Guard
Threat protection and security operations. Configure traffic and endpoint protection, assess vulnerabilities, manage private access, and investigate security incidents.
Start protecting
Assess and respond
- Threat intelligenceReview indicators, feed freshness, and campaign context.
- Vulnerability scanningAuthorize targets and verify assessment coverage.
- Private accessAuthorize applications using identity and device posture.
- Incident responseCoordinate investigations, evidence, and recovery.
- Automation APIResource contracts, response approvals, and asynchronous work.
- PricingSubscription, support, and agreement coverage.
Guard manages threat intelligence, traffic protection, vulnerability assessment, endpoint controls, private access, and incident response. Use these guides to configure protection and verify its observed state.
Start with a task
- Get started with an organization and a pilot asset.
- Protect a public service through the admitted edge.
- Enroll endpoints and review supported device controls.
- Schedule scans and verify remediation.
- Publish private applications with identity and posture requirements.
- Respond to an incident using reviewed actions and evidence.
Understand coverage
Assets and identities define what belongs to the organization. Policies define requested behavior. Agents, scanners, gateways, and edge services report actual adoption and observations. A saved configuration or accepted request does not establish protection.
For an active event, use response runbooks, SOC coverage, and troubleshooting. For recurring work, use common tasks and reports.
Deploy and automate
Choose hosted operation or self-host Guard on Linux. Self-hosted DDoS mitigation requires a Connector; other local capabilities do not. Review deployment settings, recovery, and pricing before production rollout.
The automation API documents organization authorization, revisions, asynchronous execution, and individual resource operations. The glossary defines product terms. Console paths use Section → Resource → Action, and examples use stable IDs such as ast_web01 and end_laptop01.
Legal and policies
Review the Guard legal and policy section for terms, acceptable use, privacy, data processing, billing, security, and service commitments.