Cloudhouse Guardian simplifies security and compliance for your infrastructure in the cloud and on-premises. This is accomplished through features that build on each other to provide a cybersecurity platform.

Discover

First, Guardian allows you to Discover nodes in your environment. Nodes can be any server, network device, or cloud service you manage and would like to monitor.

Guardian will take daily snapshots of the configurations of all nodes in your environment and save them indefinitely. This allows you to be notified when devices change, get change reports emailed, or compare snapshots over time to see how a particular node has changed.

The Discover component lets you know what is going on in your IT environment and troubleshoot issues arising from configuration drift.

Control

After discovering the nodes in your environment, Guardian tracks changes across these nodes. The next step is Control, where you create policies for your nodes specifying how a particular node should be configured.

For example, you can set up a policy to ensure a specific version of anti-virus is installed through your IT infrastructure or to ensure a configuration file is consistent across all apache servers in your environment.

Report

The Report feature gives you dynamic charts to see how your environment is doing. The types of reports provided in Guardian are:

• Change Report
• Policy Report
• Benchmark Report (CIS Benchmarks)
• Any custom report you can build using the API

Notify

Ideally, you don't want to have to log in to Guardian every day to find out if and how your nodes have changed. Guardian's event and notification system can receive notifications in various forms (such as email, incident management tickets, or Syslog messages), so you are automatically alerted to changes before they cause downtime or a security breach.