Deployment and access
Would Guardian One work with a web front end at a customer site?
Yes. The website can be hosted on the customer’s intranet or internet-facing infrastructure, subject to their authentication, TLS, firewall and publication controls. The Enterprise Portal reads assessment data from the Guardian One SQL repository.
Does Guardian One have to use a web front end?
No. Assessments can be run from the command line and standalone HTML reports can be opened locally or shared through a customer-controlled route. The web interface is optional.
Where does Portable Demo store assessment data?
It stores structured evidence, findings, health and integrity digests in a local SQLite database on the licensed Windows installation. Optional HTML exports are files; HTML is not stored in the database.
Security and permissions
How are SQL Server authentication passwords held securely and maintained?
SQL Server authentication is not supported in this release. Guardian One uses the Windows identity running the assessment, so SQL passwords must not be placed in the environment file, source, reports or logs. A future SQL-authentication option must use an approved secrets vault and documented rotation process before it can be enabled.
What happens when remote Windows access is blocked?
SQL-derived evidence continues to be assessed. Windows-dependent evidence is marked unavailable or not assessed with the collection reason. Missing evidence is not shown as healthy and does not become a compliance pass.
Does Guardian One require third-party diagnostic procedures?
No. Native SQL Server and Windows evidence provides a useful assessment without third-party tools. Supported optional procedures add specialist evidence when installed, permitted and enabled.
Portable Demo and licensing
Is Portable Demo a real assessment?
Yes. It connects to approved SQL Server targets and runs the same in-scope collectors, rules and report construction permitted by its entitlement. It is not a set of fabricated results.
What is the five-instance restriction?
A Portable Demo installation can register up to five canonical SQL Server instance identities for its lifetime. A registered slot cannot be deleted or replaced to assess another target.
Can the installation simply be copied to another machine?
No. The signed licence is bound to the approved Windows installation. A missing, invalid, expired or mismatched licence prevents the protected workflow from running and records a clear validation error.
Need a customer-specific answer?
Use the contact page to prepare an enquiry. Nothing is sent automatically; the customer controls how the enquiry is shared.
Open Contact usPrepare and download or share a structured enquiry.