Guardian Core includes the platform foundation, University and Human Risk, Dark Web Monitoring, Risk and All Actions, and standard evidence and reporting. Add assurance, managed defence and specialist modules when required.
Core includes baseline website vulnerability monitoring for the approved website allowance. Assurance adds broader vulnerability and remediation. Managed Defence adds Security Operations and Aegis. Katana remains an optional add-on for deeper active website and API security testing.
| Capability | Guardian Core | Guardian Assurance | Guardian Managed Defence |
|---|---|---|---|
| Guardian customer workspace | Included | Included | Included |
| Guardian Security Dashboard | Included | Included | Included |
| Risk Register and All Actions | Included | Included | Included |
| Guardian University and Human Risk | Included | Included | Included |
| Guardian Dark Web Monitoring | Included | Included | Included |
| Website Vulnerability Monitoring | Included | Included | Included |
| Standard evidence and reporting | Included | Included | Included |
| Vulnerability and Remediation | Upgrade to Assurance | Included | Included |
| Security Operations and Aegis | Add-on | Add-on | Included |
| Endpoint Protection and Managed Patching | Add-on | Add-on | Add-on |
| DNS Protection | Add-on | Add-on | Add-on |
| Katana Website and API Security Testing | Add-on | Add-on | Add-on |
Guardian Core includes the approved baseline website vulnerability monitoring allowance. Katana is an optional add-on for deeper active website and API security testing, authenticated or custom assessment profiles, additional cadence and included rescans.
Each module identifies what the Guardian platform provides, what Damocles manages operationally, and which quantities or boundaries are confirmed in the package schedule.
Normally licensed per protected endpoint. Managed operating-system and supported third-party application patching is included for the agreed covered device scope.
Protected users, devices, sites or an agreed estate, with managed policy, DNS-layer blocking, activity visibility and operational follow-up.
Approved websites and APIs, active assessment cadence, authenticated or custom assessment profiles, manual-scan cooldowns, included rescans and rolling rescan allowances.
Approved target scope, policies, assessment frequency and separately agreed assessment activity.
View capability →Approved sources, monitored entities, screening scope, analyst review and reporting requirements.
View capability →Bespoke report definitions, board packs, scheduled outputs, custom branding and approved data exports.
View capability →Penetration testing, secure code review, cloud security review, incident response, engineering, custom integrations and bespoke content are professional engagements. Guardian can manage their findings, risks, actions and evidence, but the engagement itself is not implied to be included in a subscription. Engineering work outside an agreed managed-module scope is separately approved.
A governed customer workspace for understanding security posture, managing risk and completing accountable action. Included: Guardian customer workspace; Guardian Security Dashboard; Risk Register and All Actions; Guardian University and Human Risk; Guardian Dark Web Monitoring; Guardian Website Vulnerability Monitoring; Standard evidence and reporting; Capability and integration status for licensed modules.
Guardian Core plus continuous vulnerability and remediation assurance. Included: Everything in Guardian Core; Vulnerability and Remediation; Prioritised remediation workflow; Resolution and evidence tracking; Assurance-focused reporting.
Guardian Assurance plus customer-safe security operations delivered through Guardian. Included: Everything in Guardian Assurance; Guardian Security Operations; Aegis managed threat detection and response; Alerts and investigations; Log-source health; Security Operations reporting.
Guardian University and Human Risk are included in Guardian Core. The applicable package schedule confirms included users, published content and any separately priced custom course or campaign work.
Guardian Dark Web Monitoring is included in Guardian Core. The applicable package schedule confirms the approved domains, email addresses and keywords included for the customer. Expanded monitored scope or specialist investigation may be separately priced.
Guardian Core also includes the Security Dashboard, Risk Register, All Actions and standard evidence and reporting.
Normally licensed per protected endpoint. Managed operating-system and supported third-party application patching is included for the agreed covered device scope.
View capability page →Protected users, devices, sites or an agreed estate, with managed policy, DNS-layer blocking, activity visibility and operational follow-up.
View capability page →Approved websites and APIs, active assessment cadence, authenticated or custom assessment profiles, manual-scan cooldowns, included rescans and rolling rescan allowances.
View capability page →Approved target scope, policies, assessment frequency and separately agreed assessment activity.
View capability page →Approved sources, monitored entities, screening scope, analyst review and reporting requirements.
View capability page →Bespoke report definitions, board packs, scheduled outputs, custom branding and approved data exports.
View capability page →The website identifies whether a capability is included, an optional add-on, controlled availability, usage-based, coming later or a separately scoped Damocles service.
Exact dollar pricing, user counts, monitored items, targets, schedules, ingestion, retention, investigation coverage and service commitments are confirmed in the applicable proposal, package schedule and agreement.
This avoids hiding package boundaries while preventing unsupported public pricing or service-level claims.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
Scoped, authorised and priced for the specific engagement. Findings, risks, actions and evidence may be managed through Guardian.
We will confirm inclusions, allowances, additional modules and separately scoped services without exposing internal implementation detail.
