Scantide Guard Datacenter
Manage multiple Guard servers from one control point: distribute policy, see attack activity across the fleet, coordinate shared blocking and reputation, and understand which systems are protected.
Windows and Linux Guard enrollment
Enroll and manage supported Windows, Linux and Legacy Guard systems from the same Datacenter environment.
Central and per-monitor policy
Distribute global defaults while retaining monitor-specific thresholds, block behavior and configuration where an application needs different rules.
Role-aware notifications
Route monitor alerts to application owners while server and security administrators retain broader visibility and escalation paths.
Fleet security events and active blocks
Review Guard security activity, block state and operational context across managed systems.
Shared reputation and blacklist coordination
Coordinate fleet-local block information and centrally broker supported reputation services.
Policy and credential provenance
See whether effective settings come from global policy, Datacenter or an allowed local override.
What this Guard workflow covers
- Windows and Linux Guard enrollment
- Central policy distribution
- Fleet security events and active blocks
- Shared reputation and blacklist coordination
- Floating-license seat visibility
- Credential and integration provenance
- Centralized policy for built-in collectors and Custom Monitors
- Monitor-specific notification recipients and escalation
- Separate LAN and assessment recipient routing
- Policy and credential provenance
- Operational SOC overview
- Support for restricted networks via Datacenter-mediated services
Central policy without losing application ownership
Datacenter uses the same monitor policy model as standalone Guard. Built-in collectors and Custom Monitors can inherit shared defaults or receive monitor-specific rules, and the effective policy source remains visible.
Application-aware recipients
Send SQL, web, remote-access or custom application alerts to the people who own those services while keeping server/security recipients in the escalation path.
LAN and assessment routing
Infrastructure discovery and posture reports can use separate recipients instead of sending every Guard message to one distribution list.
Managed monitor ecosystem
Distribute approved Custom Monitors centrally while preserving provenance and keeping locally authored monitors distinct.
Fleet-wide security statistics by email
Datacenter can now send scheduled 24-hour or 7-day summaries separately from immediate incident alerts.
Fleet totals
Summarize managed and online servers, attack activity, unique attackers and blocks across the managed estate.
Where pressure is coming from
Include top source countries, attackers and most-triggered collectors/rules where the underlying data is available.
Most-targeted systems
Surface which managed servers are receiving the most hostile activity during the selected reporting window.
Separate recipients
Send management or SOC summaries to a different list from immediate attack notifications while reusing the existing SMTP transport.
Designed around observable server evidence
Scantide Guard does not need to attack, exploit or brute-force a service to decide that repeated hostile activity deserves action. Collectors observe evidence already generated by the server, normalize it into a common event model, then apply explicit thresholds, allowlists, exceptions and enforcement policy.
The result is intended to be understandable by an administrator: which source IP was seen, which collector reported it, which rule or threshold was reached, what action Guard took, and when a temporary block is due to expire.
Standalone when you need it. Centralized when you grow.
A single Guard can protect its own server with local policy and local firewall enforcement. Organizations with multiple systems can add Scantide Guard Datacenter for shared policy, fleet visibility, licensing and coordinated reputation services.
Download Scantide Guard Datacenter 0.8.4
Datacenter can run on Windows or Linux. On Windows there is no separate Datacenter installer: use the same unified Windows installer used for Guard and Legacy. Linux Datacenter has its own bootstrap and package.
Same unified Windows installer
SHA-256
ba805e33dcf7eb8f3bdb55b31df5a6c3a307c01a07f73f1149dfe57563410591
Bootstrap install
curl -fsSL https://www.scantide.com/guard/install-datacenter.sh | sudo bash
SHA-256
89f1d88920f924d9f53924557085c112012feb66b13a50373c5ed3219d23eeff
Verification: download only from scantide.com and compare published SHA-256 values before installation. See the main Guard release page for beta signing and integrity details.
Certificate and TLS visibility per Guard
Datacenter can receive the latest compact certificate and TLS/cryptography posture reported by managed Guards. That makes it possible to review expiring/problem certificates and protocol posture per server without signing into every Guard individually.
Per-Guard certificate health
See the latest reported certificate discovery summary and readiness warnings for each managed Guard.
TLS client/server distinction
Windows posture keeps client and server Schannel protocol state separate, avoiding misleading “TLS enabled/disabled” summaries.
Read-only assessment
0.8.2 reports posture only. Datacenter does not centrally replace certificates or push cryptographic remediation in this development phase.
Frequently asked questions
What does Datacenter add?
Datacenter adds centralized fleet visibility, policy distribution, shared services and coordinated administration. Individual Guard servers still perform local monitoring and enforcement.
Can Guard work without Datacenter?
Yes. Datacenter is optional for standalone systems and becomes useful as the number of protected servers grows.
Does Datacenter replace a SIEM?
No. Its goal is focused Guard operations and policy management rather than becoming a general-purpose log warehouse.
See Scantide Guard in context
Read the current Guard documentation, deployment notes and product status, then choose the Windows, Linux or Datacenter path that fits your environment.
Supported operating systems
See the current Windows Server, Windows client, Legacy Windows and Linux compatibility overview, including which platforms are tested, targeted or still awaiting explicit validation.
View OS compatibilityDatacenter also runs on Windows Server 2008 R2 and later
Scantide Guard Datacenter is not limited to modern Windows Server releases. It can also run on Windows Server 2008 R2 SP1, as well as later Windows Server generations including 2012 R2, 2016, 2019, 2022 and 2025. The same unified Windows installer is used; there is no separate Windows Datacenter installer.