Plans · Annual contracts · Free 5-day pilot
See Signalling Attacks.
Evidence Your Controls.
SS7, Diameter, GTP-C and SIP threat analysis of your signalling firewall data, with compliance evidence mapped to GSMA FS.11 and national security rules. Plans for every size of operator.
Free 5-day pilot on your own data
Send a sample export from your signalling firewall and see your network's threats, defence score and compliance gaps. Pilots are reviewed and approved individually.
Essentials
Typically MVNOs & regional carriers
Signalling threat detection and compliance evidence for a single network.
Contact us
Annual contract · priced to your network
Contact us
What's included
- ✓SS7, Diameter, GTP-C & SIP classification and detection
- ✓Defence score and attack-chain detection
- ✓GSMA FS.11 and UK Telecoms Security Regulations evidence report
- ✓Threat origin map & source network reputation
- ✓SFTP, portal upload or REST API ingestion
- ✓2 platform user seats
- —AI-written threat briefs
- —Multi-country regulatory coverage
MOST POPULAR
Professional
Typically national mobile operators
Full threat intelligence, AI-written briefs and multi-framework compliance (UK, EU or US).
Contact us
Annual contract · priced to your network
Contact us
Everything in Essentials, plus
- ✓AI-written threat briefs for your network and the global landscape
- ✓Anomaly detection: new origins, volume spikes, high-risk techniques
- ✓Multi-framework compliance (GSMA FS.11/FS.19/FS.20, UK, EU NIS2 or US)
- ✓STIX 2.1 indicator export, webhooks & API keys
- ✓10 user seats · next-business-day support
Enterprise
Typically operator groups & regulators
Multi-country and multi-subsidiary coverage with dedicated support.
Contact us
Annual contract · tailored
Contact us
Everything in Professional, plus
- ✓Multi-country & multi-subsidiary organisations
- ✓Additional national frameworks mapped on request
- ✓Unlimited user seats
- ✓Dedicated account engineer & quarterly security review
- ✓Dedicated / private-cloud deployment (on request)
Full Feature Comparison
Everything you need to know before buying
|
Essentials | Professional | Enterprise |
|---|
| Threat Detection |
| SS7 MAP threat detection (20+ MAP techniques) | ✓ | ✓ | ✓ |
| Diameter (S6a, SLh, Gx, Sh) detection | ✓ | ✓ | ✓ |
| GTP-C v2 TEID manipulation detection | ✓ | ✓ | ✓ |
| Campaign tracking | — | ✓ | ✓ |
| Automatic attack-chain correlation (e.g. SRI → PSI, SRI-SM → UL, S6a ULR + IDR) | ✓ | ✓ | ✓ |
| Source operator reputation scoring | — | ✓ | ✓ |
| Custom detection rules | roadmap | roadmap | roadmap |
| AI Threat Intelligence |
| AI-generated attack chain narratives | — | ✓ | ✓ |
| Sending-network assessment & GSMA mapping | — | ✓ | ✓ |
| Threat origin maps | ✓ | ✓ | ✓ |
| Regulatory Compliance |
| GSMA FS.11 + Ofcom TSA | ✓ | ✓ | ✓ |
| GSMA FS.07 + CoC-GT + EU NIS2 / FCC | — | ✓ | ✓ |
| Additional national frameworks | — | — | on request |
| PDF export / audit trail | — | ✓ | ✓ |
| Platform |
| Events / month | 500k | 5M | Unlimited |
| User seats | 2 | 10 | Unlimited |
| REST API + webhooks | — | ✓ | ✓ |
| TOTP two-factor authentication (enforceable per organisation) | ✓ | ✓ | ✓ |
| Support SLA | 3 days | Next business day | 4 hours |
Frequently Asked Questions
Common questions from network security and procurement teams
How does SignalsGuard connect to our network? ↓
Send your signalling firewall or probe exports in whichever way suits you — all three feed the same pipeline:
SFTP drop box (scheduled exports, the usual choice),
portal upload (CSV/JSON, ideal for a pilot sample) or
REST API (pushed by your firewall, STP/DEA or probe for near-real-time). Nothing is installed in your network and SignalsGuard never connects into your STP or DEA — you push data out. We map exports from the major firewall and probe vendors. Full documentation at
signalsguard.com/docs.
Does SignalsGuard access subscriber data? ↓
No. SignalsGuard ingests signalling metadata only: operation type, protocol, source GT/realm, destination, timestamp, and GSMA threat category. IMSI is reduced to its network prefix (MCC+MNC) and MSISDN to a keyed hash at ingest; call content, cell IDs and coordinates are never stored. Data is held encrypted at rest in a UK (London) database, logically isolated per client. AI-written explanations are generated by our model provider from aggregated, non-subscriber metadata; this can be disabled on request.
How does the Ofcom TSA compliance report work? ↓
Each applicable requirement gets a status (compliant, review required or non-compliant) with the specific reason, the events behind it and the recommended fix. Statuses are evidence for your compliance team, based on SignalsGuard assessment thresholds and your declared controls — not a regulator’s determination.
How do we pay? What is the contract term? ↓
Annual contracts, invoiced in GBP and paid by bank transfer.
Contact us for a services agreement and data processing agreement.
Can we trial the platform before committing? ↓
Yes — a free 5-day pilot. You send a sample export from your signalling firewall (SFTP or portal upload) and see your network’s threats, defence score and compliance gaps in the platform. Each pilot is reviewed and approved by our team.
Request a pilot.
See your network’s signalling threats
Request a free 5-day pilot on your own data, or try the read-only demo now.
Questions: support@signalsguard.com