Tenancy
How Guard isolates each tenant's data, authenticates users, connects Aegis agents, and blocks scans of protected domains.
- Endpoint SecurityHow Praetorian operators reach deployed Aegis agents over outbound-only tunnels that are removed when access ends.
- Flexibility to Grow with Your NeedsHow Guard's multi-tenant SaaS grows with added users, teams, and integrations, with single-tenant as a custom option.
- Data Isolation and Security ControlsHow Guard keeps each tenant's records separate, encrypts sensitive files with per-tenant keys, and protects data in transit.
- Multi-Tenancy vs. Single-TenancyHow Guard's default multi-tenant model isolates your data, and when a single-tenant deployment is offered.
- Authentication with Amazon CognitoOptional TOTP MFA, password policy, advanced security mode, and long-lived auth logging in production.
- Scanning Policy: Protected Domains and Blocked CapabilitiesStatic domain deny lists and per-account capability blocks enforced at job enqueue.