Security services

Find exposures. Test people. Audit the core. Stay available.

Every service below runs on its own and reports into the same findings table, the same posture score and the same Watcher analysis. Start with the ones you need and add the rest later.

Book a demo Threat intelligence and DRP

Find exposures

Buguardian Vulnerability Management · Network scan

Every device on the network, and what is wrong with each one.

The scanning appliance discovers your networks and the hosts on them, then checks each host with several detection engines. All devices and services are found, CVE and VAS findings are identified.

Technical vulnerability · 30%Full CVE and NVD coverage

Network and host discovery, shown as a table or as a topology map
Operating system, open ports, services and device history for every IP address
Scheduled scans, plus on-demand scans for moments like the day after a patch round
Findings grouped by engine: known CVEs, vulnerability checks, web application and network service issues
EPSS probability, KEV flag and CISA due date on every CVE
Authenticated scanning over SSH, WinRM, SMB and SNMP. Credentials can be limited to IP ranges and are stored write-only with AES-256
A PDF report per scan and per network

With Watcher: each finding comes with an explanation and a priority, and after a fix Watcher can run the verification scan and report what changed.

Outcome: a practical, repeatable view of what attackers may find — and of what has changed since the last assessment.

Buguardian Web Application Scanning

Your public sites, seen the way an attacker sees them.

Scan your websites, domains, subdomains, IP addresses and cloud services, detect web vulnerabilities and report them. Verify a domain once; subdomains are discovered and resolved to their IP addresses.

Web vulnerability · 10%

Automatic subdomain discovery
Web and cloud scanning, on demand or on a schedule
Typical findings: an exposed .git directory, weak TLS configuration, exposed phpinfo output, known CVEs on public ports
Each finding opens with its attack vector, CVSS vector, affected versions and references
Risk scoring, continuous monitoring and management reports

Outcome: evidence of what is exposed on your public assets, with a recommended way forward.

SSL and IP reputation monitoring

No more surprise expiries. No more silent blocklists.

Every certificate on every subdomain is tracked — valid, expiring soon, expired or self-signed. The addresses behind your A and MX records are checked against widely used blocklists.

Operational continuity · 5%

Certificates

Expired and soon-to-expire certificates become findings and count toward the score.

IP reputation

Find out you are blocklisted before your customers do — and before e-mail delivery stops.

Outcome: you see an expiring certificate or a listed address before it disrupts business operations.

Test people

Buguardian Phishing Simulation

Find out who clicks, before someone else does.

Test your employees against social engineering attacks, measure awareness and get a detailed report — the human factor measured in the same place as technical risk.

Human factor · 20%Hundreds of templates · 10+ languages

Build an awareness campaign in a seven-step wizard and see the result for each person
Hundreds of ready-made templates in 10+ languages: meeting invitations, delivery notices, banking alerts, government notices, invoices
Your own templates, sender profiles and target lists
Send now or schedule for later; department-level scenarios
Per-recipient tracking: opened, clicked, submitted a form — each with a count and a time
Campaign totals, risk and awareness analysis and a PDF report

With Watcher: the next campaign is proposed for the people who clicked, ready to schedule once you approve.

Outcome: human risk measured, not guessed — and tracked as a trend.

Audit the core

Buguardian Firewall Analysis

A grade for your firewall, with the evidence attached.

The device's configuration and firmware are reviewed and graded from A to F on a 0 to 100 risk score. Every finding shows the technical evidence from the raw configuration and a recommendation.

Firewall posture · 10%Graded A–F

Five sources in one report

Configuration auditVersion-based CVE mappingCIS BenchmarkActive port scanDeep vulnerability scan

Duplicates are merged and the highest severity is kept.

Typical findings: unused and shadowed rules, a default SNMP community string, rules with logging turned off, outdated IPS signatures, no configuration backup
Change since the previous scan and a risk trend over time
A serial-verified PDF report

Buguardian AD Health Check

Directory hygiene, checked every day, without touching the directory.

Read-only by design. No account, group or policy is created, changed or deleted.

Identity and directory · 10%Read-only

A daily automated scan with an AD health score and its trend
Typical findings: passwords set never to expire, enabled accounts unused for 90 days, accounts open to AS-REP roasting, a weak default password policy, an outdated functional level

Outcome: a repeatable review of account hygiene and password policy, with nothing changed in the directory.

Buguardian Database Health Check

A read-only, daily review of your databases.

A security and configuration review for PostgreSQL and Microsoft SQL Server.

PostgreSQLMicrosoft SQL ServerRead-only

Typical findings: over-privileged logins and settings that hurt reliability
A risk score per database

Stay available

Availability monitoring

Know that it answers.

Service ports for the website, mail gateway, VPN and business applications are checked at regular intervals. Alerts roll up to the security overview.

Choose the business services and ports to check
Targets and device credentials stay on the appliance in your network and are never sent to the cloud
Alerts and operational visibility in the same console

Outcome: you know when a selected service stops responding.

DDoS simulation · restricted

Test the flood before someone else sends it.

UDP, SYN, ICMP and HTTP flood against a host and port you choose. Every test passes a pre-approval step before it runs, and produces a results report.

Authorised assessment only. Each test requires explicit written authorisation, documented scope, provider permission, fixed intensity limits, agreed test windows and an emergency stop. It is an assessment, subject to availability and scope; it does not provide or guarantee DDoS protection.

Managed VPN

Remote access, managed from the same console.

Create a VPN server, define its virtual network and the local networks it reaches, and manage its users — where the rest of your security work happens.

Configure supported remote-access VPN services
Administer users in the same console as your assessments

Pick the services. Watcher reads them all.

Activate only what your environment needs. Every service you add lands in the same company record and the same score.

Book a demo Close what was found