Custofaber Guard

Thousands of alerts. A team of three.

Custofaber Guard is a family of security and compliance products for public institutions and SMEs. Vigil reads incoming alerts, tells you which ones matter and suggests what to do; your team makes the decision. Everything, including the AI model, runs on your own server.

Request a demo See the four products

One night, through Vigil's eyes. Alerts stream in; Vigil merges the ones that belong to the same incident and brings you a proposal. Approve or reject it, and your decision goes into a tamper-proof record.

Vigil Waiting 0 alerts
Incoming alerts · last night
Reading alerts from your tools…
Tamper-proof record
  1. No entries yet.
Representative screen. Sample data.

What matters gets lost in the noise.

Firewall, endpoint protection, email gateway, server logs… every tool raises its own alerts. A small team cannot look at all of them. The traces of a real attack end up scattered across hundreds of alerts that know nothing of each other.

Each dot is an alert · illustrative

Four products, the same three principles.

Each one can be installed on its own; used together they feed each other. All of them run on your server, and all of them leave the proposal to a person's approval.

AI analyst01

Vigil

Reads your existing security tools, merges scattered alerts into incidents and explains what happened in plain language.

Connects to
Lapis endpoint agent (Windows event logs), syslog, firewall, VPN, Active Directory
Produces
A merged incident: what happened, why it matters, what you should do
  • Gathers alerts about the same incident into one case
  • Explains what happened and why it matters
  • Applies only if you approve, and records every step
Vigil page
Representative screen. Sample data.
Compliance02

Guard Comply

Track compliance with Türkiye's Information and Communication Security Guide and ISO 27001 in one place.

Connects to
Policy documents, evidence files, checklists
Produces
Current compliance status, missing controls, an audit-ready report
  • Keeps the status of all 660 measures in Guide v1.1 up to date
  • Collects evidence and maps it to the right clause
  • You present the report to the auditor
Comply page
Representative screen. Sample data.
Identity and access03

Guard Access

See who can access what in Active Directory and close the doors left open.

Connects to
Active Directory, group memberships, sign-in history
Produces
Orphaned accounts, excess privileges, suggested fixes
  • Finds accounts left open after people leave
  • Shows privileges granted beyond what is needed
  • You approve the fix before it is applied
Access page
Representative screen. Sample data.
Awareness04

Guard Aware

Most attacks start with an email. Prepare your staff for it.

Connects to
Email system, staff list
Produces
Short trainings, controlled phishing exercises, a progress report
  • Short, clear awareness trainings
  • Controlled phishing simulations
  • You decide when exercises run and who they cover
Aware page
Representative screen. Sample data.

Reads like an analyst. Explains like a colleague.

Vigil is a tireless analyst that joins your team. It reads thousands of lines, connects the dots and brings you only what you need to look at. The last step is always yours.

  1. Reads

    Continuously watches the logs and alerts your existing security tools produce.

  2. Merges

    Gathers alerts from different tools that belong to the same incident into one case.

  3. Explains

    Writes in plain language what happened, why it matters and what it affects.

  4. Proposes

    Offers a concrete next step, such as locking an account or cutting a connection.

  5. You decide

    It applies the step only if you approve. Proposal, decision and outcome go into a tamper-proof record.

Vigil does not replace your existing tools. The firewall, endpoint protection and logging systems you use today stay where they are; Vigil reads what they produce and makes sense of it.

The safe way to bring AI into your organisation.

Every Guard product is designed around the same three rules. They are not marketing lines; they are architectural decisions.

Data stays in-house.

Every component, including the AI model, runs on your organisation's server. Your logs, user information and analysis results are never sent to an outside cloud.

A person has the final say.

Guard proposes, your team decides. No account is closed and no setting is changed without your approval.

Every action is on record.

Every proposal, approval and action is written to a tamper-proof record. Who did what, when and why: you can show it in an audit.

For organisations without a large security team.

Public institutionsThose who need to keep track of their Information and Communication Security Guide obligations and want to use AI where data must not leave the organisation.
SMEsSmall IT teams that cannot run a separate security operations centre and want help that prioritises alerts, organises ISO 27001 preparation and raises staff awareness.

Tick what describes you, and we will suggest which product makes sense to start with.

Suggested starting point
Tick a few statements.
The suggestion is worked out on this page; nothing is sent anywhere.
Request a demo with this selection

It starts with a conversation and continues in your own environment.

01

Demo

We show the products through your own scenarios and answer your team's questions. We work out the hardware needs together.

02

Installation

We install Guard on your server together and connect it to your existing tools. It also works on networks with no internet access.

03

Review together

We go through the first findings with your team and tune thresholds and proposals to your organisation. You decide whether to continue.

Frequently asked questions.

Does the AI model send data outside?

No. The model runs on your organisation's server. Your logs and user information are not sent to any outside service for analysis. The server can also run on a network with no internet access.

Does Vigil act on its own?

No. Vigil makes a proposal; the action is applied only when an authorised person approves it. Proposal, approval and outcome go into a tamper-proof record.

Do we need to replace our existing security tools?

No. Vigil reads the logs and alerts your tools produce; it does not replace them.

Will Guard Comply get us ISO 27001 certified?

Guard Comply makes it easier to prepare for the audit: it tracks controls, organises evidence and prepares reports. The certificate itself is issued by an accredited certification body after its own audit.

What hardware is needed?

It depends on the size of your organisation and the products you want to use. We work it out together in the demo meeting.

Can we start with a single product?

Yes. Each product can be installed on its own, and others can be added as needed. We decide together in the demo which one makes sense to start with.

See it in your own environment.

Answer a few questions and we will plan a short demo at a time that suits you.

oguz.kaya@custofaber.com
This form sends nothing to a server. Your answers are turned into an email draft that opens in your own email app; you see it before sending.
Enter the organisation name.
Type of organisation
Products you are interested in
Choose at least one product.

If your email app does not open, copy the text and send it to oguz.kaya@custofaber.com.