Numo Guard
Continuous, agentless security for your public apps. Guard scans from the outside, grades each target A–F, and tells your team the moment its posture slips — no install, no scripts to babysit.
How it works
- 01
Add a target
Point Guard at a URL. Passive posture checks — TLS, headers, cookies, exposed files, DNS/email — start immediately, no verification needed.
- 02
Verify to go deeper
Prove ownership with a TXT record to unlock active DAST + fuzzing: XSS, SQLi, SSTI, traversal, CORS — GET-only, rate-limited, non-destructive.
- 03
Watch the grade
Guard tracks findings over time, grades each asset A–F, and alerts on new criticals or a grade drop via your existing channels.
Features
Passive + active scanning
Agentless posture checks on any target, plus a full DAST/fuzzing suite on domains you've verified — behind your login when you add a credential.
CI/CD security gate
Fail a build on regressions. A two-call API (queue → poll) exits non-zero on any open finding at or above your threshold. Copy-paste shell or GitHub Actions.
Shareable trust report
Publish a redacted report with an A–F grade and a compliance scorecard mapped to OWASP Top 10, PCI DSS, and SOC 2 — for customers and auditors.
Attack-surface discovery
Find subdomains from certificate transparency logs and promote them to monitored assets in a click.
Continuous monitors
New-certificate watch, look-alike/typosquat detection, breach-directory lookups, and homepage defacement alerts.
AI remediation
One click turns any finding into a concrete, contextual fix plan — cached per finding and metered so costs stay predictable.
Numo Guard pricing
Start free. Upgrade Numo Guard on its own — monthly or annual. Members and channels are shared across your workspace.
Free
.
- 1 security assets
- Passive posture only
- No CI/CD gate
- No AI remediation
- 3 team members
- Alerts: Slack · Discord
Pro
Popular.
- 5 security assets
- Active DAST + fuzzing
- No CI/CD gate
- 20 AI fixes / mo
- 5 team members
- Alerts: Slack · Discord · Email
Team
.
- 20 security assets
- Active DAST + fuzzing
- CI/CD security gate
- 100 AI fixes / mo
- 15 team members
- Alerts: Slack · Discord · Email · Webhook
Business
.
- 100 security assets
- Active DAST + fuzzing
- CI/CD security gate
- 500 AI fixes / mo
- Unlimited team members
- Alerts: Slack · Discord · Email · Webhook
Members & alert channels are shared across your workspace and follow your highest active plan. Need more? Talk to us about Enterprise.
Know your exposure before an attacker does.
Start on the free plan — no card required. Add your first target and see its grade in minutes.
Start free