Cayosoft Pushes Hybrid Identity Resilience Into the Cloud With New Guardian SaaS Expansion
- Cyber Jill
- Nov 18, 2025
- 3 min read
At Microsoft Ignite 2025, Cayosoft used its booth at the convention center—#5332, for anyone keeping score—to drop a strategic update that hits directly at one of the messiest problems in enterprise security: hybrid identity continuity. The company unveiled a new cloud-delivered deployment model for Cayosoft Guardian, turning its flagship identity protection platform into an always-on SaaS service designed to survive even when the environment it’s protecting is on fire.
For years, Cayosoft has owned its niche: monitoring, governing, and recovering Microsoft hybrid identity systems at scale. The company’s rapid climb—punctuated by back-to-back appearances as a Representative Vendor across six different Gartner reports this year—made its next move feel inevitable. The question wasn't if Cayosoft would go SaaS; it was when. Now we know.
“Identity continuity can’t depend on the very systems under attack,” said Robert Bobel, CEO of Cayosoft. “With Cayosoft Guardian as a service, we’re extending the power of our platform to the cloud, delivering true hybrid Microsoft identity protection and ensuring that enterprises can detect, respond, and recover instantly, no matter where they operate.”
This isn’t merely a new hosting option. It’s a fundamental shift in how organizations might weather identity-centric attacks—especially those that start by crippling the very directory infrastructure that defenders rely on to orchestrate a response. By relocating Guardian’s logic, telemetry, and rollback engine into a fully managed, cloud-resilient control plane, Cayosoft is essentially offering a fire blanket that can’t catch fire.
A Fortified Control Plane for the Hybrid Chaos Era
Hybrid identity environments are notoriously brittle. Misconfigurations happen constantly. Drift piles up. Attackers increasingly target Entra ID sync paths and on-premises AD as an entry point into cloud assets. Cayosoft’s new model aims to blunt all of that through continuous monitoring, automated misconfiguration detection, and near-instant rollback—without asking customers to maintain or patch another server cluster of their own.
“Cayosoft is setting a new standard for identity security and resilience by delivering our award-winning identity threat detection, change monitoring, and rollback as a service offering,” said Dmitry Sotnikov, Chief Product Officer at Cayosoft. “It’s proof that innovation, customer trust, and operational excellence can coexist in a single platform.”
The promise is seductive: zero maintenance, zero drift, and no chance the recovery system goes offline just when you need it most. The SaaS version arrives with the same headline features as the traditional deployment—real-time hybrid change monitoring across AD, Entra ID, Teams, Intune, and Exchange Online; one-click rollbacks; role-based controls; and audit-friendly reports—but with the resilience of a cloud-native backbone.
Momentum, Validation, and a Crowded Market in Flux
It’s no accident Cayosoft is planting this flag now. Hybrid identity protection is one of the fastest-evolving security categories, squeezed between old-school AD governance vendors and the next wave of ITDR startups. Cayosoft’s revenue growth—triple-digit in FY24 and 60% YoY in FY25—mirrors a market waking up to the reality that identity compromise is not only the dominant attack vector but also a systemic failure point.
The company’s recent streak of Gartner recognition reinforces that narrative. Cayosoft landed in high-visibility reports including ITDR guidance, IAM attack surface reduction, AD governance, and Intune management considerations. But customer feedback may be even more persuasive. On Gartner Peer Insights, users highlighted Guardian’s simplicity, alerting, and hands-on support. One insurance-sector reviewer put it plainly: “They own and love their product, and it shows.”
The Bigger Picture: Identity Recovery Becomes a Cloud Battlefield
Cayosoft’s move places it squarely in a high-stakes competition to become the recovery layer enterprises rely on when domain controllers get encrypted or cloud directories get hijacked. The company’s long-standing boast of instant AD forest recovery—contrasted against the days or weeks older platforms require—has always been its differentiator. A SaaS control plane amplifies that value by making recovery resilient, remote, and independent of the compromised infrastructure.
In other words, the recovery system now lives somewhere attackers can’t easily reach.
Availability and What’s Next
Cayosoft Guardian SaaS enters general availability in Q1 2026, with the company committing ongoing support for both the cloud and on-premises editions. Ignite attendees can watch the system in action—particularly its instant rollback magic—either on site at Booth #5332 or through the virtual showcase.
Hybrid identity is only getting more chaotic. Cayosoft’s bet is that the future of identity resilience won’t be built in the domain controller rack—not anymore—but somewhere attackers can’t knock the power out.