Real-time asset inventory, software monitoring, policy enforcement and firewall control — agent to server to dashboard.
Guardian uses a lightweight PyQt6 agent installed on each Windows endpoint. Agents report to a central FastAPI server hosted on Oracle OCI, which powers the web dashboard.
| Hostname | OS | Last Seen | Status |
|---|---|---|---|
| WKSTN-042 | Win 11 Pro | Just now | Protected |
| SRV-DC01 | Win Svr 22 | 12s ago | Protected |
| LAPTOP-HR07 | Win 11 Home | 2m ago | Policy Drift |
| KIOSK-REC01 | Win 10 | 8m ago | Unapproved SW |
| Hostname | CPU | RAM | Disk | OS | Last Scan |
|---|---|---|---|---|---|
| WKSTN-042 | Intel i7-12700 | 16 GB | 512 GB SSD | Win 11 Pro | Just now |
| SRV-DC01 | Xeon E-2388G | 64 GB | 2 TB NVMe | Win Svr 2022 | 1m ago |
| LAPTOP-HR07 | Intel i5-1135G7 | 8 GB | 256 GB SSD | Win 11 Home | 2m ago |
| KIOSK-REC01 | AMD Ryzen 3 | 4 GB | 128 GB HDD | Win 10 Pro | 8m ago |
| WKSTN-098 | Intel i9-13900 | 32 GB | 1 TB NVMe | Win 11 Pro | 10m ago |
| Application | Version | Endpoints | Publisher | Status |
|---|---|---|---|---|
| Microsoft 365 | 16.0.17 | 128 | Microsoft | Approved |
| Google Chrome | 124.0 | 118 | Google LLC | Approved |
| 7-Zip 23.01 | 23.01 | 76 | Igor Pavlov | Approved |
| VLC Media Player | 3.0.21 | 1 | VideoLAN | Blocked |
| TeamViewer | 15.52 | 2 | TeamViewer GmbH | Review |
| uTorrent | 3.6.0 | 1 | BitTorrent Inc. | Blocked |
| Policy Check | Scope | Pass | Fail | Result |
|---|---|---|---|---|
| Approved software only | All endpoints | 127 | 1 | Partial |
| Firewall enabled | All endpoints | 128 | 0 | Pass |
| Windows Defender active | All endpoints | 126 | 2 | Partial |
| No P2P software | All endpoints | 127 | 1 | Fail |
| BitLocker enabled | Laptops only | 12 | 0 | Pass |
| Remote access policy | All endpoints | 126 | 2 | Partial |
| Rule Name | Direction | Protocol | Port | Action | State |
|---|---|---|---|---|---|
| Allow RDP | Inbound | TCP | 3389 | Allow | Enabled |
| Block Telnet | Inbound | TCP | 23 | Block | Enabled |
| Allow HTTP/S | Outbound | TCP | 80,443 | Allow | Enabled |
| Custom Rule #14 | Inbound | UDP | 4500 | Allow | ⚠ Unapproved |
| Block SMB | Inbound | TCP | 445 | Block | Enabled |
| Time | Endpoint | Event | Severity | Detail |
|---|---|---|---|---|
| 14:22:08 | KIOSK-REC01 | Software installed | High | VLC Media Player 3.0.21 |
| 14:18:53 | LAPTOP-HR07 | Firewall rule added | Medium | UDP 4500 inbound allowed |
| 14:10:01 | WKSTN-042 | Policy auto-enforced | Info | Unapproved app removed |
| 14:05:44 | SRV-DC01 | Agent check-in | Info | Full telemetry received |
| 13:58:12 | WKSTN-098 | Registry key changed | Medium | HKLMHKLM\SOFTWARE\Policies#92;SOFTWAREHKLM\SOFTWARE\Policies#92;Policies |
| 13:45:30 | LAPTOP-HR07 | Login event | Info | User: hr\priya.sharma |
| 13:30:00 | ALL | Compliance scan | Info | 128 endpoints · 99.2% pass |
| Hostname | Agent Ver. | IP Address | Check-in | OS | Status |
|---|---|---|---|---|---|
| WKSTN-042 | Active | 192.168.1.42 | Just now | Win 11 Pro | Online |
| SRV-DC01 | Active | 192.168.1.10 | 12s ago | Win Svr 22 | Online |
| LAPTOP-HR07 | Active | 192.168.1.71 | 2m ago | Win 11 Home | Online |
| KIOSK-REC01 | Active | 192.168.1.91 | 8m ago | Win 10 | Online |
| WKSTN-098 | Active | 192.168.1.98 | 10m ago | Win 11 Pro | Online |
| Policy Name | Scope | Enforcement | Last Updated | State |
|---|---|---|---|---|
| Approved Software List | All endpoints | Auto-remove | 2 days ago | Active |
| Firewall Always On | All endpoints | Auto-enforce | 1 week ago | Active |
| No P2P Applications | All endpoints | Block + Alert | 1 week ago | Active |
| No Remote Access Tools | Kiosks only | Alert only | 3 days ago | Active |
| BitLocker Required | Laptops only | Report only | 1 week ago | Active |
| Registry Monitor | Servers only | Alert + Log | 5 days ago | Active |
| Login Audit | All endpoints | Log only | 1 week ago | Active |
| USB Device Control | All endpoints | Block + Alert | Draft | Draft |
Automatic discovery and cataloguing of all hardware assets — CPU, RAM, disk, peripherals — updated on every agent check-in.
Real-time inventory of every installed application across all endpoints. Flag, block, or auto-remove unapproved titles.
View, enable, disable, and create firewall rules remotely from the dashboard — no RDP, no VPN required.
Define compliance policies and let Guardian enforce them automatically — blocking installs, triggering alerts, and remediating drift.
Monitor critical Windows registry keys for unauthorised changes — with full before/after diff logs per endpoint.
Generate and export compliance snapshots to CSV — fleet-wide or per-endpoint — ready for audit submissions.
Install the Guardian agent on each Windows machine via MSI installer. It runs silently as a Windows service.
Each agent collects hardware info, installed software, firewall state, and registry snapshots — then securely reports to the central server.
The FastAPI server on Oracle OCI stores all telemetry, evaluates policies, and surfaces violations for the dashboard in real time.
From the web dashboard — view all endpoints, run remote actions, enforce policies, and export compliance reports in one click.
Get a personalised Guardian demo for your organisation — we'll walk you through deployment, policies, and the dashboard live.