Predict

Guardian ProbeX

Managed Autonomous Penetration Testing

ProbeX is a fully managed autonomous penetration testing service. The platform finds, chains, and exploits weaknesses across your environment the same way a real adversary would. Guardian's AttackSOC analysts interpret the results, prioritize by business risk, and deliver clear remediation guidance.

The underlying attack engine is trusted by CISA and the Department of Defense. It does not simulate attacks. It executes them. Safely, continuously, and at a scale no human testing team can match.

01 · Guardian ProbeX

How ProbeX Tests

ProbeX does not require pre-shared credentials, preset attack paths, or a predefined scope to operate. It starts the way an adversary would: with discovery. From there it chains weaknesses together, following credentials, misconfigurations, trust relationships, and unpatched software wherever they lead, across your internal network, your cloud environment, or both.

The platform runs internal penetration tests, external penetration tests, or both simultaneously. It also runs targeted test types:

AD Credential and Password Audits - Active Directory credential scanning. Identification of reused, weak, default, and compromised passwords. Credential chaining across systems to reveal how a single weak password becomes full domain compromise.

Rapid Response and N-Day Testing - When a new vulnerability is publicly disclosed, ProbeX can immediately test whether your environment is exposed. Targeted tests for specific CVEs, run against your discovered assets, with results in hours.

Single-Click Verification - After your team remediates a finding, ProbeX reruns the specific test to confirm the fix held. No rescheduling. No rescoping. One click, documented proof.

Asset Discovery - ProbeX discovers IPs, ports, services, and applications across your internal network. Externally, passive reconnaissance (DNS enumeration, certificate scraping, OSINT) maps your full internet-facing footprint without touching your infrastructure.

02 · Guardian ProbeX

What ProbeX Finds

ProbeX chains individual findings into complete attack paths. A vulnerability scanner flags weaknesses one at a time. ProbeX connects them the way an attacker would: a weak password on one system becomes lateral movement to a second, which becomes domain admin on a third.

Three patterns appear in the majority of mid-market environments ProbeX tests, including organizations with active IT teams, current security tools, and clean compliance records:

Credential Chains - ProbeX intercepts a credential on one system, finds shared admin passwords across dozens of others, and chains them to full domain compromise. Vulnerability scanners don't test passwords. Traditional pentests check a handful.

Hybrid Pivots - An over-privileged cloud account escalates access and crosses into the on-premises environment through trust relationships. No CVEs, no missing patches, just misconfigured permissions.

Low-Risk Kill Chains - Three findings rated low, medium, and informational that individually never make the priority list. ProbeX chains all three into a single path to sensitive data.

03 · Guardian ProbeX

Deployment

ProbeX requires a lightweight agent called a Runner, deployed on a Docker host inside your network. Four deployment options: your existing Docker environment, a pre-built virtual appliance (VMware ESXi, Hyper-V, or VirtualBox), a cloud-hosted VM (AWS, Azure, GCP), or a dedicated physical server. Minimum specs: two cores, 8 GB memory, 40 GB storage.

The Runner stays in your environment and under your control. After each test completes, all raw data is transmitted to the secure analytics engine and purged from the Runner.

For external testing, no internal deployment is required.

04 · Guardian ProbeX

Production-Safe Testing

ProbeX separates daytime production-safe testing from after-hours full-depth testing. You control when production-impacting tests run. Emergency stop procedures are established during onboarding.

05 · Guardian ProbeX

How It’s Managed

Every ProbeX deployment is backed by Guardian's AttackSOC. The platform delivers the attack intelligence. Guardian delivers the judgment.

Pre-Engagement Scoping - Before the first test runs, your AttackSOC analyst maps your infrastructure boundaries, sets operational parameters, establishes production-safe testing windows, and documents your baseline security posture.

Results Interpretation - Not every attack path carries equal business risk. Your Guardian analyst reviews everything ProbeX surfaces, separates critical exploitable exposures from lower-priority items, and delivers prioritized remediation guidance so your team fixes what matters most.

Adversary-Mindset Review - Guardian analysts review attack paths looking for chained weakness patterns, credential exposure risks, and hybrid cloud pivot opportunities specific to your environment.

Framework and Compliance Alignment - ProbeX findings and reporting are structured to support your compliance and audit requirements.

Ongoing Advisory - Guardian meets with your team regularly to review test trends, advise on remediation progress, and ensure posture improves with every testing cycle.

06 · Guardian ProbeX

Reporting

Reports are generated after every test, typically the same day.

Executive Summary for leadership and board reporting. Full Pentest Report for your security and IT teams. Segmentation Report analyzing network isolation. Fix Actions Report with step-by-step remediation for every finding.

All results are accessible through a real-time dashboard, 24/7/365. Test-over-test comparison tracks remediation progress and posture trending over time.

07 · Guardian ProbeX

How ProbeX Fits

ProbeX runs alongside your current security tools and team. Findings inform priorities for your IT team, MSP, or existing security operations. Guardian works with your team on remediation, not around them.