{"schemaVersion":"1.0","name":"CyberFortify Guardian as a Service","operator":{"name":"CyberFortify Solutions","url":"https://www.cyberfortifysolutions.com","contact":"info@cyberfortifysolutions.com"},"description":"Guardian as a Service delivers Guardian as a policy-bound security system. Guardian Agent Security is the trust, authorization, revocation, and evidence layer inside it.","productModel":{"product":"Guardian","deliveryModel":"Guardian as a Service (GaaS)","agentSecurityRole":"The authorized sponsor, sponsor-registered workload credential, tenant, authorization, revocation, and evidence control layer inside Guardian as a Service"},"operatingModel":{"mode":"autonomous-defense","routineOperations":"Autonomous inside signed policy","governance":"Humans establish signed policy, scope, risk tolerance, and break-glass authority. Guardian performs routine defensive operations without waiting for human action.","failSafe":"Actions outside delegated policy fail closed and are preserved as evidence."},"status":"invitation-only-non-production-non-billable-read-only-preview","capabilities":[{"id":"discover","title":"Discover","description":"Inventory sanctioned and shadow agents, MCP services, browser automation, and delegated identities.","availability":"post-integration-target"},{"id":"decide","title":"Decide","description":"Continuously evaluate identity, tenant, tool, target, risk, and signed mission policy at machine speed.","availability":"post-integration-target"},{"id":"defend","title":"Defend","description":"Detect and disrupt malicious activity through a continuous, policy-bound defensive workflow.","availability":"post-integration-target"},{"id":"contain","title":"Contain","description":"Revoke access, terminate sessions, disable tools, or isolate the affected endpoint when needed.","availability":"post-integration-target"},{"id":"prove","title":"Prove","description":"Preserve a readable evidence chain showing who authorized what, what ran, and what changed.","availability":"post-integration-target"},{"id":"recover","title":"Recover","description":"Validate containment, restore the safe operating state, and keep watching for recurrence automatically.","availability":"post-integration-target"}],"principles":[{"id":"identity-before-access","title":"Sponsor before access","description":"A sponsor-registered workload credential must be attributable to an authorized sponsor and authorization context before access."},{"id":"least-authority","title":"Least authority","description":"Every tool and resource is denied by default, narrowly scoped, and available only for the current task."},{"id":"policy-governance","title":"Policy, not permission queues","description":"Humans establish signed mission policy and break-glass authority. Guardian acts autonomously inside it and fails closed outside it."},{"id":"tenant-isolation","title":"Tenant isolation","description":"The sponsor-registered workload credential, data access, approval, and action scope remain bound to the same authorized organization."},{"id":"verifiable-actions","title":"Verifiable actions","description":"Security decisions and resulting actions produce evidence that operators can inspect and audit."},{"id":"rapid-revocation","title":"Rapid revocation","description":"Agent sessions, credentials, and tools must be independently revocable without disabling the human owner."}],"endpoints":{"trustCenter":"https://agents.cyberfortifysolutions.com","manifest":"https://agents.cyberfortifysolutions.com/api/agent-trust","assessmentPath":"/api/agent-assessment","assessment":"https://agents.cyberfortifysolutions.com/api/agent-assessment","mcp":"https://agents.cyberfortifysolutions.com/mcp","agentCard":"https://agents.cyberfortifysolutions.com/.well-known/agent-card.json","mcpServerCard":"https://agents.cyberfortifysolutions.com/.well-known/mcp/server-card.json","agentSkills":"https://agents.cyberfortifysolutions.com/.well-known/agent-skills/index.json","llms":"https://agents.cyberfortifysolutions.com/llms.txt"},"authorization":{"publicSurface":"Invitation-only, non-production, non-billable read-only information and bounded static artifact assessment only","customerData":"Not exposed","operationalTools":"Not exposed","mutations":"Not exposed","paymentGrantsAuthority":false,"promptCanExpandScope":false,"privilegedAccess":"Requires a separate authenticated, tenant-scoped, policy-bound Guardian service boundary"},"contentPolicy":{"search":"allow","aiInput":"allow for public marketing and documentation","aiTraining":"not granted for proprietary Guardian or CyberFortify Labs material"},"updatedAt":"2026-08-11"}