Guard Infra | Products

🟢 AVAILABLE NOW

Cloud Guard — AWS Security & Cost Scanner

Multi-tenant SaaS architecture designed to secure and optimize your AWS environment. Zero long-term credentials required using secure STS AssumeRole onboarding via CloudFormation.

EC2 Instance Auditor

Detects stopped, idle, and over-provisioned instances to eliminate wasted spend.

S3 Security Scanner

Public access detection, bucket policy analysis, and comprehensive ACL auditing.

RDS Optimizer

Identifies over-provisioned databases and unused read replicas in real-time.

Cost Explorer

Real-time cost tracking, savings recommendations, and intelligent budget alerts.

Slack Integration

Real-time alerts, weekly summary reports, and configurable custom thresholds.

1-Click Onboarding

Deploy a CloudFormation stack for STS AssumeRole to onboard without static keys.

Client → Guard API → STS AssumeRole → Target AWS Account
     ↓
[EC2] [S3] [RDS] [Cost Explorer] [IAM]
     ↓
Findings → SQLite → Dashboard + Slack Alerts

Launch Cloud Guard Free while in early access

🟡 COMING SOON

Data Guard — A firewall for bad data

Catches silent data failures in APIs and databases before they break logic downstream. A column that changed type, a load that brought a tenth of its usual rows, a field that went from 2% null to 60% — none of these throw an error, and all of them are wrong.

Source agnostic

The same rules run against API payloads and SQL rows.

SQL pushdown

Compiles rules into WHERE clauses so failures are found without pulling every row.

Declarative rules

JSON rule definitions that are portable and readable by non-authors.

Alerts on change only

A state machine fires on PASS ↔ FAIL transitions, not on every run.

Star on GitHub

🟣 OPEN SOURCE

Shield — High-Performance Rate Limiter & DDoS Engine

A distributed Go middleware providing sub-millisecond enforcement and DDoS defense with automatic IP reputation scoring.

Go HTTP Middleware

Drop-in middleware compatible with any Go standard HTTP server.

Multiple Algorithms

Configurable algorithms including sliding window, token bucket, and fixed window.

Flexible Backends

Choose between fast in-memory for single instance or Redis for distributed setups.

Sub-millisecond Latency

Highly optimized, benchmarked at <0.1ms per request evaluation.

DDoS Protection

Distributed defense system with automatic IP reputation scoring and ban features.

limiter := shield.NewRateLimiter(
    shield.WithAlgorithm(shield.SlidingWindow),
    shield.WithRate(1000, time.Minute),
    shield.WithBackend(shield.Redis(redisClient)),
)
http.Handle("/api/", limiter.Middleware(apiHandler))

View Source Code

Product Comparison

Feature	Cloud Guard	Data Guard	Shield
What it watches	AWS accounts	APIs & SQL databases	Your API traffic
Status	LIVE	OSS	OSS
Pricing	Free in early access	Free	Free
Built with	Go · SQLite	Go · PostgreSQL · Next.js	Go · Redis
How you run it	Hosted	Self-hosted	Self-hosted
Key Feature	Cost & Security Audits	Catching bad data early	Rate Limiting
GitHub	Private	Repository	Repository

Platform Solutions