Guardian · For compliance, data teams and CTOs

Find what shouldn’t be there —
before it leaves.

Guardian scans the file the moment you hand it over, then gives back a signed report you can put in front of an auditor.

One of the four named agents on Enterprise, where a data team runs them one at a time and signs off on each. On the free and Everyday plans the same engine arrives as a single assistant — you hand it a file and it gets on with it.

The Guardian findings screen listing issues by severity, including a live API key in a free-text column and national identifiers stored in plain text.
From the live demo — findings on a customer file, ranked by severity, before it leaves the machine.
The problem

You find out after it’s already gone.

The export nobody checked

A CSV goes to a partner with a column of national IDs in plain text that nobody thought to look for.

The audit

Risk surfaces months later in an audit finding, when remediation is expensive and the exposure window is already long.

The manual review

Checking by hand doesn’t scale past a few thousand rows, so in practice it stops happening at all.

How it runs

Three steps, and you see all of them.

Nothing happens off-screen. Each step is shown before the next one starts.

1
Scan

Drop in a file — customer_master_export.csv

2
Findings

3 things need attention: 2 critical, 1 high, each with the rows that prove it.

3
Report

→ 622 national IDs and a live API key, report ready to export

Real example — gqx-Guardian
3 things need attention before this file leaves your machine.
2 critical 1 high National IDs in plain text · 622 rows
What it does

Guardian in full

Everything Guardian does, and what each one is actually for.

PII & secret detection

National IDs, card numbers, keys sitting in plain text — found by pattern and by statistics, not by guesswork.

Schema violations

Columns that changed shape and values that broke their own rules, flagged with the rows that prove it.

GDPR & HIPAA framing

Findings are grouped the way the regulation reads, so the fix list lines up with the obligation.

Signed audit reports

A report naming what was found, where, and how many rows — ready to file rather than re-type.

Severity that means something

Critical and high are assigned on exposure, not on a generic rule count, so the top of the list is the real top.

Nothing leaves to be checked

On the free and Everyday plans the scan happens on your machine. The file being checked for exposure is not itself uploaded anywhere.

The rest of the suite

Guardian is one of four

They share one workspace, one audit trail, and one set of connections to your data.

See Guardian run on your own data

It’s free to try on your machine — no account, no credit card.