Continuous Compliance, One Dashboard
Three industry-standard frameworks with automated check mapping. Continuous scoring, trend tracking, and audit-ready evidence export -- compliance that updates with every scan.
CIS AWS 5.0
Foundations Benchmark
SOC 2
Trust Services Criteria
GDPR
Data Protection
"Where do we stand on SOC 2?"
A score for CIS 5.0, SOC 2 and GDPR
"What’s failing, and where?"
Failing controls with the resources behind them
"What will the auditor ask for?"
Evidence collected from every scan
"How do we fix it?"
Fix straight from the failing control
Three Industry-Standard Frameworks
Continuous assessment across three major compliance frameworks. Scoring updates automatically after every scan — no manual mapping required.
- CIS AWS Foundations Benchmark 5.0: the most widely adopted AWS security baseline, covering identity management, logging, monitoring, networking, and storage controls
- SOC 2: controls mapped to Trust Services Criteria including security, availability, processing integrity, and confidentiality
- GDPR: data protection and privacy controls for EU regulatory compliance, covering encryption, access controls, and data residency
Compliance dashboard showing framework scores across CIS, SOC 2, and GDPR
Continuous Compliance Assessment
Real-time compliance posture that replaces quarterly manual audits. Subscribe to the frameworks relevant to your organisation and get instant feedback on every control.
- Each control scores as PASS (all mapped checks pass), FAIL (any mapped check fails), or NOT APPLICABLE (exempted with justification)
- Framework score reflects your overall control pass rate, giving you a single number to track and report
- Historical score tracking shows compliance trends over time so you can demonstrate continuous improvement to auditors
- Click any failed control to navigate directly to the Action Centre for immediate remediation
Compliance trends chart showing score improvements over time
Audit-Ready Evidence Export
On-demand evidence packages with full control-level detail. Three export formats — PDF for auditors, CSV for spreadsheets, JSON for GRC integration.
- PDF evidence export with framework branding, control-by-control detail, and pass/fail status for auditor review
- CSV export for spreadsheet analysis and bulk processing of control status across frameworks
- JSON export for programmatic integration with existing GRC, SIEM, or compliance management platforms
- Evidence attachment support for manual controls that require documentation beyond automated checks
Compliance export showing PDF report generation with control details
Exception and Evidence Management
Document why specific controls do not apply. Attach evidence for manual controls that require human review.
- Five exception types: risk accepted, false positive, technical limitation, compensating control and not applicable
- A written justification for every exception, so reviewers and auditors can see why
- Exceptions expire after the period you set, so accepted risks get looked at again
- Attach evidence files to manual controls that cannot be validated through automated scanning
Exception form with five categories, a justification box and a 90-day duration