01
Exact technical coverage
Service profiles show the controlled areas assessed, attacker or reviewer perspective, access required, evidence produced, applicability and limitations.
Damocles Security
Offensive security, managed protection and security operations—delivered by one team.
Damocles tests the attack surface, reviews applications and cloud environments, operates selected security controls, investigates material activity and helps customers complete difficult remediation. Governed technical services publish what is assessed, the evidence produced, relevant framework or control mappings and the boundary of the assurance. Guardian connects the findings, owners, actions and closure evidence behind that work.
Published technical coverageGoverned framework and control mappingsEvidence-backed remediation and verificationExplicit managed-service responsibilities
Proof before purchase
See what Damocles will assess, what evidence it will produce and where the assurance boundary stops.
A technical service should be more specific than a service name and a list of benefits. For governed assurance services, Damocles publishes the testing perspectives, controlled coverage areas, required access, evidence outputs, relevant methodology references and material limitations that define the engagement.
Where technical evidence is mapped to a security framework or control objective, the mapping is identified as directly assessed, supporting evidence or contextual. That gives security, risk and audit teams usable traceability without presenting a point-in-time technical engagement as certification or complete compliance.
02
Traceable control evidence
Relevant approved methodologies, standards and control objectives are referenced according to how the engagement actually uses them.
03
Evidence before closure
Retesting, rescans, configuration review, source health, investigation outcomes or other agreed evidence are used to verify the result where included.
What Damocles delivers
Specialist security capability across assessment, operation and remediation.
Engage one focused service or combine Damocles services and Guardian products into a recurring security operating model.
PT
Penetration Testing
Validate external, internal, wireless, website and API attack paths using authorised testing, evidence, remediation priority and retesting.
Explore Penetration Testing →CR
Secure Code Review
Review authentication, authorisation, business logic, data handling, secrets and security design with developer-ready findings.
Explore Secure Code Review →CL
Cloud Security Review
Assess cloud identity, privilege, network exposure, data, workloads, logging and resilience against the intended architecture.
Explore Cloud Security Review →AE
Aegis Security Operations
Onboard sources, monitor health, triage alerts, investigate material activity, escalate required action and report through Guardian.
Explore Aegis →MP
Endpoint, Patching, DNS and WAF
Operate endpoint security, supported patching, DNS policy and managed application protection for the agreed customer estate.
Browse managed products →NE
Network and Firewall Security
Improve segmentation, firewall policy, remote access, routing, resilience, migrations, hardening and implementation safety.
Explore Network Security →One operating discipline
Find exposure, reduce it and prove what changed.
The tools and specialists differ by problem. The customer should still receive a consistent path from evidence to reviewed outcome.
01
Discover
Use testing, review, monitoring and security sources to identify material exposure.
02
Validate
Confirm the finding, affected scope, evidence and practical consequence.
03
Prioritise
Focus on the changes that reduce the most meaningful attack paths and operational risk.
04
Remediate
Patch, reconfigure, harden, train, investigate or engineer the required change.
05
Verify
Review retest, rescan, source state, evidence or operational outcomes.
06
Report
Show what was reduced, what remains open and where another decision is required.
Where Guardian fits
Guardian is the operating platform behind Damocles delivery—not the whole company.
Damocles performs the testing, engineering, protection and managed security activity. Guardian gives businesses, internal teams and service providers one place to understand what was found, decide what matters, assign the work and retain evidence of the outcome.
A penetration-test finding, failed patch, dark web exposure, SOC investigation, overdue training assignment and firewall change can all move through a consistent risk, action and review lifecycle without pretending they are the same product.
01
One customer workspace
See posture, risks, findings, actions, product health, investigations and reports in one governed view.
02
One remediation queue
Assign the work to the right owner with due dates, source context and expected outcome.
03
One evidence trail
Retain the retest, rescan, patch, configuration or investigation evidence used to review closure.
Built for different customer relationships
Direct delivery, internal-team support and an MSP-ready wholesale model.
BU
Businesses and NDIS providers
Use Guardian Core and selected Damocles services and products for staff, participants, websites, endpoints, risk, actions and evidence.
Explore NDIS and business use →IT
Internal security and IT teams
Use Damocles for specialist testing, architecture, managed controls, operational escalation and difficult remediation.
MS
MSPs and MSSPs
Use provider-scoped customer workspaces, explicit product entitlements, consolidated Guardian wholesale billing and clear support boundaries.
Explore the partner model →Find the right security path
Start with the problem, not the product catalogue.
Choose what you are trying to protect or improve and we will map the relevant Guardian capability, Damocles service and technical evidence.
01
Describe the problem
Choose a plain-English security goal and the environment where it matters.
02
See a focused path
Receive no more than three controlled recommendations with a clear reason.
03
Move with evidence
Reach Guardian, governed services, technical briefs and a prequalified next action.
Start with the actual security problem
Tell us what is exposed, overdue, noisy or difficult to operate.
We will identify whether the right next step is assessment, engineering, managed protection, security operations, incident readiness or a Guardian package—and explain the scope before work begins.