Understanding Salesforce Public Site Security

Salesforce GUSP [Guest User Security Policy] is designed to limit the number of records that a guest user has access to (but not what they can see on those records).
TargetX December '19 upgrades were designed to limit the need for sharing of records with Guest Users to comply with GUSP.
Clients should follow Salesforce guidance on reassigning ownership of guest records.

Salesforce Guest User Access Report provides information on guest sharing that violates GUSP recommendations.
Salesforce Guest User Access Report also provides information about what fields a Guest User has access to on records.
Clients should use our permission scanner to create permission sets along with our feature specific recommendations for field permissions for guest site users.
Clients should not have read access granted to all fields for guest users on sensitive objects such as contact.