Runs asset discovery on a recurring schedule so the inventory stays current.
Collects asset information from connected sources such as APIs, databases, and files.
Consolidates data from different sources into one consistent structure.
Links assets and documents to the relevant controls from the selected framework.
Evaluates each control against its evidence and classifies the result.
Ranks findings by affected assets and severity to show what to address first.
Recommends a follow-up task for the owner of each gap or finding.
Connects to existing applications and platforms to retrieve data.
Reads structured asset and security data from supported databases.
Imports structured files such as CSV, JSON, XLSX, and XML.
Regulatory requirements and control frameworks used as the basis for assessment.
Policies, procedures, and audit reports that support each control.
Asset type, classification, and relationships that determine which controls apply.
Vulnerabilities and CVEs, including Known Exploited Vulnerabilities (KEV), linked to affected assets.
The control is met and supported by sufficient evidence.
The control is partly met, or evidence is incomplete and needs review.
The control is not met, or the required evidence is missing.
Scan Schedule
Discover Assets
Normalize
Map to Controls
Assess
Risk Prioritization
Remediation Task
API
Database
File
Control Catalog
Evidence Documents
Asset Context
Security Findings
Scan Schedule
Discover Assets
Normalize
Map to Controls
Assess
Risk Prioritization
Remediation Task
API
Database
File
Control Catalog
Evidence Documents
Asset Context
Security Findings