Four levels
From hands-off to fully trusted.
OFF
Off
Guardian doesn’t touch it.
MONITOR
Monitor
Watches and reports in the diary. No changes.
ASK
Ask
Prepares the fix with plan, risk and rollback, then waits for one-click approval.
AUTO
Auto
Just does it, verifies it and writes it up.
Built for real operations
Controls engineers actually use.
- Presets Start with Monitor-only, Recommended or Full autonomy, then fine-tune.
- Time windows e.g. auto-patch servers only between 02:00 and 04:00.
- Expiring grants Full control of FW-01 for four hours during a migration, then back to normal.
- Emergency containment During a live attack it can isolate and block, then pages the manager. You can switch this off.
- Change freeze & kill switch Pause everything, or revoke every credential, in one action.
Never automated
Some jobs stay human.
Firmware upgrades, deleting users or mailboxes, and backup restores are never run by Guardian, whatever the settings. It diagnoses, prepares the exact steps and a rollback plan, and leaves the action to a person.
Every change to access rights is itself logged, so you can always prove what authority Guardian held at any moment.