Question 1

1. What exactly is HackGuardX and who is it built for?

Accepted Answer

HackGuardX is a continuous cybersecurity platform built specifically for UK small and medium-sized businesses (1–100 employees), SaaS startups, software agencies, and MSPs. It unifies external attack surface monitoring, website and API security testing, cloud and Microsoft 365 configuration reviews, and GitHub code/dependency scanning into a single dashboard with plain-English remediation advice.

Question 2

2. Will HackGuardX's security scans slow down or break my live website?

Accepted Answer

No. Our automated checks are strictly non-destructive and rate-limited for production safety. Passive checks only inspect public DNS records, TLS handshakes, and HTTP headers. Active checks (unlocked only after domain ownership verification) use safe, non-mutating requests that never submit destructive payloads, corrupt databases, or flood your server.

Question 3

3. Why do you require domain ownership verification before running deep scans?

Accepted Answer

Under the UK Computer Misuse Act 1990 and responsible security testing standards, active vulnerability scanning must only ever be performed with explicit authorisation from the asset owner. Our Free Exposure Check performs strictly passive, public header and DNS inspection. Before any active web or API testing runs, you verify ownership via a DNS TXT record, meta tag, or verified cloud/GitHub integration.

Question 4

4. Does HackGuardX replace an annual manual penetration test?

Accepted Answer

HackGuardX complements—and for many small businesses, bridges the 364-day gap between—manual penetration tests. A manual pen test costs £5,000–£15,000+ and gives you a snapshot of a single week. HackGuardX runs continuously from £39/mo, catching misconfigurations, new CVEs, expired certificates, and code flaws the week they appear. If an enterprise client requires a CREST/tiger-scheme manual test, HackGuardX ensures you pass first time without paying for retests.

Question 5

5. Do we need an in-house security team or DevOps engineer to use HackGuardX?

Accepted Answer

Not at all. Every finding includes two views: a plain-English business summary explaining the real-world risk, and a step-by-step fix guide you can either apply yourself in minutes or forward directly to your web developer, IT support provider, or MSP.

Question 6

6. How does HackGuardX connect to AWS, Azure, Google Cloud, or Microsoft 365 safely?

Accepted Answer

We use strictly read-only configuration roles (such as AWS SecurityAudit, Azure Reader, and Microsoft Graph Directory/Policy Reader scopes). HackGuardX cannot modify your infrastructure, cannot read the contents of staff emails or SharePoint documents, and cannot alter production data.

Question 7

7. Do you store our private source code when scanning GitHub repositories?

Accepted Answer

No. When our GitHub integration analyses your repositories for SAST flaws, leaked secrets, or vulnerable dependencies, source files are inspected in ephemeral, isolated memory containers and immediately discarded once the scan finishes. Only finding metadata (file path, line number, and snippet context) is retained in your encrypted dashboard.

Question 8

8. Does HackGuardX help with NCSC Cyber Essentials and Cyber Essentials Plus?

Accepted Answer

Yes. HackGuardX directly monitors key technical controls required for Cyber Essentials—including boundary firewall/internet gateway exposure, secure configuration of web/cloud services, patch and vulnerability management timelines (fixing high/critical CVEs within 14 days), and multi-factor authentication enforcement across Microsoft 365 and cloud consoles.

Question 9

9. How does HackGuardX support UK GDPR and ICO security requirements?

Accepted Answer

Article 32 of the UK GDPR requires organisations to implement appropriate technical security measures and have a process for 'regularly testing, assessing and evaluating the effectiveness' of those measures. HackGuardX provides continuous, timestamped evidence of vulnerability testing and remediation to demonstrate proactive compliance to the ICO, auditors, and clients.

Question 10

10. How do you prevent alert fatigue and false positives?

Accepted Answer

Legacy scanners dump 400-page PDFs filled with theoretical informational warnings. HackGuardX validates findings before alerting, groups duplicate issues by root cause, and ranks dependency vulnerabilities by whether the vulnerable function is reachable and actively exploited.

Question 11

11. How long does it take to set up HackGuardX?

Accepted Answer

Your initial external domain exposure check takes less than 15 seconds. Verifying domain ownership and connecting a GitHub organisation or Microsoft 365 / AWS read-only role typically takes under 10 minutes.

Question 12

12. Can IT Managed Service Providers (MSPs) and digital agencies manage multiple clients?

Accepted Answer

Yes. Our Pro and Managed tiers—as well as multi-tenant partner workspaces—allow digital agencies and MSPs to monitor multiple client domains, generate white-label-ready PDF security reports, and prove ongoing security value.

Question 13

13. Are your prices in GBP, and am I locked into an annual contract?

Accepted Answer

All prices are transparently listed in GBP (£) excluding VAT. You can choose flexible month-to-month billing and cancel anytime, or opt for annual billing to save 20%.

Question 14

14. What happens if HackGuardX discovers a critical vulnerability right now?

Accepted Answer

You receive an immediate alert via email, Slack, or Microsoft Teams detailing the exact asset affected, why it is critical, how an attacker could abuse it, and the exact remediation steps to close it. Once fixed, click 'Verify Fix' in the dashboard to re-run the check and confirm closure.

Question 15

15. Where is HackGuardX's telemetry and customer data hosted?

Accepted Answer

HackGuardX processes and stores customer account and scan telemetry in UK and European Union data centres encrypted at rest (AES-256) and in transit (TLS 1.3), governed by UK data protection law and our Data Processing Agreement (DPA).

Frequently Asked Questions

Still have a specific technical or compliance question?