The infrastructure layer for companies that cannot afford downtime.
SLF Guardian runs your servers, certificates, DNS and websites as a managed service and scans your internet-facing systems on a fixed schedule from the data centre you choose. Everything we report is reviewed first, and we write only what we can show.
Is your website already compromised?
- Passive and non-intrusive
- No sign-up
- Results in seconds
- Managedinfrastructure operations
- Writtenscope and response times
- 4languages supported
- TLS certificatesValid
- Server patch levelCurrent
- Backups verifiedPassed
- Scheduled scanCompleted
Every result lands in your monthly infrastructure report.
- E-commerce
- Clinics & practices
- Hospitality
- Manufacturing
- Agencies
Two services, one operating model
Take one of them or both.
Corporate infrastructure management
We operate your servers, certificates, DNS, backups and updates as a managed service with defined response times.
See details 2Periodic security scanning
Your internet-facing systems are scanned on a fixed schedule from the data centre you choose; findings are rated and delivered in a report you can act on.
See detailsData centre location for your scans
Your periodic security scans are run from our data centre in this location. The closest location to your country is selected automatically; you can change it.
Guardian plans
Periodic security scanning from the outside, from the data centre you choose. Results arrive as a report every month.
- Periodic scanning
- Monthly report
- No access to your systems required
- Tested from the outside only
- SSL/TLS and certificate checks
- Periodic basic port scanning
- Security headers
- Email security (SPF/DMARC)
- Exposed software versions
- Spam and malicious code traces
- Redirect checks
- Everything in Guardian
- Extended port and service scanning
- Exposed admin panels
- SQL injection and XSS testing
- Exposed sensitive files (.git, .env, backups)
- Advanced DNS checks (DKIM, DNSSEC, CAA)
- Detailed TLS configuration (protocols, ciphers)
- Subdomain discovery
- Cookie, CORS and directory listing checks
- Everything in Guardian Pro
- Dedicated scanning server with a fixed IP
- Extended injection testing
- Known vulnerability (CVE) checks
- Everything in Guardian Max
- Scope agreed for your organisation
- Many domains and systems
- Reporting to your format
Active tests (ports, injection) run only on domains you prove you own and authorise in writing. Billed monthly, cancel any month.
How the platform works
The same operating model behind every service.
Continuous telemetry
Certificates, DNS records, domain expiry, patch levels, uptime and response times are collected on a schedule — not once a year.
Analysis and rating
The collected data is correlated, every finding is rated by severity and a remediation plan is drafted.
Reviewed output
Nothing reaches you unreviewed. Findings we cannot substantiate are removed from the report.
Documented remediation
Where we operate the system, we fix the issue and record what changed, when and why.
What we do and what we never do
In scope
- Operating and hardening systems you own or authorise
- Scheduled checks of publicly reachable configuration
- Certificate, DNS and domain lifecycle management
- Backups, restore tests and update windows
Out of scope
- Testing systems without written authorisation
- Password attacks or exploitation attempts
- Claiming a vulnerability we have not verified
- Publishing findings about third parties
Frequently asked questions
Short answers to the questions we hear most.
Do you need access to our systems?
For periodic scanning, no — the public address is enough. For infrastructure management we agree the access we need in writing before anything starts.
How do we receive the results?
A monthly report plus alerts whenever something urgent appears.
What are the contract terms?
Monthly. No long lock-in; notice in writing is enough.
Who owns the infrastructure?
You do. Accounts, servers and domains stay in your name; we operate them for you.
Can you work with our existing provider?
Yes. We take over operations on the hosting and registrar you already use, or migrate you if you prefer.
Let us look at your current setup
Send us your domain and a short description of your environment. You get a written assessment back — no access required for the first step.