Secure browser VMs
Minimal overhead.
Maximum isolation.
Guard.ch gives security teams a clean, controlled way to run dangerous workflows in disposable Windows environments.
No credit card required for Starter trial.
Navigation
Machines
Create and control isolated virtual desktops.
malware-sandbox-01
Windows 11
phish-triage-main
Windows 11
ioc-validation
Windows 11
Live state sync over Socket.IO
<3s
Average VM boot time
99.9%
Platform availability SLA
100%
Host-device isolation
EU + US
Available deployment regions
Core capabilities
Designed around Google-inspired clarity: strict hierarchy, thin lines, and practical actions.
Instant provisioning
Spin up disposable Windows 11 desktops in seconds from a clean base image.
Isolation by default
Risky files, links, and payloads stay inside a dedicated VM boundary.
Built for teams
Projects, roles, billing, and snapshots are managed in one workspace.
Browser-based access
Connect over encrypted WebSocket streams with no local client install.
How it works
Step 1
Create a project
Set up your workspace and invite collaborators.
Step 2
Launch a machine
Start from a base image or snapshot template.
Step 3
Investigate safely
Run high-risk workflows without exposing your local device.
Simple pricing
All plans include unlimited users and project collaboration.
Starter
For individuals and small investigations.
30-day free trial- - 1 concurrent VM
- - 3 snapshots
- - Unlimited users
- - Unlimited email addresses
Pro
For security teams running daily operations.
- - Everything in Starter
- - 4 concurrent VMs
- - 12 snapshots
- - Azure tenant SSO (custom)
- - Priority support
Team
For organizations with advanced requirements.
- - Everything in Pro
- - 16 concurrent VMs
- - 64 snapshots
- - API access
Frequently asked
What browsers are supported?
Guard.ch works in modern Chrome, Firefox, Edge, Safari, and Brave builds.
Do I need a VPN or desktop app?
No. Sessions are accessed directly in the browser through encrypted transport.
Can teams share billing and projects?
Yes. Plans include multi-user collaboration with project-level organization.
Where is infrastructure hosted?
Infrastructure runs on Hetzner bare-metal across EU and US regions.
Ready to isolate risky workflows?
Deploy your first secure VM in minutes and keep high-risk activity away from your endpoint.