Platform
A single observation engine, held to a single evidence standard
Guardian is deliberately not a dashboard of unexplained alerts. It is a pipeline that turns public observation into findings that survive scrutiny by someone who was not there when they were made.
Architecture
Four capability layers behind one product
The product you buy is Identity & Asset Guardian. Behind it, four internal capabilities are kept structurally separate so that authorisation and evidence handling cannot be quietly bypassed by the parts of the system doing the observing.
- 01 · Foundation
Build & integration foundation
The engineering substrate the rest of the system is assembled on: adapters, contracts, deployment and test harnesses.
- 02 · Collection and correlation
Orchestration & reasoning
Schedules observation, collects from public sources, correlates independent observations into cases, and drives investigative reasoning.
- 03 · Image analysis
Visual & multimodal observation
Handles logo similarity, visual cloning of storefronts and product imagery, and other observations that are not text.
- 04 · Policy and refusal
Authorisation & governance
Holds the customer's authorisation scope. It can refuse or revoke an observation that falls outside what the customer declared — including refusing instructions from the rest of the system.
Coverage
Public sources only, scoped by your registry
Guardian observes what any member of the public could observe: indexed web pages, public social profiles, domain registration and certificate transparency records, public marketplace listings, review platforms and public image surfaces. It does not log into anything on your behalf, and it does not observe private or access-controlled spaces.
Data
We collect the minimum required to produce the report
Onboarding asks for the assets you want watched, a billing email, your declared concern and your authorisation. It does not ask for passwords, does not ask for access to your systems, and does not require you to install anything. Data you provide is used to scope and deliver your assessment, and is deleted on request.
Boundaries
Prohibited by default
These are not discouraged practices. They are refused by the governance layer regardless of what a customer asks for.
- Unauthorised access to any account or system
- Intrusive network or vulnerability scanning
- Collection of credentials of any kind
- Biometric identification or face-search claims without an explicit lawful basis
- Covert monitoring of private or access-controlled sources
- Autonomous legal notices
- Autonomous takedown requests without a specific written mandate
- Contacting, pressuring or harassing an identified individual
- Fabricated urgency, invented findings or unsupported numerical claims