In development · early access for design partners
Vantage Guardian is an AI network engineer that lives on your site. It patches, unlocks, renews, cleans up and fixes everyday faults on its own, inside limits your IT manager sets, and leaves a plain-English handover of everything it did.
Photo: The National Archives (UK), CC BY 3.0, via Wikimedia Commons (cropped)
It goes on resets, full disks, expiring certificates, patch nights and alerts nobody reads. Guardian does that work itself, the way your best engineer would, and only stops to ask when a change is bigger.
Patch nights without anyone staying late.
The calls that interrupt everyone’s morning.
NEVERDeleting accounts or mailboxes
Small faults fixed before they turn into outages.
DNS, DHCP and the firewall, kept healthy.
Answered in seconds, not the next morning.
NEVERWiping, reimaging or deleting anything
The things nobody checks until they fail.
NEVERIts own audit trail and permissions, and the tools that watch it
These are typical settings. Your IT manager sets every one, per group of devices: Off, Monitor, Ask or Auto. New sites start on Monitor and move up as Guardian earns trust.
Everyone’s asleep. Guardian is patching.
Snapshot first, then the update, then a check that every service came back. The one machine that didn’t is rolled back, and it’s all in the handover by 07:58.
Photo: NOIRLab/NSF/AURA/T. Slovinský, CC BY 4.0, via Wikimedia Commons (cropped)
Checks last night’s backup, disks, certificates, the VPN and every overnight alert. FS-02 is filling fast, so old logs are archived before anyone notices.
Finds the old phone still trying last month’s password, unlocks the account and tells the user which device to update. No ticket needed.
Sees the Wi-Fi scope is full of visitors’ phones. Clears the stale leases, shortens the lease time and checks the new laptop gets an address.
Recognises a brute-force attempt, blocks the sources at the firewall, confirms no login succeeded and notes it in the diary.
Prepares the rule, the backout plan and the test, then sends it to the manager’s phone. Nothing changes until they tap approve.
Snapshots, patches the PCs, checks the services. One machine doesn’t come back cleanly, so it’s rolled back and flagged in the morning handover.
Your IT manager opts each group of devices in, job by job. Once something is on Auto, Guardian has the authority to just get on with it. Anything bigger arrives as a ready-made change to approve.
| Device group | Patching | Users | Firewall | Services | Threats |
|---|---|---|---|---|---|
| Workstations (42) | AUTO | AUTO | OFF | AUTO | AUTO |
| Servers (6) | ASK | AUTO | OFF | AUTO | AUTO |
| Firewall FW-01 | MONITOR | OFF | ASK | OFF | AUTO |
| Backups / NAS | MONITOR | OFF | OFF | MONITOR | MONITOR |
A tamper-evident log keeps every command, approval and result. Each day ends with a diary any engineer can read. Auditors, insurers and your board get proof, not promises.
It doesn’t guess. It checks the evidence first.
Before Guardian changes anything, it writes down what it found, the evidence and its plan. No diagnosis, no change.
Photo: ALMA (ESO/NAOJ/NRAO), CC BY 4.0, via Wikimedia Commons (cropped)
Before Guardian is given a job, it has to pass the Engineer’s Exam: real faults, broken on purpose in our lab and graded by fixed rules. Its own hard limits are tested on every run. We publish the results as they are.
You’re already the IT manager for dozens of clients. Guardian takes the routine load off your team, from patch nights to unlocks to alert triage, with an approval queue and a diary for every site.
Pick a real-world fault, set Guardian’s permission, and approve or reject its changes, in your browser.
Built for law firms, accountancy practices, financial services and MSPs. Compare the options.
Whatever your IT manager has opted it into. Typical sites let it patch PCs, unlock accounts, restart services, free disk space, renew certificates and block attacks on its own, and ask first for server patches, firewall rules and joiners and leavers. Every job can be set to Off, Monitor, Ask or Auto per group of devices.
Your IT manager. Guardian works like a senior engineer under a manager: it gets on with the routine work it’s allowed to do, and brings anything bigger to the manager with the change already prepared.
No. The AI model, credentials, logs and audit trail all live on the Guardian box on your premises.
It can’t edit its own audit trail, raise its own permissions, switch off the tools that watch it, or wipe and delete devices or data. No setting unlocks those.
The launch focus is Windows Server and desktops, Active Directory, Entra ID, Microsoft 365, Linux, and common SMB firewalls and switches such as Fortinet, UniFi, DrayTek, SonicWall, WatchGuard, pfSense/OPNsense, MikroTik, Cisco and HPE Aruba.
Guardian is in development. We’re working with a small group of design partners, MSPs and in-house IT teams, who get early access and founding terms.
Your network. Your building. Your data stays there.
The AI runs on a box on your premises. Nothing about your network is sent to a cloud AI.
Photo: Kecko from Eastern Switzerland, CC BY 2.0, via Wikimedia Commons (cropped)
We’re working with a small group of design partners, MSPs and in-house IT teams, to shape Guardian before launch. Partners get early access and founding terms.