GuardSuite Wireless Security

Control Which WiFi Networks
Your Devices Connect To

WiFiGuard inventories every wireless profile across your fleet, enforces SSID allow lists, and alerts you when devices connect to unauthorized networks. No GPOs, no network access control servers required.

Start Free See Features
WiFiGuard Dashboard
WIRELESS COMPLIANCE SUMMARY
Total Machines: 52   Compliant: 47   Violations: 5

HOSTNAME            SSID                   AUTH       STATUS
LAPTOP-HR-04       CorpNet-5G             WPA3-Ent   Allowed
LAPTOP-SALES-11    CorpNet-Guest          WPA2-PSK   Allowed
LAPTOP-DEV-03      Starbucks WiFi         Open       BLOCKED
LAPTOP-ACCT-07     Home_Network_5G        WPA2-PSK   Unknown
KIOSK-LOBBY        CorpNet-5G             WPA3-Ent   Allowed

Allow List: CorpNet-5G, CorpNet-Guest, VPN-WiFi   Alerts: ON

Complete Wireless Network Control

Inventory every WiFi profile, enforce SSID allow lists, and get alerts when devices connect to unauthorized networks.

📡

WiFi Profile Inventory

Automatically discover and catalog every wireless network profile on every managed machine. See SSIDs, authentication types, connection modes, and signal strengths across your entire fleet.

SSID Allow-List Enforcement

Define which wireless networks are approved for your organization. Only SSIDs on the allow list are permitted. Any connection to an unlisted network triggers an immediate alert.

🚫

Rogue Network Detection

Detect when employees save or connect to unauthorized networks like coffee shop WiFi, personal hotspots, or open networks. WiFiGuard flags every profile that isn't on your approved list.

🔒

Authentication Type Visibility

See whether saved networks use WPA3-Enterprise, WPA2-PSK, or are open networks. Identify machines with insecure WiFi profiles that could expose corporate traffic to interception.

📊

Compliance Dashboard

See which machines have unauthorized WiFi profiles at a glance. Color-coded status: green for compliant, red for violations. Drill into any machine for full wireless details.

🔔

Email Alerts

Get notified the moment an unauthorized wireless network profile is detected on any managed machine. Alerts include the hostname, SSID, and authentication type so you can act fast.

How WiFiGuard Works

1

Install the Agent

One lightweight Windows service. Takes 30 seconds to deploy. Works alongside PortGuard USB control and other GuardSuite tools.

2

Agent Discovers WiFi Profiles

The agent enumerates all saved wireless network profiles on each machine, including SSIDs, authentication types, and connection settings, and reports them to your dashboard.

3

Set Your Allow List

Define which SSIDs are approved for your organization. Any machine with a WiFi profile not on the allow list is flagged and you get alerted immediately.

Built For

MSPs Managing Client Networks

Monitor wireless network profiles across all your clients from one console. Enforce per-client SSID policies, detect rogue networks on managed devices, and generate compliance reports for client reviews.

Organizations with Strict Network Policies

Financial, healthcare, and government organizations need to control which networks corporate devices connect to. WiFiGuard ensures laptops only connect to approved, encrypted corporate networks.

IT Admins Managing Remote Workers

Employees working from home and on the road connect to dozens of WiFi networks. WiFiGuard gives you visibility into every saved network profile and flags those that don't meet your security standards.

Compliance Teams Preventing Data Exposure

Open WiFi networks are a top vector for man-in-the-middle attacks. WiFiGuard provides evidence that your organization restricts connections to authorized, encrypted networks for SOC 2, HIPAA, and PCI compliance.

Companies Blocking Unauthorized Hotspots

Personal hotspots and tethering can bypass your corporate firewall. WiFiGuard detects when employees save mobile hotspot profiles and alerts you before sensitive data travels over unmonitored connections.

Schools and Education (K-12)

Prevent staff and student devices from connecting to unauthorized networks. Enforce that only school-approved WiFi SSIDs are used on managed devices for CIPA and FERPA compliance.

Simple, Transparent Pricing

No contracts, no minimums. Cancel anytime.

$3/device/month
Billed monthly or annually (save 10%)
Start Free — 5 Devices

Or get all GuardSuite tools for $15/device/month

Frequently Asked Questions

Does WiFiGuard block WiFi connections or just report on them?

WiFiGuard currently monitors and reports on wireless network profiles. It enumerates all saved WiFi profiles on each machine, flags those not on your allow list, and alerts you. Active blocking (removing unauthorized profiles) is on the roadmap.

How does the SSID allow list work?

You define a list of approved SSIDs in the WiFiGuard console. The agent compares every saved wireless profile on each machine against this list. Any profile with an SSID not on the allow list is flagged as a violation and triggers an alert.

Can WiFiGuard detect open (unencrypted) networks?

Yes. WiFiGuard reports the authentication type for every saved WiFi profile. Open networks, WEP networks, and other insecure configurations are clearly labeled so you can identify machines at risk of traffic interception.

Can I use WiFiGuard alongside PortGuard USB control?

Absolutely. WiFiGuard and PortGuard run as part of the same lightweight agent. Use PortGuard to control USB device access and WiFiGuard to control wireless network access. They complement each other for comprehensive endpoint security.

What Windows versions are supported?

WiFiGuard works on Windows 10, Windows 11, and Windows Server 2016 and later. The agent runs as a lightweight Windows service and requires no additional dependencies.

Does WiFiGuard work on laptops that are off-network?

The agent inventories WiFi profiles whether the machine is on your corporate network or not. Profile data is reported back whenever the machine has internet connectivity, so remote and traveling employees are covered.

Know Every WiFi Network on Every Machine

Start monitoring and controlling wireless network access in under 5 minutes. Free for up to 5 devices.

Get Started Free