qbr.io

What It Is

Quantus Bridge Limited is a Hong Kong-registered technology company positioned as a provider of security data and risk intelligence platforms for modern cloud and distributed environments. Its product line includes CloudGuard, an agentless Cloud Detection & Response (CDR) solution, and SecureStream, a real-time security data pipeline. The two products address cloud exposure risk prioritization and the movement of security telemetry data, respectively.

Core Capabilities

CloudGuard connects to cloud environments through cloud-native APIs and analyzes multi-cloud configurations, identity permissions, storage, logs, network signals, vulnerabilities, and exposure paths. The product emphasizes an agentless approach: it does not deploy host agents and avoids intrusive scanning, making it suitable for cloud environments with many dynamic assets. Its core capabilities include dynamic risk graphs, attack path modeling, and AI-assisted analysis, with the goal of identifying genuinely exploitable paths among large volumes of risks and producing prioritized tasks and remediation recommendations. SecureStream is designed for logs, events, and security telemetry data. It provides “Any In,” real-time transformation, filtering, enrichment, normalization, and “Any Out” multi-destination routing. It can connect to SIEM, SOAR, and analytics platforms, and is intended to reduce ingestion, storage, and processing costs caused by low-value data.

Deployment, Pricing, and Integrations

In terms of deployment, CloudGuard supports either SaaS or an on-premises management center to meet customer requirements and regulatory constraints. SecureStream is currently available only for on-premises deployment. The available materials do not disclose pricing, billing units, trial policies, or commercial packages, nor do they list compliance certifications. For integrations, CloudGuard relies on cloud-native APIs, while SecureStream can connect to heterogeneous security systems and, in some deployments, may integrate Timeplus as the underlying real-time processing engine.

Pros, Cons, and Best Fit

Its strengths include an agentless design, low impact on production environments, a focus on attack paths and closed-loop remediation, and coverage of two complementary use cases: risk governance and data pipelines. Its limitations are that public information remains largely product-concept oriented, with few customer cases, SLA details, certifications, specifics on supported cloud platforms, or performance metrics. It is better suited to mid-sized and large security teams with AWS/Azure/GCP or multi-cloud environments that want to quickly identify high-risk exposure paths, or teams dealing with large volumes of security logs that need a unified pipeline to reduce costs.

Access from China

Information on access from mainland China, payment methods, and local service availability for the site and products has not been disclosed, so access status is unknown. If an organization requires domestic compliance, local support, or RMB procurement, it may also evaluate alternatives such as Wiz, Orca, Prisma Cloud, and Tenable Cloud Security, as well as log pipeline options such as Splunk, Elastic, and Cribl.