Security Guardian by Quest Software is an Active Directory security tool designed to reduce attack surfaces and enhance protection for hybrid Active Directory environments. It prioritizes exploitable vulnerabilities and Active Directory configurations that need attention, highlighting what happened, if exposure exists, and how to address the problem. Security Guardian provides comprehensive threat mitigation and secure AD configuration, benchmarking current Active Directory setups against industry best practices. It offers visibility into indicators of exposure (IOEs), indicators of compromise (IOCs), and Tier Zero assets, aiding in threat mitigation and attack surface reduction.