Disk Encryption.
Verified. Compliant.

Know which machines are encrypted — and which aren't. BitLocker, FileVault, full fleet visibility. Compliance reports your auditors will love.

Start Free Trial See How It Works

How It Works

1

Install the Agent

Deploy the lightweight CryptoGuard agent to your endpoints. Windows and macOS. Takes 30 seconds.

2

Automatic Detection

The agent detects BitLocker, FileVault, and other encryption methods. Reports volume-level status back to your console.

3

Monitor & Alert

See encryption status across your entire fleet. Get alerts when machines become unencrypted or protection is suspended.

4

Prove Compliance

Generate compliance reports for SOC 2, HIPAA, PCI-DSS, and cyber insurance questionnaires. Export to CSV anytime.

Everything You Need

Real-Time Monitoring

Every machine reports encryption status on a schedule. Know instantly when something changes.

Volume-Level Detail

See encryption status for every drive — not just the OS drive. BitLocker, FileVault, and more.

Compliance Reports

One-click reports for SOC 2, HIPAA, PCI-DSS, and cyber insurance. Export to CSV.

Instant Alerts

Get notified when encryption is disabled, protection is suspended, or a new unencrypted volume appears.

Multi-Tenant / MSP Ready

Manage multiple companies from one console. Per-company policies and reporting.

Recovery Key Escrow

Recovery key IDs are captured and stored securely. Never lose a BitLocker or FileVault recovery key again.

Simple, Transparent Pricing

Starter

$2/machine/mo
Up to 100 machines
  • Email alerts
  • Compliance reports
  • 30-day history

Enterprise

$1/machine/mo
Unlimited machines
  • Everything in Pro
  • Custom policies
  • API access
  • Dedicated support

All plans include a 7-day free trial. No credit card required.

Frequently Asked Questions

What operating systems are supported?

Windows 10/11 (BitLocker) and macOS (FileVault). Linux support coming soon.

How does the agent work?

The agent is a lightweight service that checks encryption status every hour (configurable) and reports back to CryptoGuard. It uses minimal resources and doesn't modify your encryption settings.

Do you store recovery keys?

We capture recovery key IDs for reference, but we do not store the actual recovery keys. Your keys remain in Active Directory, Azure AD, or wherever you've escrowed them.

What compliance frameworks does this help with?

CryptoGuard helps demonstrate compliance with SOC 2, HIPAA, PCI-DSS, NIST 800-171, and most cyber insurance questionnaires that ask about disk encryption.

Can I use this as an MSP?

Absolutely. CryptoGuard supports multi-company management from a single tenant. Each company gets its own machines, policies, and reports.

Is there a free tier?

Yes, up to 5 machines are free forever. No credit card required.