The Product Suite
Scan
60-second security audit with 10 scanners. Produces a risk score (0—100), severity-graded
findings, optional PDF reports, and compliance reports (ISO 27001, SOC 2, TCSA).
Guard
24/7 real-time monitoring powered by a 4-agent DARE pipeline (Detect, Analyze, Respond, Report).
10 monitor types, event correlation, automated threat response, and built-in notifications via
Telegram, Slack, Email, and Webhook.
MCP Server
Model Context Protocol server exposing 12 Panguard tools to AI assistants like Claude Desktop
and Cursor.
Threat Cloud
Collective threat intelligence platform. Every Guard instance contributes anonymized threat
data, and every instance benefits from the community’s detections.
Migrator
Convert legacy Sigma + YARA detections into ATR YAML. Community on npm
(
@panguard-ai/migrator-community@0.1.0 MIT) ships parsers, IR transformer, CLI. Enterprise
adds 5-framework compliance auto-mapping (EU AI Act, OWASP Agentic, OWASP LLM, NIST AI RMF,
ISO/IEC 42001), signed evidence packs, ATR upstream contribution pipeline.How the Products Work Together
The products are designed to complement each other in a layered defense strategy:Architecture at a Glance
Panguard is built as a 18-package TypeScript monorepo managed by pnpm workspaces. All packages share a common@panguard-ai/core foundation that provides the rule engine, monitor engine, AI provider abstraction, i18n, and structured logging.
Each product can run independently. You do not need to deploy the full suite. Start with
panguard scan and add products as your needs grow.