Does the client need to install anything?▾
For cloud systems (AWS, Okta, Azure) — no. You grant read-only API access via a guided 10-minute setup. For on-prem firewalls (Cisco ASA, Palo Alto), we provide a lightweight Docker-based agent that makes outbound-only connections — no inbound ports required.
Is my infrastructure data safe?▾
All credentials are stored in AWS Secrets Manager with AES-256 encryption, namespaced per organisation. We hold read-only permissions only — it is technically impossible for NetGuard to modify anything in your infrastructure. All data is encrypted at rest and in transit (TLS 1.3).
How is this different from Vanta or Drata?▾
Vanta and Drata focus on SaaS integrations (GitHub, Google Workspace, HR tools). They handle firewall and network compliance poorly. NetGuard is built specifically for network and infrastructure-heavy environments — we go deep on PCI DSS firewall requirements, network segmentation, and on-prem systems that generic tools skip entirely.
How long does onboarding take?▾
Most customers connect their first integrations and run their first scan within 30 minutes of signup. Your first full compliance report can be ready the same day. There is no professional services engagement required.
Can I add custom compliance controls?▾
Yes, on the Enterprise plan. You can define custom controls in YAML, map them to any data source, and they appear alongside the standard framework controls in your dashboard and reports.
What if a scan fails or a connector goes stale?▾
You'll receive an email and Slack alert immediately. Each data source shows a last collected timestamp in the dashboard. Failed collections are retried automatically 3 times with exponential backoff before alerting you.
What's the difference between the C-Level, Summary, and Technical reports?▾
They all come from the same scan — zero extra work. The C-Level report is a plain-English brief written for executives: no acronyms, no control IDs, just business risk and what leadership needs to authorise. The Summary report gives managers a compliance score, category-by-category breakdown, and the top findings. The Technical report is for your IT team — every control with the raw evidence collected and numbered step-by-step instructions on exactly how to fix each failing issue.
What is the Cross-Framework Map?▾
It's a single matrix that shows how every security check maps across all four frameworks (SOC 2, PCI DSS, ISO 27001, NIST CSF) at the same time. Instead of running four separate audits, you can see at a glance which checks satisfy multiple frameworks simultaneously — and where you have gaps in specific frameworks. Available as an interactive view in the dashboard and as a PDF export.