Attackers already know
where you are vulnerable
Do you?

A pentest is a snapshot: it shows how you looked that day. But your surface changes every week, a new subdomain, an expiring certificate, an outdated library, a CVE released yesterday. cidguard swaps the snapshot for the movie: it scans your assets continuously, from the viewpoint of whoever tries to break in, and alerts you when something changes. You stop discovering problems in an audit and start fixing them first.

No. cidguard looks at your assets from the outside, exactly as an attacker sees them, with nothing to install, no VPN, no credentials in your network. You just confirm the domain is yours (a DNS TXT record) and the analysis begins. Zero friction with your IT team.

No, and we insist on being honest about it: manual pentests and formal audits play a role no tool automates. cidguard covers the gap between them, the continuous monitoring of what is exposed, and gets you to those moments far more prepared, with the homework done and the evidence in hand.

Every scan produces a 0 to 100 score with an A to D grade, broken down by pillar (application, network, identity, threats). It is not a magic number: it is auditable, you see exactly which findings make it up and how it evolves each cycle. It is the number the board understands and the engineer can defend.

We help you see where your technical vulnerabilities impact LGPD and ISO 27001 controls, with the evidence ready and an auditable PDF report (with an integrity fingerprint) to take to your data protection officer, your board or a client. It is the bridge between "we have an XSS" and "this affects Article 46 of the LGPD". It is not a compliance seal, it is the technical foundation that backs the conversation.

That is where continuous shines. Every day cidguard cross-checks the stack it detected on your assets against public CVE databases. If a new vulnerability starts affecting you, you find out. On the Pro and Enterprise plans, with a proactive email alert the same day, prioritized by real impact.

Yes, and for a security company that is non-negotiable. Each customer is isolated (multi-tenant), access is protected by strong authentication with MFA, everything travels encrypted, and downloading sensitive reports requires a verified domain. We treat your exposure data with the same care we ask you to have with yours.

It starts at R$ 890/month (Starter plan), with no setup fee and no lock-in. It is month to month, you adjust or cancel whenever you want. Compared to the cost of a single incident, it is cheap insurance. You sign up yourself in minutes, right on the site.