WatchGuard said its December 2024 acquisition of ActZero would add capacity, scalability and technology to its managed detection and response (MDR) service. The goal, CEO Prakash Panjwani explained, was to support a larger partner base and extend MDR across WatchGuard products and third-party security tools. The announcement described the deal’s intent—not proof of what integrations or service terms are in place today.
What WatchGuard said the acquisition would change
WatchGuard announced the ActZero acquisition on January 8, 2025, and says the transaction was signed and closed on December 17, 2024. In its announcement, the company described ActZero as an MDR provider offering proactive threat response and cross-platform, AI-driven threat analysis. WatchGuard said ActZero’s people and services would become the foundation of its MDR product line.
Panjwani connected the deal to demand for WatchGuard’s existing MDR service: “We realized the need to scale rapidly as we have gained traction throughout the year with our MDR service.” He said the acquisition would add “capacity, scalability, and new technology” and enable expansion across the full WatchGuard portfolio and third-party security products. These are the company’s stated objectives, not independent findings about service performance.
ActZero co-founder and CEO Sameer Bhalotra said the integration would expand the team’s AI-powered MDR solution with expert analysis worldwide. His description of the result as “unmatched protection” is promotional language, not a verified comparison with other providers.
#1 Best Overall
- WatchGuard Firebox T45 tabletop appliances bring enterprise-level network security to small office/branch office and retail environments. These appliances are small-footprint, cost-effective security powerhouses that deliver all the features present in WatchGuard’s higher-end UTM appliances, including all security capabilities, such as AI-powered anti-malware, threat correlation, and DNS-filtering.
- 5G and Wi-Fi 6 enabled models available. Up to 3.94 Gbps firewall throughput, 5 x 1Gb ports, 30 Branch Office VPNs
- Zero-touch deployment makes it possible to eliminate much of the labor involved in setting up a Firebox to connect to your network - all without having to leave your office. A robust, Cloud-based deployment and configuration tool comes standard with WatchGuard Firebox appliances. Local staff connects the device to power and the Internet, and the appliance connects to the Cloud for all its configuration settings.
- Firebox T45 models make network optimization easy. With integrated SD-WAN and optional 5G technology, you can ensure failover to the cellular network, minimize disruptive connectivity, and establish secure and reliable connections for small offices.
- Standard Support includes 24x7 access to technical support, with an unlimited number of incidents with a targeted response time of 24 hours for low priority, 8 hours for medium priority, 4 hours for high priority, and live calls for critical priority. Support is Web-Based and Phone-Based.
Why scale mattered to WatchGuard’s MSP strategy
WatchGuard framed MDR as a way for managed service providers (MSPs) to offer round-the-clock detection and response without building and maintaining their own security operations center (SOC). The company’s rationale was that ActZero’s staff, services and technology could help it serve more partners and broaden the products covered by its MDR offering.
WatchGuard’s January 2025 announcement said it had introduced MDR in October 2023. At that time, the company described monitoring endpoint and Microsoft 365 activity, along with threat hunting, detection, investigation, containment and guided remediation recommendations. That announcement-period description should not be taken as a complete or current service specification.
Rank #2
- The Firebox NV5 utilizes the same platform as other WatchGuard Firebox, Wi-Fi, authentication, and endpoint solutions. Whether scheduling firmware upgrades or monitoring access points, technicians have one user experience.
- Designed to support remote VPN connections back to a corporate virtual or physical Firebox, the NV5 can route traffic back to the corporate security appliance using WatchGuard Branch Office VPN (BOVPN) capabilities to provide the same level of protection as a device sitting at the corporate office.
- Streamline network setup for the NV5 in WatchGuard Cloud. You can easily define network segments, keeping things like VoIP systems or IoT devices separate from your business-critical applications. Creating a VPN deployment is a breeze. With pre-configured policies you can get up and running quickly ‒ and securely. With Live Status, WatchGuard Cloud provides visibility into your network so that you can make timely, informed, and effective decisions about your network and security configurations.
- Includes SD-WAN and VPN capabilities - Up to 200 Mbps VPN throughput, 3 x 1 GbE ports, Up to 5 users
- WatchGuard RapidDeploy makes it possible to eliminate much of the labor involved in setting up a Firebox to work for your network ‒ all without having to leave your office. RapidDeploy is a powerful, Cloud-based deployment and configuration tool that comes standard with the Firebox NV5. Local staff simply connect the device to power and the Internet, and the NV5 automatically downloads and applies the pre-determined configuration.
What the announcement said about integrations
A January 2025 CRN interview reported that ActZero supported endpoint security tools including CrowdStrike Falcon and Microsoft Defender. It also reported that WatchGuard’s own endpoint protection was planned for integration during the first half of 2025. A stated plan is not confirmation that the integration was completed, and the available announcement-period sources do not establish WatchGuard MDR’s current integration list or service terms.
For an MSP considering an MDR service, the practical questions are whether its particular endpoint and cloud tools are supported now, what the provider can do when it detects a threat, and which actions remain the MSP’s or customer’s responsibility. The announcement described detection, investigation and containment, plus guided remediation recommendations; it does not settle the current contractual scope or answer how every response action is delivered.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Rank #3
- Watchguard T125 Firebox with 1 Year Standard Support License (WGT125001) - The Firebox T125 provides enterprise-grade protection for branch offices and remote sites. Featuring 2.5Gb and 1Gb ports, it delivers fast throughput, advanced malware detection with IntelligentAV, and SD-WAN compatibility in a compact form factor.
- Standard Support covers software updates and round-the-clock emergency help. Add a Basic or Total Security Suite to activate IPS, gateway antivirus, and web filtering so threats are blocked before they reach users.
- Standard Support provides reliable technical assistance and software updates for WatchGuard Firebox appliances. Offering 24x7 help for emergencies and business-hours support for routine needs, it ensures your network stays secure and operational.
- Interfaces and deployment: 1x 2.5Gb and 4x 1Gb Ethernet to simplify uplinks, carve out segmented zones, and keep branch wiring minimal.
- Performance and scale: UTM up to 510 Mbps with inspection on; sized for small and branch offices with room to grow VPN connectivity.
How to read the deal’s scale figures
The figures published around the acquisition have different definitions and dates. They are announcement-period claims, not verified current counts.
| Figure | Attribution and context |
|---|---|
| More than 25,000 MSPs and over 1.5 million customers worldwide | WatchGuard-reported figures in its January 2025 acquisition announcement; not independently verified or current. |
| 17,000 active MSP partners | Reported by CRN in January 2025 from Panjwani’s remarks. “Active” is narrower wording than WatchGuard’s broader MSP figure, so the counts are not directly comparable. |
| 40 ActZero employees and nearly 1,300 WatchGuard employees after the acquisition | CRN’s January 2025 report of Panjwani’s remarks; announcement-period headcounts, not current staffing data. |
What the acquisition does—and does not—establish
The deal shows WatchGuard’s stated plan to use ActZero’s capabilities to expand MDR capacity and product coverage for MSPs. It does not, by itself, establish that every integration milestone was met, that all third-party tools are covered, or that customers achieve a particular security outcome. MSPs evaluating the service should confirm current coverage, response responsibilities, operating model and terms with WatchGuard before relying on announcement-era descriptions.
WatchGuard’s separate transaction announcement states that the deal was signed and closed on December 17, 2024.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
