Sysnet · Security data service
A security product is only as good as the data behind it
SignGuard is the security data service that feeds Sysnet products and belongs entirely to us. We produce, verify and deliver domain categories, application signatures, attack indicators and reputation lists to your products every day.
Distribution flows from the core to the products, left to right.
In numbers
- 11 M+
- Classified domains
- 63
- Content categories
- 2,000+
- Recognised applications
- 80,000+
- Active attack signatures
- 250+
- Countries and regions
- 58,000+
- Device vendor records
- 1 M+
- Malicious file fingerprints
- Daily
- Update frequency
These numbers keep growing; current values are visible in the product console and on the taxonomy endpoint.
Why we run our own data service
Rented data is rented security
Renting security data is easy; but the day you rent it, your product’s future is tied to someone else’s pricing, licence terms and priorities. That is why we produce the data ourselves.
Independence
Your device needs no service, subscription or third-party engine beyond ours. When you buy the product, the data is yours too.
Continuity
Because we compile the data ourselves, the service does not stop when a source closes; it is replaced. A contract renewal cannot make a category disappear.
Transparency
We define and document what each piece of data means. The category list is public; there is no black box inside the box.
Local by design
The service runs on Sysnet’s own infrastructure and is developed in Türkiye. Local content and regulation are part of the design, not a patch added later.
What we provide
Eight data streams, one source
Your product regularly receives the data sets it needs and applies them with its own engine.
Web content categories
11 million+ domains · 63 categories
A map of the internet: every domain belongs to a content category, so your policy rests on meaning rather than addresses.
Application identification
2,000+ applications · 50,000+ signatures
Recognises which application a flow belongs to regardless of port, so “throttle social media, allow business apps” actually works.
Intrusion prevention signatures
80,000+ active signatures · 55 categories
Known attack patterns plus command-and-control indicators from our own research, refreshed daily.
Country and IP reputation
250+ countries and regions
Address ranges and reputation sets: the answer to “where is this coming from?”.
Device identification
58,000+ vendor records
Knows what just joined the network: phone, printer, camera, smart-home device.
Internet service addresses
Current address blocks published by the cloud providers themselves, so “allow this service” survives an IP change.
Anti-spam
3,000+ content rules
Content rules and sender reputation for mail traffic; scoring and thresholds stay your decision.
File reputation
1 million+ fingerprints
Instantly shows whether a downloaded file has been recorded as malicious before.
Product family
The same data, in five products
The five stops of the gradient are the order of the five products. A domain is classified once and a threat verified once; the result reaches all of them in the same release, so your products never contradict each other.
SignLogger
Log management & Law 5651 compliance
Keeps your legal records, runs your guest network, reports who went where.
Receives from SignGuard
Web content categories, application identification, device identification and IP reputation; software updates.
Details
SignBackup
Storage & backup
A backup is only a backup if it opens on the bad day.
Receives from SignGuard
File reputation and threat indicators; component and software updates.
Details
SignDLP
Data security (DLP)
Your data stays yours.
Receives from SignGuard
Sensitive-data classification rules, policy templates, cloud service addresses and file reputation.
Details
SignWall
Network security (NGFW)
The gate of the network; the product that uses every SignGuard data stream at once.
Receives from SignGuard
All eight data streams: categories, applications, attack signatures, reputation, devices, service addresses, anti-spam, file reputation.
Details
SignPassword
Identity & access (IAM)
A password is a door; you need to know whose hand is on it.
Receives from SignGuard
Phishing indicators, IP reputation and anonymiser address sets; software updates.
DetailsOur principles
We ship the data and leave the decision to you
Privacy by design
Which sites your users visit is none of our business and is not recorded. When a product asks about an address it sends only a small part of the encrypted digest, never the address itself; in return it receives every record starting with that fragment and finds the answer locally. So even we cannot know which address was queried. This is a deliberate design choice, aligned with the data-minimisation principle of GDPR and the Turkish KVKK.
The decision is yours
We ship data, not policy. No category, country or application is blocked on its own; no rule is opened on your behalf. Your administrator decides what happens; we only provide the knowledge the decision rests on.
- Accuracy is measured
Every uncertain record passes human approval before release.
- Integrity is guaranteed
Every update is signed; a package that fails verification is never loaded.
- We keep it simple
No external libraries or third-party engines, so the attack surface stays small.
- It protects offline too
If the link drops, the product keeps protecting with the release it holds.
How it works
Produce, verify, sign, distribute
Data is processed centrally; products load only releases whose signature verifies.
- 01
Collection
Domain, application, threat and reputation data is gathered centrally from many sources. Findings from our own crawler and miscategorisation reports from the products join the same pool.
- 02
Analysis and verification
Records are scored by automated classification. Records below the threshold, or in conflict, drop into an analyst queue and are not released without human approval.
- 03
Versioning and signing
Verified changes are packaged under a version number and cryptographically signed. Every release records what it changed.
- 04
Distribution
Products pull the new release themselves, verify its signature and put it into service. Only changed data is downloaded, so your line stays free.
Who it is for
For everyone who has to run a network
Schools and public institutions
Organisations that must manage student and staff internet access and apply an age-appropriate content policy.
Businesses
Companies that must meet legal record-keeping duties, protect their data and run a secure network.
Hotels, cafés and public venues
Businesses offering a guest network and carrying the responsibility that comes with it.
Our partners
Resellers delivering managed security services who want to run many organisations from a single data source.
Tools
Domain lookup
See the category and risk group of a domain in the SignGuard database instantly. Try the data before you buy it.
Badge
What “powered by SignGuard” means
The mark you see on product sites, on the box, in proposals and partner decks shows that the product makes its decisions with current data from SignGuard. Resellers and partners can download the badge together with its usage rules.
Shall we look at the products?
Let’s talk about which product fits your organisation, what it covers and how partnership works.