> ## Documentation Index
> Fetch the complete documentation index at: https://docs.panguard.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Product Suite Overview

> Panguard AI ships integrated products that cover the full security lifecycle -- from scanning and detection to response, compliance, and collective intelligence.

Panguard AI is not a single tool. It is an integrated platform of complementary products, each focused on a specific stage of the security lifecycle. Together they form a closed loop: scan your systems, monitor them in real time, notify the right people, generate compliance reports, and share intelligence across your fleet.

## The Product Suite

<CardGroup cols={2}>
  <Card title="Scan" icon="magnifying-glass" href="/products/scan/overview">
    60-second security audit with 10 scanners. Produces a risk score (0--100), severity-graded
    findings, optional PDF reports, and compliance reports (ISO 27001, SOC 2, TCSA).
  </Card>

  <Card title="Guard" icon="shield" href="/products/guard/overview">
    24/7 real-time monitoring powered by a 4-agent DARE pipeline (Detect, Analyze, Respond, Report).
    10 monitor types, event correlation, automated threat response, and built-in notifications via
    Telegram, Slack, Email, and Webhook.
  </Card>

  <Card title="MCP Server" icon="plug" href="/products/mcp/overview">
    Model Context Protocol server exposing 12 Panguard tools to AI assistants like Claude Desktop
    and Cursor.
  </Card>

  <Card title="Threat Cloud" icon="cloud" href="/products/threat-cloud/overview">
    Collective threat intelligence platform. Every Guard instance contributes anonymized threat
    data, and every instance benefits from the community's detections.
  </Card>

  <Card title="Migrator" icon="arrow-right-arrow-left">
    Convert legacy Sigma + YARA detections into ATR YAML. Community on npm
    (`@panguard-ai/migrator-community@0.1.0` MIT) ships parsers, IR transformer, CLI. Enterprise
    adds 5-framework compliance auto-mapping (EU AI Act, OWASP Agentic, OWASP LLM, NIST AI RMF,
    ISO/IEC 42001), signed evidence packs, ATR upstream contribution pipeline.
  </Card>
</CardGroup>

## How the Products Work Together

The products are designed to complement each other in a layered defense strategy:

```
Scan ──> Guard ──> Threat Cloud
```

| Workflow                 | Products Involved    | Description                                                                                                                               |
| ------------------------ | -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- |
| **Assess and Protect**   | Scan + Guard         | Run a one-time scan to establish your baseline, then enable Guard for continuous monitoring.                                              |
| **Detect and Notify**    | Guard                | Guard detects threats in real time and delivers plain-language notifications to your preferred channel (Telegram, Slack, Email, Webhook). |
| **Comply and Report**    | Scan                 | Scan findings map directly to compliance controls. Generate audit-ready PDF reports with `panguard scan --output report.pdf`.             |
| **Scale and Centralize** | Guard + Threat Cloud | Deploy Guard agents across your fleet and correlate threats globally via Threat Cloud.                                                    |
| **AI Copilot**           | MCP + Scan + Guard   | Use natural language in Claude or Cursor to run scans, check status, and block IPs via the MCP server.                                    |

## Architecture at a Glance

Panguard is built as a **18-package TypeScript monorepo** managed by pnpm workspaces. All packages share a common `@panguard-ai/core` foundation that provides the rule engine, monitor engine, AI provider abstraction, i18n, and structured logging.

| Layer            | Components   | Responsibility                                   |
| ---------------- | ------------ | ------------------------------------------------ |
| **Endpoint**     | Guard, Scan  | Local detection, scanning, and notifications     |
| **Management**   | Guard        | Endpoint protection and local fleet coordination |
| **Intelligence** | Threat Cloud | Collective IoC sharing                           |
| **Integration**  | MCP          | AI assistant integration                         |

<Info>
  Each product can run independently. You do not need to deploy the full suite. Start with `panguard
      scan` and add products as your needs grow.
</Info>