The kit, and what Guardian does with it.
Built: the tools exist and pass our tests. Read-only today: Guardian checks and reports, changes come later. In development: being built now. Added for your build: we build it for your network. Every new site starts in watch-only mode, whatever its kit.
| Kit | What Guardian does | Status |
|---|---|---|
| Windows Server and Windows PCs | Update status, installed updates and pending restarts; starts update scans; warns signed-in users and schedules restarts; services and their start types; scheduled tasks (export, then disable one that blocks updates); who is signed in; update policy; clears stale saved passwords and broken drive mappings | Built |
| Active Directory | Looks up users and computers; reads lockout and security events to find what keeps locking an account; unlocks accounts; disables stale computers | Built |
| Microsoft 365 and Entra ID | Service health, risky sign-ins, MFA status, mailbox forwarding rules, signing a compromised user out everywhere, joiners and leavers, licences | Added for your build |
| Kit | What Guardian does | Status |
|---|---|---|
| Windows DNS | Reads and changes forwarders, times real lookups to find a dead one, server statistics, clears the cache | Built |
| Windows DHCP | Lists scopes with their usage; reads settings, leases and DHCP events; finds stale leases (devices gone, random-MAC phones, not on the domain); backs up the config; shortens lease times; clears stale leases; extends a range into free space | Built |
| DNS and DHCP on routers and firewalls | Pools, reservations, lease times, forwarders and DNS filtering, using each vendor’s own tools | Added for your build |
| Kit | What Guardian does | Status |
|---|---|---|
| Fortinet FortiGate | Config backups; VPN settings and VPN event logs; certificates and their expiry; swaps the VPN server certificate before it expires; tests that a VPN login actually works | Built |
| SonicWall, WatchGuard, pfSense, OPNsense | Rules and NAT, VPN tunnels and users, certificates, config backups and drift, threat logs, blocking an attacking address or country, through each one’s API or console | Added for your build |
| Kit | What Guardian does | Status |
|---|---|---|
| Cisco IOS and IOS-XE | Today: version, interfaces, VLANs, routes, ARP table, DHCP bindings, config backups with secrets removed, and drift against the last backup. Next: add and remove VLANs, describe or shut a port, DHCP pools, access lists, static routes and site-to-site VPN, using Cisco’s own auto-undo timer | Read-only today |
| DrayTek, MikroTik, Juniper, HPE Aruba | The same jobs over SSH or API, with each platform’s own safety net where it has one | Added for your build |
| Kit | What Guardian does | Status |
|---|---|---|
| UniFi, Cisco Meraki, Aruba | Wi-Fi networks and guest access; a VLAN per network; client lists; blocking or disconnecting a device; access-point health and firmware; channel and interference reports; rogue access-point alerts | Added for your build |
| Kit | What Guardian does | Status |
|---|---|---|
| Linux servers | Uptime, disk space, pending updates, failed services, error logs and failed logins | Read-only today |
| Network checks from the Guardian box | Ping, certificate expiry and strength on any HTTPS or VPN endpoint, and a real VPN login test | Built |
| Backups (Veeam, Synology and similar) | Did last night’s job run, how old is the restore point, is there space for tonight’s | Added for your build |
One safe way in. A new language for each vendor.
SSH is the same door on every device, but each vendor speaks its own language behind it. Guardian connects through proven, widely used open-source libraries that already speak over a hundred device languages, so adding your kit is a matter of days, not a new project.
Guardian never types free-form commands into your router. Each job is its own checked tool: back up the config, make one change, check it worked, undo it if it didn’t. Where the kit has its own “undo unless confirmed” timer, Guardian uses that too. Changes that could lock people out always come to your manager first.
Not on the list? Ask us.
Tell us what you run, and we’ll tell you straight what it takes to add it to your build.