dotnet tool install --global GuardTool.Toolguardtool scan --root .Production-focused checks
Look for issues such as dangerous CORS settings, missing HTTPS redirection, exposed Swagger and middleware ordering problems.
GuardTool
GuardTool
ASP.NET Core scanner.
GuardTool is a .NET CLI and local dashboard that scans ASP.NET Core projects for production and security misconfigurations. Run it locally or in a build pipeline.
What’s inside
GuardTool features.
Reports you can use
Review severity and risk scoring, with JSON, HTML and SARIF output for different workflows.
Build pipeline controls
Set a severity threshold to fail a build when critical or high-severity findings are detected.
A local report dashboard
Browse historical reports, download results and use baselines to track new critical findings.
Start here
From install to first scan.
Install the global tool, then run a scan from your project directory.
Read the setup guideGood to know
Questions about GuardTool.
What runtime does GuardTool need?
The published package targets .NET 8.0. Install a compatible .NET SDK and check the NuGet listing for the current framework requirements.
Is the Community Edition open source?
The published README identifies the Community Edition as MIT licensed. See the license information linked from NuGet for the applicable terms.
Does a clean scan mean my application is secure?
No. GuardTool checks a defined set of configuration and production risks. Use its findings alongside code review, testing and your other security checks.
Are the planned Pro features available?
The NuGet README lists a Pro Edition and other integrations as planned. This page describes the published Community Edition, not those roadmap features.
A scan covers a defined set of checks. Review findings in context; a clean result is not a guarantee of production readiness or security.