How it works
Produce, verify, version, sign, distribute
SignGuard processes data centrally. Products load only verified, versioned and signed releases; no product decides on raw data.
Process
- 01
Collection
Domain, application, threat and reputation data is gathered centrally from many sources. Findings from our own crawler and miscategorisation reports from the products join the same pool.
- 02
Analysis and verification
Records are scored by automated classification. Records below the threshold, or in conflict, drop into an analyst queue and are not released without human approval.
- 03
Versioning and signing
Verified changes are packaged under a version number and cryptographically signed. Every release records what it changed.
- 04
Distribution
Products pull the new release themselves, verify its signature and put it into service. Only changed data is downloaded, so your line stays free.
Inside the product
What you see on the update screen
SignGuard’s only visible face inside a product is the update screen. It shows the data version in use, the time of the last update and the result of the signature check. The badge also lives on this screen.
- Data version
- The number of the SignGuard release the product is currently using.
- Last update
- When the release was downloaded and put into service.
- Integrity
- The signature verification result of the downloaded package.
Privacy
Even we do not know which address was asked
This makes it technically impossible for visited addresses to accumulate on our side, in line with the data-minimisation principle. The domain lookup tool on this website works differently: it queries the address the visitor typed, which reaches us because the visitor asked for it.
- 1
The product computes the encrypted digest of the address it wants to look up.
- 2
It sends us only the first few characters of that digest; the address never leaves the device.
- 3
We return every record starting with that fragment — without knowing which one is wanted.
- 4
The product finds its record inside that set and decides locally.
Frequently asked
Short answers
- Is SignGuard a separate product I have to pay for?
- No. SignGuard is the service layer feeding Sysnet products; it is not installed or sold on its own. When you buy the product the data service is included, and no separate data subscription is required.
- Do you keep our users’ browsing history?
- No. When a product asks about an address it sends a small fragment of the encrypted digest, never the address itself, so even we cannot know which address was queried. Browsing records stay inside your own product.
- Does protection stop if our internet connection drops?
- It does not. The data runs inside the product’s engine, which keeps deciding with the last verified release it holds. When the link returns, only the changes are downloaded.
- A domain looks miscategorised — what should I do?
- Look it up on the domain lookup page and report a correction from the same screen. Your request goes to the analyst queue; an approved change reaches every product with the next release.
- Can I see the category list in advance?
- Yes. All sixty-three categories, with their groups and descriptions, are public on the services page and on the taxonomy endpoint.
- Which products use SignGuard?
- SignLogger, SignBackup, SignDLP, SignWall and SignPassword. Each product receives the data set it needs; the products page lists which streams each one uses.