Does the client need to install anything?▾
For cloud systems (AWS, Okta, Azure) — no. You grant read-only API access via a guided 10-minute setup. For on-prem firewalls (Cisco ASA, Palo Alto), we provide a lightweight Docker-based agent that makes outbound-only connections — no inbound ports required.
Is my infrastructure data safe?▾
All credentials are stored in AWS Secrets Manager with AES-256 encryption, namespaced per organisation. We hold read-only permissions only — it is technically impossible for NetGuard to modify anything in your infrastructure. All data is encrypted at rest and in transit (TLS 1.3).
How is this different from Vanta or Drata?▾
Vanta and Drata focus on SaaS integrations (GitHub, Google Workspace, HR tools). They handle firewall and network compliance poorly. NetGuard is built specifically for network and infrastructure-heavy environments — we go deep on PCI DSS firewall requirements, network segmentation, and on-prem systems that generic tools skip entirely.
How long does onboarding take?▾
Most customers connect their first integrations and run their first scan within 30 minutes of getting started. Your first full compliance report can be ready the same day. There is no professional services engagement required.
Can I add custom compliance controls?▾
Yes, on the Enterprise plan. You can define custom controls in YAML, map them to any data source, and they appear alongside the standard framework controls in your dashboard and reports.
What if a scan fails or a connector goes stale?▾
You'll receive an email and Slack alert immediately. Each data source shows a last collected timestamp in the dashboard. Failed collections are retried automatically 3 times with exponential backoff before alerting you.
What's the difference between the C-Level, Summary, and Technical reports?▾
They all come from the same scan — zero extra work. The C-Level report is a plain-English brief written for executives: no acronyms, no control IDs, just business risk and what leadership needs to authorise. The Summary report gives managers a compliance score, category-by-category breakdown, and the top findings. The Technical report is for your IT team — every control with the raw evidence collected and numbered step-by-step instructions on exactly how to fix each failing issue.
What is the Cross-Framework Map?▾
It's a single matrix that shows how every security check maps across all eight frameworks (SOC 2, PCI DSS, ISO 27001, NIST CSF, SACS-002, NCA ECC, SAMA CSF, CBB Cybersecurity Framework) at the same time. Instead of running separate audits, you can see at a glance which checks satisfy multiple frameworks simultaneously — and where you have gaps in specific frameworks. Available as an interactive view in the dashboard and as a PDF export.
Why is NetGuard cheaper than Vanta or Drata?▾
We don’t charge per seat or per integration. You pay per organisation, and the price reflects the size of your asset footprint — not how many people are on your team. We’re also not trying to be a general-purpose GRC tool. NetGuard does one thing exceptionally well: compliance automation for infrastructure-heavy environments.
Do you support GCC compliance frameworks — SACS-002, NCA ECC, SAMA CSF, and CBB?▾
Yes. NetGuard includes full coverage for all four regional frameworks. SACS-002 (Saudi Aramco Third Party Cybersecurity Standard) is required for any company supplying services to Saudi Aramco. NCA ECC 2-2024 is mandatory for Saudi government entities and Critical National Infrastructure organisations. SAMA CSF is required for Saudi banks, insurance companies, and all SAMA-regulated financial institutions. The CBB Cybersecurity Framework is mandatory for all Central Bank of Bahrain-licensed financial institutions — including banks, fintech, insurance, payment providers, and crypto-asset firms — with a strict 2-hour incident notification requirement. Each framework maps to your existing integrations — AWS, Okta, GitHub, Meraki — so automated checks run immediately without extra configuration.
Where is NetGuard available?▾
NetGuard is available globally with a specific focus on the MENA region. We support GCC-specific frameworks including SACS-002, NCA ECC, SAMA CSF, and CBB CSF — frameworks no other compliance platform supports.
Is NetGuard built for MENA companies?▾
Yes. NetGuard is purpose-built for MENA’s regulatory environment. We support all 4 major GCC compliance frameworks alongside global standards like SOC 2, ISO 27001, and PCI DSS — so you can achieve regional compliance and global certifications from one platform.
Do you support the CBB Cybersecurity Framework?▾
Yes. NetGuard includes the full CBB Cybersecurity Framework with 29 controls across the five NIST-aligned functions (Identify, Protect, Detect, Respond, Recover) plus five CBB-specific specialised controls covering cloud outsourcing (OM-2 approval), Privileged Access Management, CBB CERT registration, cyber insurance, and crypto-asset security. The framework includes Bahrain-specific context — including the 2-hour CBB incident notification SLA and OM-2 cloud outsourcing approval requirements — with automated checks for controls that map to your AWS, Okta, and GitHub integrations.