CyberIndexBeta

Product

Network vulnerability scanning with patch management for operating systems and common third-party applications. GFI LanGuard AI enables you to manage and maintain end-point protection across your network. For large networks, you can install multiple GFI LanGuard AI instances (sites) and use a single web console for a centralized view and aggregated reporting. GFI LanGuard AI ships with a vulnerability assessment database, which includes standards such as OVAL (11,500+ checks) and SANS Top 20. It runs on Linux, macOS and Windows.

Current Version
12.17
Market
Mid-MarketSMB
Licence
Paid
Price
Quote
Record Created
2026-10-04
Last Updated
2026-10-28

Vendor

GFI Software sells network and communications software to small and mid-sized organisations, largely through resellers, and its catalogue has been assembled by acquisition over many years. It is owned by the investment group behind Aurea and ESW Capital, which specialises in acquiring established software businesses. KerioControl, the product listed here, came from its 2017 purchase of Kerio Technologies, a Czech company: a unified threat management firewall combining routing, VPN, intrusion prevention and content filtering in one appliance or virtual machine, aimed at organisations without a dedicated network team. GFI also once owned the antivirus that is now VIPRE, which it acquired with Sunbelt Software and later divested — VIPRE appears separately in this index. KerioControl is a network product and is not assessed by the malware laboratories. Vendor page →

Website
gfi.ai
Country
United States
Headquarters
Austin, United States
Year Established
1992
Customers
40K organisations
Users
40K deployments
Revenue
$100.0M (2026)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Mid-Market secondarySMB primary

Capabilities

Application Patchingkeynative
Operating System Patchingkeynative
Automated Patch Deploymentkeynative
Vulnerability-Based Prioritisationkeynative
Patch Rollbackkeypartial
Phased / Ring Deploymentpartial
Roaming Endpoint Patchingkeypartial
Patch Compliance Reportingnative
Reboot Managementnative
Software Deploymentnative
Vulnerability ShieldingNot known
Central Management Consolenative
Air-Gap Operationkeypartial
Local Patch Repositorynative
Agentless Patchingkeynative
Multi-Tenant (MSP) ManagementkeyNot known

2 of 16 not yet known — not recorded, which is not the same as not supported.

Specifications

Agentless OperationYes

1 other specification for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 12.17platform not recorded
  • 12.1.20161220Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-10-04. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 12.17evidence
  • 2026-10-20Product updatedAlso sold to: Mid-Marketevidence
  • 2026-10-20Product updatedSold to: SMBevidence
  • 2026-10-10New versionNew version: 12.1.20161220 (Windows)evidence
  • 2026-10-09Pricing plan addedPrice: price on requestevidence
  • 2026-10-09New versionNew version: 12.16evidence
  • 2026-10-06Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-10-05Capability addedAgentless Patching: built inevidence
  • 2026-10-05Capability addedAir-Gap Operation: limitedevidence
  • 2026-10-05Capability addedRoaming Endpoint Patching: limitedevidence
  • 2026-10-05Capability addedPhased / Ring Deployment: limitedevidence
  • 2026-10-05Capability addedPatch Rollback: limitedevidence
  • 2026-10-05Capability addedLocal Patch Repository: built inevidence
  • 2026-10-05Capability addedCentral Management Console: built inevidence
  • 2026-10-05Capability addedSoftware Deployment: built inevidence
  • 2026-10-05Capability addedReboot Management: built inevidence
  • 2026-10-05Capability addedPatch Compliance Reporting: built inevidence
  • 2026-10-05Capability addedVulnerability-Based Prioritisation: built inevidence
  • 2026-10-04Capability addedAutomated Patch Deployment: built inevidence
  • 2026-10-04Capability addedApplication Patching: built inevidence
  • 2026-10-04Capability addedOperating System Patching: built inevidence
  • 2026-10-04Platform addedRuns on macOSevidence
  • 2026-10-04Platform addedRuns on Linuxevidence
  • 2026-10-04Platform addedRuns on Windowsevidence
  • 2026-10-04Product createdNew product, listed in Patch Managementevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.