Skip to main content
GNS Technology logo

GNS CARE ─ managed service hub

GNS CARE managed service

Network, CCTV, door access and intercom on one monthly fee. We do not just sell the kit — we plan it, install it and run it, so you can get on with the business.

Unlike break-fix support: we pull device activity logs through the official UniFi API, send them encrypted to our own cloud platform and analyse them with a SIEM plus an AI platform we build ourselves — naming the devices that are about to fail, suggesting what to change, and swapping them before they actually die.

  • One monthly fee covers the whole UniFi stack: APs, switches, gateways, Protect CCTV, Access and Talk
  • Essential from HK$800/month, Complete from HK$2,000/month, priced per device endpoint
  • Remote monitoring, firmware and security updates and a monthly report; Complete adds a one-hour response SLA and a 24-hour hardware swap
  • Minimum 12-month term at a fixed monthly fee, and you own the hardware
UniFi Site Manager listing many sites and their device status in one console

Monthly fee calculator

Work out your GNS CARE monthly fee

Enter your device counts and pick a tier to see the monthly fee.

Step 1: Count your devices

Nothing of a type? Leave it at 0.

Step 2: Choose a tier

Step 3: Add security hardening (optional)

What we manage

Network, CCTV, access and security under one plan

One monthly fee, one team. You own the hardware; we keep it running.

CCTV (UniFi Protect)

Cameras, recorders, drive health and retention — you hear about it the moment recording stops.

Network security (firewall, VPN)

Firewall rules, site-to-site VPN and outbound monitoring; the hardening add-on feeds device data into our SIEM and adds a monthly security audit report.

What makes us different

Our own AI platform: from monitoring to replacing before failure

The traditional model replaces hardware once it breaks. Our own AI platform reads device telemetry, names the units about to fail, and swaps them first.

  1. Official API, no agent to install

    We read device activity logs through the official UniFi API — nothing to install on your network and no inbound ports to open.

  2. Encrypted to our own cloud platform

    Logs are encrypted in transit to our own cloud platform, where only authorised engineers can read them.

  3. SIEM analysis, 24/7

    A SIEM correlates events and trends around the clock instead of firing single alerts, so odd behaviour surfaces immediately.

  4. Our own AI platform does the analysis

    An AI platform we build and operate combines the SIEM correlations with each device’s long-term baseline. Anomalies surface on their own, so nobody has to inspect devices one by one.

  5. It names the failing unit, and suggests the fix

    The platform points at the devices about to fail and proposes what to change — repositioning an AP, separating high-traffic devices, or replacing a drive that is wearing out.

  6. Predictive swap, before failure

    When a drive, power supply or link trends the wrong way we arrange the repair or the swap before the hardware dies — far less downtime than waiting for a dead unit.

What we cover

Six areas we always work through

Each one stands alone. We assess first, then rank the work by risk.

Network segmentation (VLANs)

Staff, guests, IoT and POS each get their own segment, so a breach in one cannot move sideways.

Firewall and threat management

Segment rules, geo-blocking and IPS/IDS signatures on the UniFi gateway, with alerts reviewed on a schedule. On another brand of firewall we apply the equivalent rules its feature set supports.

Site-to-site VPN

Office, warehouse and shops join one private network, so cross-site systems never face the public internet.

Guest Wi-Fi and portals

Guests get their own network, with session limits, bandwidth caps and a terms-of-use page.

Remote access and identity

VPN and per-person accounts replace shared passwords, and access is revoked the day someone leaves.

Monitoring, logs and alerts

Traffic, logins and device state recorded in one place and analysed continuously in our SIEM, with email or push alerts the moment something changes.

Risk and response

Common holes, and what we do about them

These are the issues that come up most often in small and mid-sized offices.

  1. Everything on one network

    Guest phones sharing a segment with the till means a compromised guest device can reach internal systems. We split by purpose and restrict traffic between segments with firewall rules.

  2. A firewall nobody has touched

    Wide-open ports, vendor admin pages still reachable from the internet, logins for people who left. We review each one and narrow what is exposed.

  3. Remote access by shared password

    A shared TeamViewer or VPN login lets staff work from home, but cannot be taken back cleanly. Per-person accounts with an audit trail can be revoked one at a time.

  4. Devices exposed to the internet

    Opening ports so a technician can work remotely leaves devices permanently exposed. We move access behind VPN or a central controller instead.

  5. No records, no answers

    Without logs you cannot tell who signed in, or when. Once logging and alerts are on, you can at least answer "when did it start" and "where did it come from"; the hardening add-on adds a monthly security audit report for audit and compliance queries.

Included and not included

Essential versus Complete: what each one covers

Both tiers cover the managed core; Complete adds a one-hour response commitment, a 24-hour hardware swap and on-site cover. The hardening add-on applies to either tier.

Essential versus Complete: what each one covers
GNS CARE Essential HK$800 /month from Remote GNS CARE Complete HK$2,000 /month from SLA and swaps
Monitoring, updates and reporting
24/7 remote monitoring and alerts GNS CARE Essential Included GNS CARE Complete Included
Firmware and security updates GNS CARE Essential Included GNS CARE Complete Included
Configuration backups GNS CARE Essential Included GNS CARE Complete Included
Monthly report GNS CARE Essential Included GNS CARE Complete Included
Network, CCTV, access and intercom all in scope GNS CARE Essential Included GNS CARE Complete Included
Support and response
Unlimited remote support GNS CARE Essential Included GNS CARE Complete Included
SLA response guarantee (within one hour) GNS CARE Essential Not included GNS CARE Complete Included
Emergency call-outs GNS CARE Essential Not included GNS CARE Complete Unlimited
Loan hardware and swap (within 24 hours) GNS CARE Essential Not included GNS CARE Complete Included
Quarterly review GNS CARE Essential Not included GNS CARE Complete Included
CCTV and storage
Drive health and retention checks GNS CARE Essential Included GNS CARE Complete Included
CCTV health monitoring GNS CARE Essential Not included GNS CARE Complete Included
Security hardening (add-on)
VLAN separation review GNS CARE Essential Add-on GNS CARE Complete Add-on
Firewall rule audit GNS CARE Essential Add-on GNS CARE Complete Add-on
Outbound connection monitoring GNS CARE Essential Add-on GNS CARE Complete Add-on
Monthly security audit (compliance) report GNS CARE Essential Add-on GNS CARE Complete Add-on

Scope and contract

The monthly fee is priced per device endpoint (gateway, switch, AP, camera, recorder, access and Talk), with a minimum of HK$800/month on Essential and HK$2,000/month on Complete. You buy and own the hardware; warranties follow the manufacturer terms. Managed services run on a minimum 12-month term at a fixed monthly fee — no per-visit charges. Adding or removing devices is pro-rated on the next invoice, and the exact scope and SLA details (Complete: one-hour response, failed hardware swapped within 24 hours) are confirmed in writing on the quote.

From signing to live

Five steps to get managed

From choosing a tier to your first device health and security report, usually within two to four weeks.

  1. Choose your tier

    You pick Essential or Complete, adding security hardening if you want it. The monthly fee is priced per device endpoint with a minimum, and it is fixed once the contract is signed.

  2. Add GNS to your UniFi management team

    You invite the GNS account from UniFi Site Manager and confirm it — about ten minutes, with no software to install and no inbound ports to open. The six steps are shown with screenshots in the next section.

  3. Confirm the scope, then the first device health and security report

    We check the device inventory against the agreed scope, record a health baseline for every endpoint, recorder and drive, and send a first report: existing risks, configuration issues, hardware that needs replacing and the order to handle them in.

  4. A walkthrough with you

    We go through the report together, agree what to fix straight away and what moves into the managed service, and tune the alert thresholds and notification routes to how you actually work.

  5. Steady-state monthly report

    A report every month, plus tier-level follow-up on device health, incident handling, security updates and any replacement or re-tuning that needs a visit.

Access and onboarding

Add GNS to your UniFi management team

From request to approval the whole process takes about 10 minutes. You remain the owner of the devices and can revoke access at any time.

  1. Enable remote access

    Sign in to UniFi Site Manager with your Ubiquiti account and turn on remote access. This is also the screen where you revoke access later.

    The UniFi sign-in screen used to enable remote access
  2. Create a fabric

    In the fabric list on the left, choose "Create New" to make a fabric for this engagement.

    The fabric list in UniFi Site Manager, with Create New outlined
  3. Name the fabric and pick the sites

    Enter a fabric name (for example GNS-1), tick the sites you want us to manage, then press "Create Fabric".

    The Set Fabric Name and Select Sites screen
  4. We send the access request

    We request management access as your managed service provider. Ubiquiti emails you an official notice listing what we will be able to do: monitor and manage your sites, configure network settings, and assist with operations and support.

    The official Ubiquiti email notifying you of the GNS access request
  5. Review the request in Site Manager

    The same notice appears in UniFi Site Manager. Choose "Review" to see the request and who sent it.

    The access request notice in UniFi Site Manager, with the Review button
  6. Approve access

    Confirm with "Approve Access" and we are in. You stay the owner of the devices and can revoke access from the same screen at any time.

    The confirmation dialog, with Approve Access outlined

After approval: the official API and our own AI platform

Once approved, we do not rely on manual walk-rounds. GNS CARE reads your system through the official Ubiquiti API — device state, link quality, drive health and event history — and sends it, encrypted, to our cloud platform, where our own AI platform and SIEM analyse it continuously.

  • Live alerts: a device going offline, a power fault or a failing drive reaches us straight away, and we act on it.
  • AI judgement: our AI platform compares each reading against its historical baseline, points at the device that is degrading, and suggests the fix.
  • Replaced before it fails: we schedule the swap before the hardware dies, so you get fewer surprise outages.
  • You keep control: you own the devices and can revoke access at any time; we only read what operations need.

The technical whitepaper sets out the full architecture; frequently asked questions cover the rest, and project experience shows what we have delivered.

A laptop showing the UniFi Network application's traffic view, listing top destinations, clients and regions

Management interface

The same interface you see

GNS CARE reads the official UniFi API, so the device state, link quality and event history we see is the same as what you see in the UniFi Network interface -- there is no second, unauthorised monitoring stack.

The image shows the UniFi Network application's traffic view (Traffic / Flows), listing top destinations, clients and regions; we run the same data through our own AI platform for baseline comparison.

Official video

Introducing: UniFi Network 10.6

Official video for UniFi Network 10.6 (published 2026-09-01). Our managed service reads this platform's official API, then hands the data to our own AI platform for analysis.

GNS footage

The Benefits of GNS Care Managed Services

A GNS video explaining how GNS Care managed services help you with 24/7 network monitoring, regular updates, remote support and a monthly health report — so you can focus on your business.

FAQ

GNS CARE managed service: common questions

These come up most often. Anything else, just get in touch.

How is the monthly fee worked out?

It is priced per device endpoint: gateways, switches, APs, cameras, recorders, access and Talk each carry a monthly rate, with a minimum of HK$800/month on Essential and HK$2,000/month on Complete. The calculator above gives you an instant estimate; the final figure is confirmed in writing after the free site survey.

How do you actually watch our equipment?

We pull device activity logs through the official UniFi API, encrypt them to our own cloud platform, correlate events in a SIEM and then analyse each device against its long-term baseline on an AI platform we build ourselves. There is no agent to install on your network and we hold management access only. The platform names the devices about to fail and suggests the fix, and we contact you to arrange the swap before the hardware dies.

How does GNS Care differ from a manufacturer warranty?

A manufacturer warranty only reacts after hardware fails: you spot the fault, raise the case, wait for parts or an RMA, and carry the downtime — and it covers the hardware alone, not configuration, updates, backups or day-to-day support. GNS Care is a monthly managed service: we read device telemetry through the official UniFi API and watch it in a SIEM, so when a drive, a power supply or a link starts trending badly we arrange the repair or swap up front. It also covers firmware updates, configuration backups, alert handling and a monthly report; Complete adds a one-hour response SLA and a 24-hour replacement. You still own the hardware and the manufacturer warranty stays valid — the two are complementary.

Can we manage only part of the system?

Yes. Scope is counted per endpoint, so Protect CCTV on its own, or just the Wi-Fi, is fine — the fee follows the actual count.

Do we rent or buy the hardware?

You buy it and you own it; warranties follow the manufacturer terms. If your existing UniFi kit is still suitable we just take over management — no need to replace it.

What is the difference between Essential and Complete?

Essential is remote management: 24/7 monitoring and alerts, firmware and security updates, configuration backups, unlimited remote support and a monthly report. Complete adds the one-hour response SLA, a 24-hour hardware swap, unlimited emergency call-outs, a quarterly review and CCTV health monitoring.

What is the security hardening add-on?

A flat HK$500 a month for a VLAN separation review, a firewall rule audit and outbound connection monitoring, with follow-up on anything we find and a note in the monthly report. UniFi devices that expose the official API also feed their operating data into our SIEM for continuous analysis, and any security issue raises a proactive alert. Each month you also get a security audit report covering device state, firewall rules and the alerts we handled, for your digital-compliance and audit needs.

Can you see our footage?

For monitoring we hold device management access only, to read health status and alerts. Unless you ask us to deal with a specific incident we do not review recordings; reports show uptime, drive health and event logs.

What if we are not on UniFi?

We can manage other brands too. The difference is the AI prediction: the official UniFi API exposes each device's health and activity data, so prediction is most complete there. With another brand it depends on whether the vendor exposes an equivalent API — with no API exposed, the AI platform analysis cannot run, and that part falls back to remote monitoring, alerting, firmware follow-up and on-site support. We start with an assessment that sets out what is actually possible on your brand, then decide whether to keep it, change part of it, or replace it.

What happens after 12 months?

The contract rolls on month to month after the initial term, and you can end it with one month notice. Adding or removing devices is pro-rated on the next invoice — no need to re-sign.

We already have a firewall — why do we need you?

We look at this from two angles: cost and stability. On cost, most commercial firewalls charge an annual or monthly licence to keep receiving updates, while UniFi firmware and feature updates are free and continuous, which is already a price advantage. Add the GNS AI managed platform (device data read through the official API, acted on before failure) and a team that has delivered projects for government departments, public bodies, schools and rail operators since 2019, and the long run is more stable and better value than the usual hardware-licence-plus-outsourced-maintenance combination.

Will the work disrupt the office?

Segments and rules are tested outside office hours first, and only applied once the tills, printers and shared folders are confirmed working. The cut-over happens in a window you choose.

Do we have to replace all our equipment?

Not necessarily. If your existing equipment — UniFi or another brand — supports what you need, we keep it and bring it under management. We only suggest replacing hardware when you need more throughput or threat management. If you keep another brand, the assessment sets out what that brand can actually do — with no API exposed, the AI platform prediction cannot run.

What happens if we get ransomware?

We provide a post-incident review, containment advice and a remediation plan, and can coordinate with your IT provider. Live incident response is a separate arrangement, but we will help you size the impact first.

Can we start with just an assessment?

Yes. You get a risk list with prioritised actions. Work through it yourself, or hand the items back to us one at a time.

Why is this charged monthly instead of as a one-off project?

Security does not end at handover: firmware and signatures update weekly, staff and devices change, and new vulnerabilities keep appearing. On a monthly plan we harden the network at handover and then keep monitoring, updating and following up. MSSP, backup and disaster recovery, and IT support can be added item by item.

Do you supply the hardware or should we buy it?

Either way works. Most clients let us supply the access points, switches and gateways so warranty, licensing and configuration stay in one place, but we will configure equipment you already own if it fits the design.

Can cabling work be done without closing the office?

Yes. Ceiling and trunking work is usually done outside business hours, with the noisy stages scheduled for evenings or weekends. Network cutover is planned for a window you choose.

Do you charge for the site survey?

The survey is free within Hong Kong Island, Kowloon and the New Territories, and there is no obligation to proceed. You keep the findings either way.

What areas do you cover?

Our on-site service covers all of Hong Kong — Hong Kong Island, Kowloon and the New Territories. Outlying islands and remote locations are quoted individually because of travel time.

Want to try AI-driven managed care built in-house by GNS?

Contact us for a free check: we review how your current devices are actually running, then arrange a one-month free trial.

Chat on WhatsAppEmail us