Overall Compliance
68%
Assess and Comply
Assesses all 153 safeguards against CIS Controls v8, scoped to your implementation group, with the automatable ones checked automatically.
What it does
Safeguard-level assessment against CIS Controls v8 with implementation-group scoping.
Every safeguard across all 18 controls, scored one by one, not rolled up into a control-level guess.
Scope to IG1, IG2, or IG3 so you're measured against what applies to you.
Controls 1 and 2 are answered from real asset and software inventory, not a questionnaire.
Each safeguard scored on a maturity scale, with the score's basis recorded.
Safeguards mapped against the other frameworks you report on, so one piece of evidence counts once.
Evidence held per safeguard, and exports that stand up in an audit.
How it works
Every agent follows the same three movements. What differs is what it reads, what it scores, and what waits for a person.
How it works
See
You pick an implementation group. The agent pulls hardware and software inventory to answer what it can automatically.
Decide
Automatable safeguards are scored from telemetry. The rest are assessed with evidence attached.
Act
Non-compliant safeguards become tracked gaps, and the whole assessment exports with its evidence attached.
CIS Controls v8
Governance
What always waits for a person differs meaningfully between agents, so it is stated per agent rather than as a platform-wide generality.
Pulls inventory, scores the safeguards that can be answered from telemetry, and maintains the gap register.
Assessor-scored safeguards require a person, and every score change is attributed.
Every safeguard score, its evidence, its assessor, and the export it appeared in.
Assess and Comply · v2.0
Maturity assessment across the six CSF functions with gap tracking and executive reporting.