Guardian Glass

External Footprint Mapping

Glass continuously discovers and inventories every internet-facing asset connected to your organization: websites, servers, domains, email addresses, phone numbers, IP ranges, cloud infrastructure, and third-party connections. It surfaces what inward-facing tools aren't looking for. Unmanaged domains, forgotten cloud instances, shadow IT, exposed repositories.

The scan extends to your supply chain. Every vendor, partner, and customer connection that touches your network is mapped for exposure.

Glass also identifies infrastructure built to impersonate you: fake domains, lookalike URLs, spoofed social accounts, and phishing sites targeting your customers and employees.

Vulnerability Scanning

Glass goes beyond flagging theoretical vulnerabilities. Externally, it assesses your exposures from an attacker’s vantage point to identify which are likely exploitable, how they could be chained together, and the attack paths that connect them to your business. That’s attack path management, built into the service. Internally, where Guardian Cyber agents are installed on Windows, macOS, and Linux devices, Glass validates findings with near-complete confidence.

Where the Guardian Cyber Secure Gateway is deployed, it enables continuous scanning of your network and cloud properties for unpatched software, misconfigurations, insecure services, and policy violations.

Internal scanning runs continuously, so internal vulnerability data is never more than 24 hours old. External scans run weekly by default and can be scheduled daily or monthly to match your risk profile.

Dark Web and Leaked Data Monitoring

Glass monitors dark web markets, underground forums, IRC channels, Telegram, ransomware leak sites, and breach repositories for compromised credentials, stolen data, stealer logs, and active discussion about your organization, your executives, and your infrastructure.

A dedicated identity and exposure intelligence feed continuously surfaces email, account, and identity exposure findings alongside the dark web monitoring, so compromised credentials are caught from multiple directions.

When threat actors or campaigns targeting your industry are identified, Glass provides early warning with context.

Brand Protection

Glass monitors for phishing domains, lookalike URLs, domain squatting, fraudulent social media accounts, and stolen brand assets being sold on black markets and hacker forums. When malicious infrastructure is identified, Glass facilitates takedowns of fraudulent sites, phishing pages, and impersonating accounts.

Your team receives findings as tickets: the event, the severity, the recommendation, and the execution status. For items Guardian Cyber remediates directly, you receive a courtesy notification after containment. For items requiring your action, the ticket includes what needs to happen and why.

Glass can also deliver findings directly into your existing SIEM or ticketing system, with native integrations for CrowdStrike, Microsoft Sentinel and Splunk; plus alerting through Microsoft Teams, Slack, email and webhooks.

Glass is fully managed by default. For organizations whose internal teams or IT partners want a hands-on role, a co-managed option with dashboard access to the underlying platform is available.

Reporting

Real-time notification for critical findings. Weekly status digest covering all open tickets. Monthly and quarterly trend reporting covering findings by category, remediation timelines, recurrence rates, and attack-surface changes. Executive exposure summaries available on request.