What we're building
One control catalog, coming soon.
The tooling we use in advisory work, built into a platform: policy, risk, vulnerabilities, and vendors, all reading from the same model of your organization. It isn't generally available yet. Join the waitlist and we'll let you know when it is.
In development · Platform core
GRC Portal
Policy, risk, and control management — under one catalog.
- Lifecycle policy management with version history, approvals, and review cycles
- Zeblade Control Framework (ZCF) — one catalog crosswalking NIST CSF 2.0, ISO 27001, SOC 2, HIPAA
- Risk register with inherent and residual scoring, treatment plans, and evidence linking
- Vendor risk: per-vendor inventory, posture scans, and contract artifact tracking
In development · AI Copilot
Beacon AI
A compliance copilot that actually reads your program.
- Full context over policies, controls, risks, and evidence — no copy-paste
- Drafts policy language in your voice using policies you have already approved
- Identifies framework coverage gaps and suggests crosswalk mappings
- Audit-trail aware: every suggestion is sourced and reviewable
In development · Vulnerability mgmt
Pulse
Findings, mapped to assets, on a timeline you can defend.
- Aggregates Greenbone scan data via the Zeblade Bridge agent
- Asset-keyed remediation tracking with SLA and exception workflows
- Delta detection — what is new, what closed, what re-opened
- Audit-ready evidence export per asset, per finding, per quarter
In development · External posture
Vendor Risk Management
Seven domains of external security signal, scanned nightly.
- DNS hygiene, email security (SPF/DKIM/DMARC), TLS posture, network exposure, IP reputation
- Per-vendor scorecards with delta history and trend lines
- Automated nightly re-scan with change alerts
- Plugs directly into the same control catalog as policy and risk
Want to know when it's ready?
Join the waitlist. In the meantime, the same thinking is available today through our advisory work.
Join the waitlist