Security · Guardian
Security for the websites, inboxes and data an institution runs on.
Scanning, a live firewall, mail protection and zero-knowledge encryption, set up and supported by Merdot.
What it is
Guardian is Merdot's security product. It watches the websites and services an institution exposes to the internet, blocks hostile traffic before it reaches them, protects Merdot Mail inboxes, and keeps sensitive data encrypted so that only the institution can read it.
Visit guardian.merdot.comWho it is for
- Institutions running public websites and portals
- Colleges and schools using Merdot Mail
- Teams without a dedicated security department
Core capabilities
What Guardian does.
- Website security scanning
- Continuous checks of a site's exposed surface, ranked by what an attacker could reach.
- Live firewall
- Hostile traffic identified and blocked in real time, with every action recorded.
- Mail protection
- Spam, fake links and disguised attachments stopped before they reach a Merdot Mail inbox.
- Quarantine with reasons
- Suspicious messages held back, and the user told why.
- Zero-knowledge encryption
- Data encrypted on the device before it is stored. Keys never leave the browser.
- Incident playbooks
- A clear, repeatable response for common attack patterns.
- Plain-language summaries
- Incident summaries instead of raw logs.
How it works
From setup to outcome.
- 1
Connect
Sites, services and mail domains added.
- 2
Scan
Exposed surface checked continuously.
- 3
Block
Hostile traffic and harmful mail stopped.
- 4
Report
Findings and incidents in plain language.
Security and data handling
- Hosted in India.
- Zero-knowledge encryption: Merdot cannot read encrypted company data.
- Every firewall action recorded.
- Handled in line with our DPDP Act 2023 practices.
Deployment and support
- Available on request. Merdot sets up each institution.
- Protection for Merdot Mail is included for Merdot Mail inboxes.
- Console at guardian.merdot.com.
Merdot Mail · Guardian
Every inbox is protected by Guardian.
Incoming mail is checked before it reaches the inbox. Suspicious messages are held in quarantine, and the user is told why.
Spam
Bulk and unwanted mail is filtered out.
Phishing and fake links
Links that imitate real sites are caught before anyone clicks.
Fake or malicious attachments
A file pretending to be a document, such as an app disguised as a PDF, is held back.
- Registrar Office
Revised exam timetable
- Account Services
Verify your login within 24 hours
Blocked by Guardian: fake link - Accounts Dept
Invoice_Sept.pdf
Held by Guardian: this PDF hides a program - Library
New journal access for staff
Illustration. Messages shown are examples.
FAQ
Questions institutions ask.
- Is Guardian self-serve?
- No. Guardian is set up by the Merdot team for each institution. Request a demo to start.
- What does Guardian protect?
- Public websites and services, Merdot Mail inboxes, and sensitive data encrypted with keys only the institution holds.
- Can Merdot read our encrypted data?
- No. Data is encrypted on the device before it is stored and the keys never leave the browser.
- What happens to a suspicious email?
- It is held in quarantine instead of reaching the inbox, and the user is told why it was held.
- Do you publish detection rates?
- No. We do not publish detection figures. We are glad to walk through how Guardian handles your own traffic and mail in a demo.