Security intelligence, not speculation.
CyberGuard maps what a domain exposes to the internet, tests the posture of what it finds, and turns the result into a report a team can act on.
What it is
CyberGuard is a security intelligence platform. You give it a domain. It finds the hosts behind that domain, works out what is running on each one, reads the policy those hosts publish, and reports what is worth fixing.
Everything runs server side and reports as it goes. There is no agent to install and nothing to configure on the target. A scan takes minutes, and it ends in a document rather than a dashboard nobody opens twice.
Vision
Most organisations cannot list what they expose to the internet. The gap is rarely a missing product. It is that the answer takes a specialist a week to assemble and is out of date by the time it is written down.
CyberGuard exists to close that gap: a fast, repeatable, honest reading of an attack surface, written so that somebody who is not a security specialist can act on it. Clarity over volume. Evidence over inference. Nothing in a report that the scanner did not actually observe.
Capabilities
Reconnaissance and OSINT
Certificate transparency logs, DNS, mail and routing records, passive host observations, archived URL indexes and public registries, read together. Most of this costs the target nothing: the observation already happened, in somebody else's dataset, and CyberGuard is reading it back.
- Subdomain discovery from certificate transparency
- DNS, MX, SPF, DKIM, DMARC, DNSSEC, CAA, DANE, MTA-STS and TLS-RPT analysis
- Passive port and service observations, with routing attribution
- Historical URLs the application no longer links to
- Certificate issuance history for the domain
Authorized scanning
Where reconnaissance stops, testing begins. Content discovery, transport and certificate inspection, security policy analysis, source recovery, the authentication surface, open ports and their known vulnerabilities, and a rate limited template run. Every one of these is an active scan, so every one of them requires proof that you control the target first.
- Content discovery fitted to the stack that recon fingerprinted
- API contract reading, with declared access control checked against reality
- Transport inspection: protocol versions, certificate chain, key strength, expiry
- Policy analysis: content security policy by directive, transport security by value
- Open ports, service versions and matched CVE identifiers with CVSS scores
Analysis and reporting
A scan produces evidence. The value is in what the evidence means. Findings are deduplicated across scans so that the same issue found again next month is the same row rather than a new one, ranked by severity, and written with the reason it matters and the thing to change.
- One report per scan, readable and printable
- Executive summary, methodology and full finding detail
- Findings kept on your account and tracked over time
- A rendering of the target as the internet sees it
Who it is for
Security teams
Establish and re-establish what the organisation exposes, without assembling it by hand each quarter.
Developers and operators
Check a deployment before it ships, and confirm that the policy you configured is the policy the server sends.
Consultants and auditors
A repeatable first pass over a client estate, with a report that can be handed over as it stands.
Anyone responsible for a domain
A plain reading of what is reachable, what is misconfigured and what to do about it.
What it does not do
CyberGuard is a security intelligence and analytics platform. It is not an exchange, a custodian, a financial adviser or a product issuer, and it does not operate in digital asset markets. It produces technical assessments and nothing else.
Specifically, it does not:
- Exploit what it finds. Findings are observations and inferences, labelled as which.
- Submit credentials, attempt logins or test authentication with real accounts.
- Send anything destructive, or anything intended to degrade a service.
- Scan a target without proof that the account controls it.
- Provide financial, investment, legal or tax advice.
Findings derived from version banners are inferences, not proof. Software is routinely patched without the version string changing. Every such finding says so where it appears, and it should be confirmed rather than acted on directly.
Disclaimer
CyberGuard provides technical and informational assessments only. It does not provide financial, investment, legal or tax advice. Output is produced by automated analysis and may contain errors, omissions and false positives, and is not a substitute for a manual security assessment by a qualified professional.
You are responsible for ensuring you are authorized to test any target you submit, and for anything you do with the results. Use of the platform against systems you do not own or have written permission to test is prohibited and may be unlawful.
Point it at your domain.
The first scan takes under a minute and needs nothing but a domain name.
Run a scan