Security infrastructure for institutions that cannot go offline
Guardian protects your websites, servers and data, and gives your team one console to see what was stopped and what needs attention. It is operated by Merdot Private Limited and available by request.
Website protection
Point a domain at Guardian and attacks, bots and floods are stopped before they reach your site. Exposure scans show what an attacker can see today.
- Volumetric floods are absorbed before they can reach your site, with no configuration on your side.
- Guardian tells real visitors apart from automated tooling, so scrapers, credential stuffing and bot floods are stopped before they reach your site.
- Requests carrying common web attacks such as injection and cross-site scripting are refused before they reach your application, and each refusal is recorded.
- Every protected site gets its certificate automatically and is protected by Guardian Protocol, including quantum-resistant encryption with capable browsers.
- Blocked traffic appears on a live world map with per-site counters and a running record of what was stopped and why.
Server protection
A small read-only agent on your servers alerts you to suspicious sign-ins, unexpected changes and risky activity, so your team can act early. Responses are queued for your administrator to approve and carry out.
Data protection
Find personal data and secrets that have ended up where they should not be, such as Aadhaar, PAN and card numbers. Guardian never receives the values themselves. A Data Protection Report supports your DPDP obligations.
Built for organisations that cannot afford a breach
- Government: citizen portals, departmental sites, tender and records systems.
- Hospitals: patient portals, appointment systems and records interfaces that must not leak.
- Universities and schools: admissions, examination and research portals under constant automated probing.
- Businesses: corporate web properties, APIs and customer applications.
How onboarding works
- Request access: tell us about your organisation and what needs protecting. Your email and mobile are verified.
- Verification: our team confirms the organisation and the people who will hold access.
- Connect: route a website through Guardian, install the read-only agent on a Linux server, or both.
- Monitor: watch protection and findings in the console, with alerts for anything that needs a person.