Nothing downloads
Scripts, pop-ups and drive-by payloads all execute in the container, on hardware built to be wiped. Your machine only ever decodes video.
The link opens there. You watch from here.
A throwaway browser boots in our cloud, opens the link and streams to your tab while Guard.ch reads its every move. You see everything. The page never sees you.
A browser on the end of a wire.
Nothing opens on your machine; only a live stream reaches your tab. Two things travel on that wire, and neither is the page.
Nothing identifies you
DNS and traffic leave our network, not yours. The site meets a fresh browser at one of our addresses, never your IP, your fonts or your screen.
Nothing to install
Live analysis runs in any tab you already have. The extensions are a shortcut to it, not a requirement.
Live means your hands on the wheel.
The stream is interactive: clicks, keys and scrolls are forwarded as you make them. Follow the redirect, open the pop-up, feed the fake login a made-up password. Here it costs nothing.
There is a real address bar, too. Steer anywhere mid-investigation, and the tally simply follows you to the next page.
While you browse, it counts.
A live tally runs beside the stream: everything the page does is counted as it happens. Freeze any moment as a snapshot.
- Every request and its response
- Redirects and failed calls
- Cookies, the moment they are set
- localStorage and sessionStorage writes
- WebSocket and server-sent messages
- Fingerprinting attempts, by technique
- Permission prompts
- WebRTC connections and IP leaks
- Tracker hits
- Technologies the page is built with
- WHOIS, IP and reputation lookups
- Console output and hidden exceptions
The page meets a stranger.
Your page meets a brand-new browser: no history, no cookies, a fingerprint minted seconds ago, calling from one of our addresses.
Some pages only show their real face in certain countries. Pick the egress location, and the page sees a local.
Freeze what matters. Let the rest vanish.
The investigation stays live as long as you keep it open. Anything worth keeping, one click freezes as a snapshot: screenshot, verdict and every signal so far.
When you are done, the container is destroyed with everything the page left on it. Only your snapshots survive: each at its own link, private until you share it, with a visible expiry date.
What a snapshot holdsCuriosity, without consequences.
The dangerous part of a suspicious link is opening it. Live analysis gives that job to a browser with nothing to lose.
30 days free, a few clicks away.
Add a card to start, we will not charge it until the trial ends, and cancelling is just a few clicks away.