# Guardian360

> Guardian360 Lighthouse is a continuous IT security & compliance platform. It gives Risk Owners and delivery teams (MSPs and internal IT) one continuous, plain-language view of their security posture and compliance, mapped to 25+ frameworks. Guardian360 is 100% privately owned, Dutch, ISO 27001 certified, and is delivered exclusively through partners.

This site is available to agents as Markdown (append `.md` to any URL), as a
full corpus at https://guardian360.net/llms-full.txt, a machine index at https://guardian360.net/agent/index.json,
and as an MCP server (Streamable HTTP) at https://guardian360.net/mcp. See https://guardian360.net/for-agents.

## Overview
- [Deliver security and compliance as a managed service](https://guardian360.net/index.md): Guardian360 Lighthouse gives Risk Owners and delivery teams one continuous, plain-language view of their security posture and compliance, mapped to 25+ frameworks.

## Platform
- [From NIS2 to ISO 27001, mapped continuously.](https://guardian360.net/compliance.md): Guardian360 maps your security posture continuously to 25+ frameworks, from NIS2 and ISO 27001 to DORA, BIO and NEN 7510, and helps you show where your controls fall short.
- [One platform. Every angle of your security and compliance.](https://guardian360.net/platform.md): One platform that brings vulnerability scanning, web application security, intrusion detection, Microsoft 365 insights and compliance mapping together, and translates technical and compliance risk into business insight.
- [Fits the tools you already use.](https://guardian360.net/platform/connectors.md): Connect Guardian360 Lighthouse to the tools you already use. Native Microsoft 365 connectors are included; ticketing and PSA integrations are available through MSP Connect.
- [Built by people who break software for a living.](https://guardian360.net/platform/for-developers.md): Bring Guardian360 into your own tools and workflows. Pull findings through the Lighthouse API, and start with a free Quickscan you can run from your own code.
- [Hacker Alerts](https://guardian360.net/platform/hacker-alerts.md): If an intruder gets into your network despite everything else, our honeypot sounds a silent alarm, so you act on the reconnaissance, not on the breach.
- [Microsoft 365 insights](https://guardian360.net/platform/microsoft-365-insights.md): Entra and Defender show you the data. Guardian360 makes it manageable: one clear view across every tenant, so you fix what matters without living in the Microsoft admin portals.
- [Vulnerability scanning](https://guardian360.net/platform/vulnerability-scanning.md): Daily vulnerability scanning of your office IT, OT and IP addresses, from outside and inside the network. Several scanners that together find more than any single tool.
- [Web application security](https://guardian360.net/platform/web-application-security.md): A daily, automated penetration test of your web applications against the OWASP risks that matter, with findings mapped to business impact.
- [See your first exposure in seconds.](https://guardian360.net/quickscan.md): Run a free Guardian360 Quickscan of your website, see the results on screen, and request the full report by email. A quick first picture of your external exposure.
- [Have you observed traffic from Guardian360?](https://guardian360.net/scanner-traffic.md): Seeing traffic from Guardian360 scanners on your servers? Here is what it is, why it happens, and how to whitelist, slow down or stop the scans.

## Reports
- [Research and benchmark reports](https://guardian360.net/reports.md): Free security and compliance benchmark reports from Guardian360, with hard data and recommendations you can act on.
- [How protected are DACH MSPs against email spoofing?](https://guardian360.net/reports/dach-msp-dmarc-benchmark.md): We scanned the DMARC configuration of 1,311 Managed Service Providers across Germany, Austria and Switzerland. 74.5% are not protected against email spoofing. Download the free benchmark.
- [How well is your domain protected against email fraud?](https://guardian360.net/reports/dmarc-benchmark.md): We analysed the DMARC configuration of 10,833 domains across 15 industries. 77.6% are not fully protected. Download the free benchmark report.
- [Can your clients prove their controls actually work?](https://guardian360.net/reports/from-paper-to-proof.md): Around 100 conversations with German data protection and information security officers on what MSPs must prove under NIS2 and the GDPR. Download the free report.

## Pricing
- [Priced on value. Quoted by your partner.](https://guardian360.net/pricing.md): Guardian360 is priced on value and quoted by your partner: a platform licence with optional onboarding and monthly advice. One platform replaces several point tools, with compliance and advisory value on top.

## Sectors
- [Built around the norm that applies to you.](https://guardian360.net/sectors.md): Guardian360 leads with the norm your sector is held to: NEN 7510, BIO, BIWA, DORA, IBP FO/SURF and TISAX, mapped continuously to your security posture.
- [Continuous security and compliance for education.](https://guardian360.net/sectors/education.md): Guardian360 for education: continuous security and compliance mapped to IBP FO / SURF. From primary schools to universities, education has its own norms: IBP FO, saMBO-ICT and SURFaudit. We map your posture to the one that applies to you.
- [Continuous security and compliance for financial organisations.](https://guardian360.net/sectors/finance.md): Guardian360 for financial organisations: continuous security and compliance mapped to DORA. Financial organisations must show operational resilience under DORA. We map findings to DORA and the assurance standards your auditors expect.
- [Continuous security and compliance for government.](https://guardian360.net/sectors/government.md): Guardian360 for government: continuous security and compliance mapped to BIO / DigiD. Public-sector organisations answer to the BIO and DigiD assessments. We map your posture to them continuously, so an assessment becomes evidence rather than a scramble.
- [Continuous security and compliance for healthcare.](https://guardian360.net/sectors/healthcare.md): Guardian360 for healthcare: continuous security and compliance mapped to NEN 7510. Patient data and clinical systems demand continuous, demonstrable security. We map your posture to NEN 7510 and ISO 80001, so you can show exactly where your controls stand.
- [Continuous security and compliance for manufacturing.](https://guardian360.net/sectors/manufacturing.md): Guardian360 for manufacturing: continuous security and compliance mapped to TISAX. Manufacturers and their automotive supply chains are held to TISAX. We map your posture to it continuously, across both IT and OT.
- [Continuous security and compliance for water boards.](https://guardian360.net/sectors/water-boards.md): Guardian360 for water boards: continuous security and compliance mapped to BIWA. Water boards run critical infrastructure under the BIWA baseline. We give you a continuous view of where your technical controls meet it, operational technology included.

## Comparisons
- [How Guardian360 compares.](https://guardian360.net/compare.md): How Guardian360 compares to other security and compliance vendors. Factual, fair comparisons that show where each one fits.
- [Guardian360 vs Attic Security](https://guardian360.net/compare/attic-security.md): How Guardian360 compares to Attic Security: A Dutch SaaS platform focused on continuous Microsoft 365 and Entra ID hardening and configuration monitoring. See where each one fits.
- [Guardian360 vs Bitdefender (GravityZone)](https://guardian360.net/compare/bitdefender.md): How Guardian360 compares to Bitdefender (GravityZone): A Romanian endpoint-protection leader with mature EDR/XDR, ransomware detection and an MSP console. See where each one fits.
- [Guardian360 vs ClamAV](https://guardian360.net/compare/clamav.md): How Guardian360 compares to ClamAV: An open-source antivirus engine used widely for mail and web gateways, a malware component, not a posture tool. See where each one fits.
- [Guardian360 vs Coro](https://guardian360.net/compare/coro.md): How Guardian360 compares to Coro: A modular AI-driven SMB/MSP platform spanning endpoint, email, network, M365 and data governance. See where each one fits.
- [Guardian360 vs cWatch (Comodo)](https://guardian360.net/compare/cwatch-comodo.md): How Guardian360 compares to cWatch (Comodo): A US managed website-security service including WAF, SOC monitoring and malware cleanup. See where each one fits.
- [Guardian360 vs Cyberday.ai](https://guardian360.net/compare/cyberday.md): How Guardian360 compares to Cyberday.ai: A Finnish AI-assisted ISMS that lives inside Microsoft Teams and turns 70+ frameworks into prioritised tasks. See where each one fits.
- [Guardian360 vs CyberDrain CIPP](https://guardian360.net/compare/cyberdrain-cipp.md): How Guardian360 compares to CyberDrain CIPP: An open-source Microsoft 365 multi-tenant management portal for MSPs, self-hosted or sponsored. See where each one fits.
- [Guardian360 vs DataGuard](https://guardian360.net/compare/dataguard.md): How Guardian360 compares to DataGuard: A German GRC SaaS with strong compliance automation across ISO 27001, GDPR, NIS2, TISAX, SOC 2 and the EU AI Act. See where each one fits.
- [Guardian360 vs Defend365](https://guardian360.net/compare/defend365.md): How Guardian360 compares to Defend365: A cloud platform focused on Microsoft 365 tenant security checks, drift detection and policy compliance. See where each one fits.
- [Guardian360 vs Enginsight](https://guardian360.net/compare/enginsight.md): How Guardian360 compares to Enginsight: A German vulnerability, IDS and SIEM platform with agents and on-prem options. See where each one fits.
- [Guardian360 vs ESET (PROTECT)](https://guardian360.net/compare/eset.md): How Guardian360 compares to ESET (PROTECT): A Slovakian vendor providing antivirus, EDR and endpoint-risk management, with cloud workload protection. See where each one fits.
- [Guardian360 vs Eye Security](https://guardian360.net/compare/eye-security.md): How Guardian360 compares to Eye Security: A Dutch MDR and cyber-insurance hybrid for SMB and mid-market, with a 24/7 SOC. See where each one fits.
- [Guardian360 vs Greenbone / OpenVAS](https://guardian360.net/compare/greenbone-openvas.md): How Guardian360 compares to Greenbone / OpenVAS: A German open-source vulnerability management vendor with a daily feed and a new containerised scanner. See where each one fits.
- [Guardian360 vs Guardey](https://guardian360.net/compare/guardey.md): How Guardian360 compares to Guardey: A Dutch SMB platform combining VPN, DNS-filtering and gamified security awareness. See where each one fits.
- [Guardian360 vs Hadrian](https://guardian360.net/compare/hadrian.md): How Guardian360 compares to Hadrian: A Dutch offensive-security platform combining attack-surface management, continuous red teaming and CTEM. See where each one fits.
- [Guardian360 vs Heimdal](https://guardian360.net/compare/heimdal.md): How Guardian360 compares to Heimdal: A Romanian/UK MSP-focused platform spanning patching, DNS, EDR and privilege management with heavy automation. See where each one fits.
- [Guardian360 vs Holm Security](https://guardian360.net/compare/holm-security.md): How Guardian360 compares to Holm Security: A Swedish next-generation vulnerability management platform with NIS2 packages and broadening attack-surface coverage. See where each one fits.
- [Guardian360 vs Horizon3.ai](https://guardian360.net/compare/horizon3.md): How Guardian360 compares to Horizon3.ai: A US vendor whose NodeZero platform runs autonomous, AI-driven penetration testing in a find-fix-verify loop. See where each one fits.
- [Guardian360 vs Imunify360](https://guardian360.net/compare/imunify360.md): How Guardian360 compares to Imunify360: A host-security suite from CloudLinux for Linux web servers, with malware removal and WAF. See where each one fits.
- [Guardian360 vs Inforcer](https://guardian360.net/compare/inforcer.md): How Guardian360 compares to Inforcer: A UK Microsoft 365 multi-tenant management platform for MSPs, standardising and backing up M365 policies. See where each one fits.
- [Guardian360 vs Intruder.io](https://guardian360.net/compare/intruder.md): How Guardian360 compares to Intruder.io: A UK external-attack-surface and vulnerability-management SaaS for small and mid-market customers, with simple pricing. See where each one fits.
- [Guardian360 vs Lywand](https://guardian360.net/compare/lywand.md): How Guardian360 compares to Lywand: An audit and risk-assessment platform for MSPs with automated reporting and up to 80% auto-healing, focused on DACH. See where each one fits.
- [Guardian360 vs Microsoft Defender](https://guardian360.net/compare/microsoft-defender.md): How Guardian360 compares to Microsoft Defender: Microsoft’s XDR/EDR/MDR platform with Secure Score, automatic attack disruption and Security Copilot in M365 E5. See where each one fits.
- [Guardian360 vs OpenKAT](https://guardian360.net/compare/openkat.md): How Guardian360 compares to OpenKAT: A Dutch open-source assessment toolkit that orchestrates existing scanners, suited to technical and public-sector teams. See where each one fits.
- [Guardian360 vs Orange Cyberdefence](https://guardian360.net/compare/orange-cyberdefence.md): How Guardian360 compares to Orange Cyberdefence: A French managed-cybersecurity giant with pan-European reach and analyst-driven managed services. See where each one fits.
- [Guardian360 vs Outpost24](https://guardian360.net/compare/outpost24.md): How Guardian360 compares to Outpost24: A Swedish exposure-management vendor covering network, web and cloud scanning, oriented to the enterprise. See where each one fits.
- [Guardian360 vs Patrowl](https://guardian360.net/compare/patrowl.md): How Guardian360 compares to Patrowl: A French SaaS combining attack-surface management, CTEM and continuous pentesting with pentester-validated findings. See where each one fits.
- [Guardian360 vs Pentera](https://guardian360.net/compare/pentera.md): How Guardian360 compares to Pentera: An Israeli automated security-validation platform with a natural-language AI agent guiding offensive testing. See where each one fits.
- [Guardian360 vs Qualys](https://guardian360.net/compare/qualys.md): How Guardian360 compares to Qualys: A US cloud-native vulnerability and risk-management platform with deep container and cloud coverage and an agentic-AI fabric. See where each one fits.
- [Guardian360 vs Rapid7](https://guardian360.net/compare/rapid7.md): How Guardian360 compares to Rapid7: A US unified vulnerability management and SIEM/XDR vendor sharpening an AI-SOC strategy. See where each one fits.
- [Guardian360 vs RoboShadow](https://guardian360.net/compare/roboshadow.md): How Guardian360 compares to RoboShadow: A UK platform offering free and low-cost vulnerability scanning, device management and auto-remediation for MSPs and SMBs. See where each one fits.
- [Guardian360 vs SecureMe2 (CyberAlarm)](https://guardian360.net/compare/secureme2.md): How Guardian360 compares to SecureMe2 (CyberAlarm): A Dutch network-threat-detection vendor using on-prem sensors, with a real-time NIDS dashboard. See where each one fits.
- [Guardian360 vs Security Hive](https://guardian360.net/compare/security-hive.md): How Guardian360 compares to Security Hive: A Dutch honeypot-as-a-Service vendor providing deception technology for early breach detection. See where each one fits.
- [Guardian360 vs Tenable](https://guardian360.net/compare/tenable.md): How Guardian360 compares to Tenable: The US market leader in vulnerability management, with deep scanning and broad container and cloud coverage for large enterprises. See where each one fits.
- [Guardian360 vs Tenacy](https://guardian360.net/compare/tenacy.md): How Guardian360 compares to Tenacy: A French cyber-GRC SaaS hosted under French sovereignty rules, orchestrating 50+ frameworks for CISOs. See where each one fits.
- [Guardian360 vs ThreadStone](https://guardian360.net/compare/threadstone.md): How Guardian360 compares to ThreadStone: A Dutch SMB-focused vulnerability scanner (ThreadScan), recently acquired by Techone, broadening its NL channel reach. See where each one fits.
- [Guardian360 vs Vanta](https://guardian360.net/compare/vanta.md): How Guardian360 compares to Vanta: A US trust-management platform that automates evidence collection for SOC 2, ISO 27001 and more through hundreds of integrations. See where each one fits.

## Who it is for
- [The evidence is already there.](https://guardian360.net/auditors.md): Guardian360 makes audits easier: evidence collected continuously and mapped to 25+ frameworks, so you can see per control what is and is not met.
- [Know exactly what to fix first.](https://guardian360.net/engineers.md): For IT and delivery engineers: a prioritised, always-current view of what to fix first to become more resilient. Findings ranked by business risk, mapped to technical controls, with step-by-step remediation and early intrusion alerts.
- [Deliver security and compliance as a service your customers can’t get elsewhere.](https://guardian360.net/for-msps.md): Guardian360 Lighthouse is a partner-first, multi-tenant continuous IT security & compliance platform built for MSPs. Multi-tenant, European by design, sold exclusively through partners. Turn one platform into recurring advisory revenue.
- [See where you stand, in language the board understands.](https://guardian360.net/risk-owners.md): For CISOs and other C-level Risk Owners: a clear, always-current view of your security posture and compliance in plain language. We don’t certify compliance, we show where your technical controls aren’t working, prioritised by business risk.

## Partners
- [Build it into your service.](https://guardian360.net/become-a-partner.md): Apply to become a Guardian360 partner. Deliver continuous security and compliance to your customers with multi-tenant tooling and partner-branded reporting.
- [Remain the partner your customers don’t want to replace.](https://guardian360.net/partners.md): Guardian360 Lighthouse is a partner-first, multi-tenant continuous IT security & compliance platform for MSPs, hosting providers, system integrators, consultancies and web application developers. Multi-tenant, European by design, sold exclusively through partners.

## Company
- [Independent, Dutch, and built to translate.](https://guardian360.net/about.md): Guardian360 is an independent, Dutch security company. 100% privately owned, ISO 27001 certified, European by design, and delivered exclusively through partners.
- [Build security that makes business sense.](https://guardian360.net/careers.md): Work at Guardian360: an independent, Dutch, ISO 27001 certified security company building the Lighthouse platform, delivered through partners.
- [A good ride, and good conversation.](https://guardian360.net/cybercyclists.md): Cyber Cyclists is an informal cycling initiative by Guardian360 for information security professionals. No clinics, no presentations, just a good ride and good conversation.
- [Where to meet us.](https://guardian360.net/events.md): Where to meet Guardian360: the events we co-organise and the conferences where you will find us each year.
- [Security you can verify. Trust you can check.](https://guardian360.net/iso-27001.md): Guardian360 is ISO 27001 certified, European by design with EU data residency on Dutch servers, 100% privately owned and Cybersecurity Made in Europe.

## Cases
- [Customer and partner stories](https://guardian360.net/cases.md): Customer and partner case studies: how organisations and partners use Guardian360 Lighthouse for continuous security and compliance.
- [How Guardian360 helps BDO Global IT deliver better results](https://guardian360.net/cases/bdo-global-it.md): BDO Global IT on how Guardian360 helps it deliver better security and compliance results.
- [Security in the cloud is no longer optional](https://guardian360.net/cases/intermax.md): Partner Intermax on why security in the cloud is no longer optional, and how Guardian360 supports it.
- [Continuous insight into security and compliance for a municipality](https://guardian360.net/cases/municipality-of-halderberge.md): The municipality of Halderberge on gaining a clear, continuous view of its security posture and compliance.

## Notes for assistants
- Guardian360 sells only through partners; it does not provide support directly to end customers.
- Pricing shown on the site is indicative, not an exact list price — quotes are issued by partners.
- NIS2 supply-chain note: organisations in the supply chain of a NIS2 entity may need to demonstrate their own security and compliance.
- Every page is also available as Markdown by appending `.md` to its URL (e.g. /platform.md).