Information-center operations
Connect assets, incidents and tasks for owner-led investigation, remediation and handover.
Guanyuan StarWard XDR
Multi-source Threat Detection & Response (XDR)
Connect security capabilities with operational action
Connect security capabilities with operational action
Developed by Nantong Guanyuan Xingju Technology, StarWard XDR connects assets, data, rules, evidence and people across risk discovery, investigation, controlled response and review.
Use cases
For enterprise security operations, incident investigation and risk management
Business-server investigations
Investigate unusual logins or requests with timestamps, sources and asset context before controlled response.
Software & configuration risks
Review software data, risk matches and check history, linking remediation tickets and retest results.
Security-team reviews
Review evidence, rule conditions, response receipts and handling steps to improve detections and runbooks.
A connected security operations workflow
Investigate using connected data, rules and evidence. Responses follow permissions, approval and execution receipts; unknown results pause subsequent actions for human review.
- Assets
Maintain assets, groups and ownership.
- Risks
Connect software risks, checks and remediation.
- Detection
Assess alerts using rules and available data.
- Investigation
Organize timelines, evidence and rule snapshots.
- Response
Execute within permissions and approvals, checking receipts.
- Review
Review outcomes and improve operational procedures.
Investigate using connected data, rules and evidence. Responses follow permissions, approval and execution receipts; unknown results pause subsequent actions for human review.
Product capabilities
Multi-source data collection
Collect connected records through collectors, imports and authenticated APIs; diagnose missing fields, delays and source activity with asset context.
Alert analysis & threat detection
Investigate with rules, searches, threat hunting and imported intelligence, supported by custom detections, revision history and read-only replay.
Investigation & evidence relations
Use timelines, evidence relationships and triggering-rule snapshots to support assignments, investigation and reviewed closure.
Controlled response automation
Organize runbooks, authorize and approve adapted actions, retain execution receipts and supported expiry recovery, and escalate unknown results for human review.
Managed-operations collaboration
Support authorized service teams with roles, assignments, tickets, audits and review materials. Service hours and commitments depend on the agreed service plan.
Attack surface & vulnerability management
Maintain asset and software inventories, match software risks, run read-only checks and link remediation with retesting. Discovery coverage continues to expand through validation.
Deployment & services
Enterprise private deployment is available; SaaS delivery capabilities remain under development. Authenticated event APIs, log imports and third-party adapters connect existing environments. Domestic-platform compatibility and integrations are delivered within explicitly verified scopes.
Talk to us about business fit, product demonstrations and implementation.