Your Firewall Policies Are Too Permissive

Firegrid analyzes your firewall logs to show you what's too open. Then tells you exactly how to fix it.

Get Started Free See How It Works

No credit card required. Free for up to 3 firewalls.

Current Policy

src 10.2.14.0/24

dst any

svc any

action allow

Broader than 99.6% of observed traffic requires

Firegrid Recommendation

src 10.2.14.5/32, 10.2.14.18/32, 10.2.14.204/32

dst 10.50.1.0/24

svc TCP/443, TCP/8443

action allow

Scoped to observed traffic over 90 days

Built for FortiGate

Every recommendation backed by real traffic data

Policies that match what your network actually needs

You know your policies are too broad. You just don't know how to tighten them.

No Tooling

Your firewall shows hit counts. It doesn't tell you which rules are too permissive or recommend how to tighten them.

Manual

Hours spent pulling logs, filtering out noise. Analyzing for unique sources, destinations, ports. Make a plan to tighten. Repeat.

Break Risk

Tighten too aggressively and you block production traffic. Too cautiously and nothing changes. Getting it right requires data you don't have.

Deleting unused rules is easy. The hard part is tightening the rules that are active but wider than they need to be. That takes data you don't have time to collect or analyze.

How It Works

Install the Agent

Deploy the lightweight Firegrid agent in your environment.

Connect Your FortiGate

The agent collects syslog traffic, pulls configuration data from your firewall, and deploys config changes that you have reviewed and approved.

Review Recommendations

Firegrid identifies which rules are wider than your traffic requires and shows you exactly how to tighten them. You decide what to change.

See the full architecture →

What Firegrid Does

Four capabilities that turn firewall log data into actionable policy improvements.

Over-Permissive Rule Detection

Firegrid compares your firewall policies against real traffic patterns to identify overly broad sources, destinations, and services.

Traffic-Backed Tightening Recommendations

Specific recommendations to narrow source addresses, destination networks, and port ranges based on your actual traffic data.

Automated Policy Deployment

Apply recommended changes directly to your firewall through Firegrid. No manual CLI sessions, no copy-pasting ACLs.

Change Auditing

Every change is logged. See what was tightened, when, and why. A complete audit trail for compliance reviews and rollback decisions.

Start Free. Scale When You're Ready.

Free

$0/mo

3 firewalls, 20 GB logs. No credit card required.

Start Free

Starter

$249/mo

5 firewalls, 200 GB logs. $2.50/GB overage.

Get Started

Pro

$599/mo

15 firewalls, 500 GB logs. $2.00/GB overage.

Get Started

Growth

$1,199/mo

30 firewalls, 1 TB logs. $1.50/GB overage.

Get Started

Need a custom plan? Contact us

See full plan comparison →

Frequently Asked Questions

How long does setup take?

About 30 minutes. Create an account, install the agent, connect your firewall, and configure log forwarding.

Does Firegrid modify my firewall rules?

Only when you tell it to. Firegrid generates recommendations and can deploy approved changes to your firewall. Nothing happens without your explicit approval.

What firewalls are supported?

Firegrid is purpose-built for FortiGate. That focus lets us go deep: session-aware recommendations, native policy deployment through the FortiOS CLI, and change auditing tuned to FortiGate's config model. Palo Alto and Cisco ASA are on the roadmap.

How is my data secured?

Firegrid was built for security experts by security experts. Zero-trust architecture, end-to-end encryption, least-privilege access, and full auditability. Your firewall credentials stay in your environment — always. Learn more →

What happens when I hit my log limit on the free tier?

Ingestion pauses until the next billing cycle. No surprise charges.

Can I cancel anytime?

Yes. Downgrade to the free tier or cancel entirely. No contracts, no penalties.

Ready to tighten your firewall policies?

Start free. No credit card required. Set up in 30 minutes.

Get Started Free