Protection for your whole organisation: websites, servers, computers, email, people
Most organisations are not attacked through one door. A website is probed, a staff laptop is behind on updates, an old server still has a password login, and a lookalike email goes out in your name. Guardian is growing from website protection into one place that measures all of it, tells your administrator exactly what to fix, and proves each month what changed. Nothing Guardian ships can take your systems down, because nothing it ships makes changes on your machines.
What is covered
This table is honest about where Guardian stands today. Available now means it is running for customers. On request means it is being built and we will tell you where it is when you ask. We do not promise dates.
| Area | What Guardian does | Status |
|---|---|---|
| Websites and web apps | Attacks, bots and floods refused at the edge. Passive scanning, continuous monitoring, step-by-step fixes, a trust badge, breach watch, a monthly report and the free security check. | Available now |
| Encryption | Every protected site is served under the Guardian Protocol, which includes post-quantum hybrid encryption with browsers that support it. The console measures it instead of assuming it. | Available now |
| Linux servers | A read-only agent you enrol in one command. Signed events, findings in plain language: sign-ins, accounts, changed system files, new ports, programs in temporary folders, disk encryption. | Available now |
| Linux servers, deeper checks | Remote login hardening, password-guessing watch, file integrity across more paths, exposed ports, containers, certificate expiry and resource pressure. | On request |
| Windows computers | A read-only agent that reads update status, built-in antivirus status, firewall, disk encryption, administrator accounts, remote access tools, start-up programs, installed software matched against known weaknesses, policy checks and backup status. | On request |
| Domain protection | For any domain you own: registrar lock and expiry, DNSSEC, nameservers, certificate authority records, mail records, sender list and policy presence, newly issued certificates from public logs, lookalike domains that are live, and an alert when any of it changes. | Available now |
| Email domain | Sender list and policy presence are checked today as part of domain protection. Message signing grading and the exact records to add are being built. | Presence checks available now; exact records on request |
| Compliance mapping | Observed facts mapped to controls in NIST CSF 2.0, ISO 27001:2022 and OWASP ASVS, with the evidence for each. Mapped, not a certification. | Available now |
| Console sign-in and accounts | Two-factor sign-in for console users with an authenticator app or SMS. Account-takeover detection across Merdot products: impossible travel, address reputation and coordinated-attack patterns. | Available now |
| Incidents explained | Guardian Agent groups real signals into incidents and emails a plain-English explanation of what happened and what to do. | Available now |
| External attack surface | A map of everything of yours that is visible from the internet: hosts, services, certificates and forgotten subdomains. | On request |
| Organisation protection score | One score for the whole organisation with a prioritised fix list, so your administrator always knows what to do next. | On request |
| Internal network view | Opt-in. Your own server agent lists what is reachable inside your network. Nothing is sent that you did not switch on. | On request |
| Alerts, roles and records | Email alerts, team roles (viewer, operator, administrator) and a tamper-evident activity ledger of every change made in the console. | Available now |
| Monthly report | Per-site report today. Sections for servers, computers, email and the organisation score follow as each area becomes available. | Available now for websites; other sections on request |
How it works in four steps
- Enrol. Your administrator points a domain at Guardian and runs one command on each server. Computers and email domains are added the same way, when those areas are available for you.
- Measure. Guardian reads what is there and compares it with a plain baseline: are updates current, is the disk encrypted, who is an administrator, which ports are open, is the site serving under the Guardian Protocol. It measures, it does not assume.
- Fix list. Findings become a prioritised list written for people, not for tools. Each item says what was found, why it matters and what to change. Your own administrator makes the change.
- Monthly proof. A report shows what was found, what was fixed and what is still open, in a form you can hand to management, a board or an auditor.
Read-only by design
Guardian never runs software that blocks, deletes, quarantines or changes settings on your machines. Every agent reads and reports. Every change is made by your own administrator from the fix list, and the console records that it was done.
This is a deliberate choice, and it is a selling point. A security tool that can change your systems is itself a way in, and a bad update to such a tool can take an organisation offline. Nothing we ship can do that. You keep every control, and you keep the record of who changed what.
Post-quantum by default
Every protected site is served under the Guardian Protocol, which includes hybrid post-quantum key exchange with browsers that support it. Traffic recorded today stays protected against decryption by future machines. The console measures whether each connection actually used it, instead of assuming that it did.
Pricing is on request
Guardian is available by request. Pricing depends on how many websites, servers and computers you need covered and on how your organisation is set up. Tell us what you have and our team replies by email.
Start with what exists today
Website protection, the Guardian Protocol, domain protection, compliance mapping and the Linux server agent are running now. Run the free security check on your website, then request protection. As the other areas become available, they appear in the same console with the same roles and activity log.
Questions
Does Guardian install anything that can block or delete on our machines?
No. Every Guardian agent is read-only. It reads and reports. Changes are made by your own administrator from the fix list.
Which parts are available today?
Website and web app protection, the Guardian Protocol, the read-only Linux server agent, domain protection, compliance mapping, two-factor sign-in, account-takeover detection, incidents explained by Guardian Agent, email alerts, team roles, the tamper-evident activity ledger and the monthly website report. The rest is on request.
When will the Windows agent and email domain protection be ready?
They are being built. We do not promise dates. Request protection and tell us what you need, and we will tell you where each area stands.
Can we start with only the website?
Yes. Most organisations do. The other areas are added to the same console when you want them.
Does Guardian see our files or our users' data?
No. Agents send security events, file paths and counts, never file contents. Guardian keeps no copy of your pages or your users' data.