ForwardGuard, hosted by Divolt.

Managed-service early access. Multi-provider cross-correlation, 24/7 alerting, SIEM integrations, SOC 2 / HIPAA reports. The open-source core stays Apache 2.0 and complete without this service.

Request early access Open-source core on GitHub

What the managed service adds on top of the open-source core

ForwardGuard open-source gives you a single defender-side detection tool you self-host — four pipelines, three sinks, a container to run. That is complete and self-sufficient; a lot of organisations will want nothing more.

Divolt-hosted ForwardGuard is for defenders who do not want the operational burden. It is a thin paid layer that bundles:

  • Multi-provider cross-correlation. A forwarder added at your registrar and seen by your IMAP pipeline fires one correlated alert, not two uncorrelated ones.
  • 24/7 alerting + managed on-call. Divolt operates the pipelines; you get an incident call when a silent forwarder is detected.
  • SIEM integrations. Splunk, Datadog, Sumo Logic, Elastic — ForwardGuard events ship into your existing SIEM in the SMFPS Audit Event schema.
  • Compliance reports. SOC 2 Type II attestation (in progress) and HIPAA-ready report templates for regulated-industry teams.
  • Incident-response assistance. If a silent forwarder is found in your environment, Divolt helps investigate the root-cause compromise (usually at the registrar or hosting account) and co-ordinates vendor disclosure.

Status

Early access. The hosted service is in private pilot with a small set of design partners. If you want to be considered for the pilot cohort, email sales@divoltbtc.com with the number of domains you own and the mail infrastructure you operate (registrar(s) + control panel(s) + mail provider).

General availability: Q1 2027.

Run the open-source core today.

Apache 2.0, Dockerised, deployable in 20 minutes. The managed service is strictly optional.

ForwardGuard on GitHub Read the paper

About Divolt Security Research

Divolt Security Research is the research arm of Divolt, a security startup headquartered in Accra, Ghana. We publish open artefacts in the mail-plane and identity-plane attack surfaces and build the Divolt Aegis continuous-pentest platform. ForwardGuard is one of three open-source tools from our 2026 publication programme.

For research correspondence, standards collaboration, or coordinated disclosure: research@divoltbtc.com. For press, interviews, and media kits: press@divoltbtc.com.