Basic Website Scan
Fast baseline on headers, TLS, cookie security, and top-level exposure signals.
Open scanner pageScanner Catalog
Choose scanners by layer, not guesswork.
GuardScanner is structured as a modular scanner suite. Each scan mode targets a specific layer so teams can run focused checks, reduce noise, and prioritize fixes faster.
Advanced Verified Scan
Ownership-gated deep scan with DNS TXT verification and sensitive path probing.
Open scanner pageTLS Inspector
Certificate validity, expiry window, trust diagnostics, and HSTS enforcement checks.
Open scanner pageDNS Audit
SPF/DMARC posture, NS/MX visibility, CAA checks, and domain configuration hygiene.
Open scanner pagePort Exposure Snapshot
Common port exposure scan with risk tagging for sensitive internet-facing services.
Open scanner pageSubdomain Inventory
Quick candidate-based subdomain discovery and exposure review for risky hostnames.
Open scanner pageRedirect Chain Analyzer
Maps redirect hops, detects loops, flags HTTP hops, and highlights final destination risk.
Open scanner pageCSP Evaluator
Analyzes Content-Security-Policy strength and reports unsafe directives.
Open scanner pageCrawl Surface Audit
Reviews robots.txt and sitemap exposure patterns for accidental information leakage.
Open scanner pageServer Agent Scan
Download shell agent, run locally, and analyze report output without sharing SSH credentials.
Open scanner pageReference workflow
Most teams run scans in this order for strongest signal-to-noise ratio.
Web baseline
Basic, Advanced, Redirect Chain, and CSP for policy and traffic correctness.
Domain integrity
DNS Audit and Subdomain Inventory for domain hygiene and exposure mapping.
Infra exposure
Port Snapshot, Crawl Surface Audit, and Server Agent for edge and host visibility.