Overview
Guardian is Merdot's security product. It watches the websites and services a business exposes to the internet, blocks hostile traffic before it reaches them, and keeps the company's sensitive data encrypted so that only the company can read it.
It is designed for the same businesses that run on Merdot Sites, Merdot Mail and Merdot Connect: teams that need serious protection without a security department to operate it.
Capabilities
- Website security scanning · continuous checks of a site's exposed surface, with findings ranked by what an attacker could actually reach.
- Live firewall · hostile traffic identified and blocked in real time, with every action recorded.
- Zero-knowledge encryption · company data encrypted on the device before it is stored; keys never leave the browser, so Merdot cannot read it either.
- Incident playbooks · a clear, repeatable response for the common attack patterns a business faces.
- One account · sign in with the same Merdot account used across the ecosystem.
In practice
- A store built on Merdot Sites turns on Guardian and sees, in one view, what its site exposes and what is being blocked at the edge.
- A firm keeps client records encrypted with keys only its own team holds, and can show that no one else, including Merdot, can read them.
- A founder receives a plain-language incident summary instead of a wall of logs when something is attempted against the site.
Availability
Live at guardian.merdot.com.