Segurança Contra IA CyberGuard AI
Protecting businesses from the next generation
of digital threats
Segurança Contra IA Segurança Contra IA CyberGuard AI
Digital guardian · Artificial intelligence · 24 hours

One AI guardian watching over your website day and night

While you work, CyberGuard AI scans your domain, compares it with the previous day, and alerts you as soon as something changes. Protection against hackers, misconfigurations, and threats created by other artificial intelligences — for businesses and also for those who just want to protect their own website.

Nothing to install on your computer. The analysis only reads what is already public on your domain.

62website score
No Content-Security-Policyhigh
HTTP without redirectmedium
Server version exposedlow
Valid HTTPS in 78 daysok

Example of dashboard reading after an evaluation.

A digital security hub

CyberGuard AI brings together asset discovery, vulnerability analysis, monitoring, and reporting into a single dashboard. You see your website's risk today — and track the evolution.

🔎

Inventory and discovery

Domains, subdomains, and services exposed on the internet.

🛡️

Vulnerability analysis

Headers, TLS, cookies, exposed files, open ports, and DNS hygiene.

📊

Unified risk score

Score from 0 to 100, with severity and remediation priority.

📄

Executive report

Printable document with evidence and technical recommendation for each finding.

🤖

AI-powered enhancement

Findings translated into an action plan in your business language.

⏱️

History and evolution

Each execution is recorded: score before and after remediation.

🔐

Multi-tenant

Each company only sees its own assets, results, and reports.

🚨

AI threats

Checks focused on automated attacks and phishing using your domain.

The squad guarding your website

01 DNS
02 TLS
03 Headers
04 Files
05 Rede
06 Uptime
07 IA

It's not just one robot. There are seven specialized agents working in different shifts — each one looks at a part of your environment and reports to the AI analyst, who puts everything together in a note and an action plan.

01 · DNS

Domain agent

A, NS, MX, SPF, DMARC, and CAA records. Detects brand spoofing and domains lacking certificate protection.

02 · TLS

Certificate agent

HTTPS validity, chain, and trust. Alerts before expiration—not after the browser displays an "insecure site" warning.

03 · HEADERS

Browser agent

HSTS, CSP, X-Frame-Options, nosniff, Referrer, Permissions, and CORS. Prevents script injection and clickjacking.

04 · EXPOSURE

Files agent

Scans 22 critical paths: .env, .git, backups, .sql dumps, adminer, phpinfo, wp-json, logs, and editor directories.

05 · NETWORK

Ports agent

Databases, FTP, Telnet, Redis, Mongo, and administrative panels exposed to the internet.

06 · UPTIME

On-call agent

Verifies website uptime, response time, and impending certificate expiration. Alerts once daily.

07 · AI

Analyst agent

Receives data from the other six, prioritizes by business impact, and writes the action plan—what to fix today and what can wait.

NEXT

Reinforcements on the way

Email agent (anti-phishing), WAF agent, and AI agent (prompt injection and LLM leakage). Rolling out as the user base grows.

We are transparent about our scope: a guardian measurably reduces risk—no reputable system promises invulnerability.

The defense extends beyond just the website

Most incidents start from within: shared password, former employee with active access, no one knows who changed what. CyberGuard AI treats people and accesses as part of the protection.

👤

One account per person

Each person logs in with their own credentials. No single password floating around on WhatsApp.

🎚️

Defined roles

The owner decides, the technician applies fixes, and the reader only views. Whoever operates cannot manage users.

🧾

Complete auditing

Every assessment, fix, and access change is logged with date, person, and IP address.

🔑

Google Sign-In

One-click login without creating yet another password. Confirmed payment grants instant access.

And the invitation is a single-use link, valid for 7 days: the user sets their own password, and you never see or store anyone's password.

The seven dimensions of protection

Each layer is an independent agent. None of them alone can stop a real attack — it is the sum of them that closes the gap before anyone gets through.

01
02
03
04
05
06

Seven layers, a single score

  • 01 Domain and DNS
  • 02 Certificate
  • 03 Headers
  • 04 Files
  • 05 Network and ports
  • 06 Availability
  • 07 AI Analyst

The first six are technical checks. The seventh is the AI Analyst: it cross-references the results of the other six, prioritizes them by business impact, and writes down what to do first. Without this layer, you receive a bunch of alerts without knowing where to start.

Attacks do not come in a single dimension

Attackers do not break in through a single point: they exploit an expired certificate to intercept traffic, an open port to get in, and an exposed backup to steal data. Layered protection is what turns three small vulnerabilities into no viable path.

When the scanner is not enough

The platform covers the attack surface. For deep investigation, controlled exploitation, and incident response, our team steps in.

Professional pentest

Authorized penetration testing with a signed scope, evidence, and technical and executive reports.

Incident response

Containment, eradication, and recovery — with evidence preservation.

Auditing and LGPD

Personal data mapping, legal basis, retention, and compliance plan.

Red Team

Real attack simulation, including social engineering, under contract.

Forensic analysis

Investigation of breaches, leaks, and fraud with a chain of custody.

AI security

AI application review: prompt injection, data leakage, and model abuse.

Plans

From personal websites to multi-domain enterprises. Start for free and subscribe whenever you want the on-call guardian.

Personnel

R$ 29.90 /month

For anyone with a website, blog, or portfolio who wants to sleep peacefully.

  • up to 2 assets
  • Weekly assessment
  • Uptime and certificate alerts
  • PDF report
Subscribe to Personal

Diagnostic

Free

A comprehensive assessment of your primary domain.

  • 1 asset
  • Security score
  • Report with findings
Get started now
Most popular

Protection

R$ 297 /month

Continuous monitoring of your digital environment.

  • up to 5 assets
  • Automatic weekly assessment
  • New findings alerts
  • Monthly executive report
  • 1 hour of consulting/month
Subscribe to Protection

Enterprise

Contact for pricing

For those who need SLA, multi-unit capabilities, and technical services.

  • unlimited assets
  • daily monitoring
  • pentest and incident response
  • direct channel with the team
Request a proposal

Launch pricing. Pentest and incident response are scoped individually.

How it works

1
Create the company account

Email and basic information. Each company has its own workspace.

2
Register your domain

We only evaluate what belongs to you — and strictly read-only public information.

3
Run the assessment

DNS, certificate, headers, exposed files, and ports: in seconds.

4
Fix using the report

Each finding comes with evidence and the exact fix command.

5
Monitor

Run it again after the fix and watch your score go up.

What we check

DNS · A, NS, MX, SPF, DMARCemail
TLS and HTTPS certificatetransport
HSTS, CSP, X-Frame-Options, nosniffheaders
.git, .env, backups, phpinfoexposure
MySQL, Redis, Mongo, FTP, Telnetports
Cookies without Secure/HttpOnlysession

Frequently asked questions

Can the assessment take down my website?

No. It makes standard HTTP requests, queries DNS, and tests connection on specific ports — no exploitation, no heavy load.

Do I need to install anything on my server?

No. Everything runs on our end, looking at your domain from the outside — the way an attacker would.

Does this replace a pentest?

No. The assessment covers the public attack surface and configuration hygiene. A pentest tests deep vulnerability exploitation within a signed scope.

Do you store my data?

We store the assessment results of the domain itself for history and reporting purposes. We do not access internal content, databases, or private files.

Is it suitable for online stores and custom systems?

Yes — the target is the public domain. It works for corporate websites, e-commerce stores, APIs, and exposed panels.

Discover what is exposed today

Free diagnosis in minutes, complete with a report for your domain.

Create account and assess now Subscribe to Protection