Guardian360

Guardian360 is a Utrecht, Netherlands-based external attack surface management (EASM) vendor built and hosted entirely within the Netherlands, a deliberate choice aimed at customers with EU data-residency and sovereignty requirements. Its Lighthouse platform continuously discovers and monitors internet-facing assets, layers in internal and external vulnerability scanning, and pipes findings from the Dutch National Cyber Security Centre (NCSC) and other European threat-intel sources directly into its risk scoring, then maps results against 25-plus compliance frameworks including ISO 27001, NIS2, and DORA.

Founded in 2015 and still 100% privately owned with no venture capital raised, Guardian360 sells exclusively through a partner channel rather than direct enterprise sales, a distribution model more common among smaller regional security vendors than EASM competitors. The company’s stated philosophy is to prioritize exploitability and real-world risk over raw vulnerability counts — asking what is actually reachable and dangerous right now rather than generating exhaustive scan reports that security teams have to triage themselves.

Guardian360 competes in an EASM category increasingly crowded by larger, venture-backed players and by attack-surface features bundled into broader XSPM and vulnerability management suites. Its differentiator is a Dutch/EU-sovereign hosting and data model tied directly into NCSC threat feeds, which appeals specifically to European public-sector and regulated customers, but its bootstrapped, partner-only, roughly 10-person operation is small relative to well-funded EASM competitors with global reach.