Start with a person
Confirm your device, concerns, safe contact method, and scope. An assisted session begins only after you consent.
DEVICE SECURITY. HUMAN GUIDANCE.
More than a one-time scan. Assisted installation, reviewed updates, repeat forensic checks, and clear next steps — with your private evidence kept on your device by default.
iPhone · Android · Mac · Windows
Coverage depends on device, OS, available evidence, and approved tools.
BUILT FOR AN EVOLVING THREAT
Commercial spyware includes Israeli-developed tools such as NSO Group’s Pegasus, QuaDream’s REIGN, and Candiru-linked spyware, alongside tools from other vendors. Public research informs our approach; it does not establish detection coverage for your device.
We help install reviewed tools, assess available indicators, explain results, and plan repeat checks as knowledge changes. Newest does not automatically mean approved.
Read the independent research ↗Confirm your device, concerns, safe contact method, and scope. An assisted session begins only after you consent.
Use appropriate, approved tools. Record engine versions, indicator dates, evidence limits, and anything we could not check.
Plan hardening, reviewed updates, new capabilities, and repeat checks. Serious findings need specialist review.
A CLEAR PATH FORWARD
Assisted service, built around your needs.
Scope, availability, and pricing confirmed before commitment.
ESTABLISH A BASELINE
Understand what can be checked today.
KEEP IT CURRENT
Security care that continues after installation.
WHEN MORE HELP IS NEEDED
A careful path from concern to specialist review.
Requests are not bookings. See how pricing will work. No payment is collected here. Guard is periodic managed care, not continuous device surveillance. Response is not an emergency service.
CLARITY, WITHOUT FALSE CERTAINTY
No matches in the evidence examined using the specified tools and indicator sets. This does not prove the device is safe.
An artifact or match needs investigation. A hit alone does not confirm infection or identify an attacker.
Corroborated findings reviewed by a qualified human support compromise. Preserve evidence and agree on next steps.
Missing evidence, unsupported systems, stale indicators, or failed checks limit the assessment. Gaps are reported alongside any finding.
Multiple engines can expand coverage, but overlapping indicators are not independent confirmation. No uncompleted or failed check receives a “No Known Indicators” result.
YOUR DEVICE. YOUR EVIDENCE. YOUR DECISION.
This website does not accept backups, device logs, messages, or forensic files. Your intake contains only a contact email and a few service choices. There are no advertising trackers or third-party scripts.
Assisted access, diagnostic sharing, or specialist transfer requires a separate explanation and explicit consent covering the recipient, purpose, scope, and retention. Do not send evidence by email.
Contact details are encrypted in the application database. Intake records expire after 30 days; operators must run the deletion task daily. Restricted backups must expire within a further 30 days. Hosting infrastructure processes connection metadata. A strictly necessary session cookie supports intake security and your receipt.
Scanner integration and approved release catalogs are not activated in this MVP. Platform support is assessed during assisted onboarding. We do not promise universal detection, automatic removal, or immunity from future compromise.
If you have a serious concern, use a device and contact channel you trust. Avoid resetting a potentially affected device before discussing evidence preservation with a qualified specialist.
SECURITY THAT DOESN’T STOP AT INSTALL.