--- title: "Security services" description: "Vulnerability management, web application scanning, SSL and IP reputation, phishing simulation, firewall, Active Directory and database audits, availability monitoring, DDoS simulation and managed VPN." url: https://buguardian.com/en/services.html updated: 2026-11-05 --- Security services # Find exposures. Test people. Audit the core. Stay available. Every service below runs on its own and reports into the same findings table, the same posture score and the same Watcher analysis. Start with the ones you need and add the rest later. [Book a demo](https://buguardian.com/en/demo.html) [Threat intelligence and DRP](https://buguardian.com/en/threat-intelligence.html) On this page 1. Vulnerability management 2. Web application scanning 3. SSL and IP reputation 4. Phishing simulation 5. Firewall analysis 6. AD health check 7. Database health check 8. Availability monitoring 9. DDoS simulation 10. Managed VPN Find exposures Buguardian Vulnerability Management · Network scan ## Every device on the network, and what is wrong with each one. The scanning appliance discovers your networks and the hosts on them, then checks each host with several detection engines. All devices and services are found, CVE and VAS findings are identified. Technical vulnerability · 30% Full CVE and NVD coverage - Network and host discovery, shown as a table or as a topology map - Operating system, open ports, services and device history for every IP address - Scheduled scans, plus on-demand scans for moments like the day after a patch round - Findings grouped by engine: known CVEs, vulnerability checks, web application and network service issues - EPSS probability, KEV flag and CISA due date on every CVE - Authenticated scanning over SSH, WinRM, SMB and SNMP. Credentials can be limited to IP ranges and are stored write-only with AES-256 - A PDF report per scan and per network **With Watcher:** each finding comes with an explanation and a priority, and after a fix Watcher can run the verification scan and report what changed. **Outcome:** a practical, repeatable view of what attackers may find — and of what has changed since the last assessment. Buguardian Web Application Scanning ## Your public sites, seen the way an attacker sees them. Scan your websites, domains, subdomains, IP addresses and cloud services, detect web vulnerabilities and report them. Verify a domain once; subdomains are discovered and resolved to their IP addresses. Web vulnerability · 10% - Automatic subdomain discovery - Web and cloud scanning, on demand or on a schedule - Typical findings: an exposed `.git` directory, weak TLS configuration, exposed phpinfo output, known CVEs on public ports - Each finding opens with its attack vector, CVSS vector, affected versions and references - Risk scoring, continuous monitoring and management reports **Outcome:** evidence of what is exposed on your public assets, with a recommended way forward. SSL and IP reputation monitoring ## No more surprise expiries. No more silent blocklists. Every certificate on every subdomain is tracked — valid, expiring soon, expired or self-signed. The addresses behind your A and MX records are checked against widely used blocklists. Operational continuity · 5% ### Certificates Expired and soon-to-expire certificates become findings and count toward the score. ### IP reputation Find out you are blocklisted before your customers do — and before e-mail delivery stops. **Outcome:** you see an expiring certificate or a listed address before it disrupts business operations. Test people Buguardian Phishing Simulation ## Find out who clicks, before someone else does. Test your employees against social engineering attacks, measure awareness and get a detailed report — the human factor measured in the same place as technical risk. Human factor · 20% Hundreds of templates · 10+ languages - Build an awareness campaign in a seven-step wizard and see the result for each person - Hundreds of ready-made templates in 10+ languages: meeting invitations, delivery notices, banking alerts, government notices, invoices - Your own templates, sender profiles and target lists - Send now or schedule for later; department-level scenarios - Per-recipient tracking: opened, clicked, submitted a form — each with a count and a time - Campaign totals, risk and awareness analysis and a PDF report **With Watcher:** the next campaign is proposed for the people who clicked, ready to schedule once you approve. **Outcome:** human risk measured, not guessed — and tracked as a trend. Audit the core Buguardian Firewall Analysis ## A grade for your firewall, with the evidence attached. The device's configuration and firmware are reviewed and graded from A to F on a 0 to 100 risk score. Every finding shows the technical evidence from the raw configuration and a recommendation. Firewall posture · 10% Graded A–F ### Five sources in one report Configuration audit Version-based CVE mapping CIS Benchmark Active port scan Deep vulnerability scan Duplicates are merged and the highest severity is kept. - Typical findings: unused and shadowed rules, a default SNMP community string, rules with logging turned off, outdated IPS signatures, no configuration backup - Change since the previous scan and a risk trend over time - A serial-verified PDF report Buguardian AD Health Check ## Directory hygiene, checked every day, without touching the directory. Read-only by design. No account, group or policy is created, changed or deleted. Identity and directory · 10% Read-only - A daily automated scan with an AD health score and its trend - Typical findings: passwords set never to expire, enabled accounts unused for 90 days, accounts open to AS-REP roasting, a weak default password policy, an outdated functional level **Outcome:** a repeatable review of account hygiene and password policy, with nothing changed in the directory. Buguardian Database Health Check ## A read-only, daily review of your databases. A security and configuration review for PostgreSQL and Microsoft SQL Server. PostgreSQL Microsoft SQL Server Read-only - Typical findings: over-privileged logins and settings that hurt reliability - A risk score per database Stay available Availability monitoring ## Know that it answers. Service ports for the website, mail gateway, VPN and business applications are checked at regular intervals. Alerts roll up to the security overview. - Choose the business services and ports to check - Targets and device credentials stay on the appliance in your network and are never sent to the cloud - Alerts and operational visibility in the same console **Outcome:** you know when a selected service stops responding. DDoS simulation · restricted ## Test the flood before someone else sends it. UDP, SYN, ICMP and HTTP flood against a host and port you choose. Every test passes a pre-approval step before it runs, and produces a results report. **Authorised assessment only.** Each test requires explicit written authorisation, documented scope, provider permission, fixed intensity limits, agreed test windows and an emergency stop. It is an assessment, subject to availability and scope; it does not provide or guarantee DDoS protection. Managed VPN ## Remote access, managed from the same console. Create a VPN server, define its virtual network and the local networks it reaches, and manage its users — where the rest of your security work happens. - Configure supported remote-access VPN services - Administer users in the same console as your assessments ## Pick the services. *Watcher reads them all.* Activate only what your environment needs. Every service you add lands in the same company record and the same score. [Book a demo](https://buguardian.com/en/demo.html) [Close what was found](https://buguardian.com/en/management.html)