes stale attackers instead of letting rules accumulate forever.
- Priority updates and support.
What it defends against
- RDP brute force and password spraying
- SQL Server authentication attacks
- Credential attacks, account lockout storms and suspicious logon patterns
- Connection floods and hostile reconnaissance
- Web and IIS probing — scanner signatures, path traversal attempts and status-code anomalies
- Suspicious PowerShell execution and service tampering
Licensing
- One license covers one PC or server. Buy the quantity you need and deploy across the organization.
- Each machine gets its own API key; every machine on your account shares one customer license and one pooled view of site data.
- Annual term. Need more machines mid-term? Use the Professional Add-On product — it inherits your existing renewal date.
Volume pricing
| Licenses | Price per license / year | Discount |
|---|
| 1 – 4 | $199 | — |
| 5 – 9 | $189 | 5% |
| 10 – 29 | $179 | 10% |
| 30 – 49 | $159 | 20% |
| 50 – 99 | $149 | 25% |
| 100 – 1000 | $139 | 30% |
Founding member offer: the first 5,000 members lock the $199 introductory price for three full years. Once the founding seats are taken, the standard price of $399 per year applies to new customers.
Common questions
Is SYSMarshal an antivirus replacement?
No. Antivirus inspects files on the endpoint. SYSMarshal watches behavior — authentication, network and event-log activity — and shuts the attacker out at the network edge of the machine. The two are complementary; SYSMarshal runs alongside Microsoft Defender or any other AV without conflict.
Does it need a cloud console or an agent fleet?
No. Each machine runs the SYSMarshal application against a local SQL Server Express database. The only outbound traffic is HTTPS to the Baseline threat intelligence service.
What happens if the application is closed?
Blocks are native Windows Firewall rules, so they survive the application closing and machine reboots. The bundled watchdog service also keeps monitoring running.
Can I try it first?
Yes — the 30-day trial is the same build, with no credit card required.
