CANVAS
Dashboards on request
Tell it the dashboard you want in one sentence and it builds it from your live data. Azure, AWS and GCP on one page, most-urgent first, one file that works offline.
- 29 capabilities · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PIPEFIX
Pipeline security
Reads every pipeline and every file in your repositories, finds leaked keys and patient data, fixes them, and re-runs to prove it. GitHub, Azure DevOps, GitLab, Bitbucket, AWS, GCP.
- 72 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
AUDIT
Compliance
Proves your audit logging across Azure, AWS and GCP: enabled, retained, tamper-proof, complete. Finds every subscription, account and project itself, and hands over the evidence as PDF, Word and a live dashboard.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
AGENT SHIELD
AI agent security
Protects your own AI agents: what they may call, what they may read, and a record of everything they did.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
FORGE
Cloud security
Fixes the problems the other agents find, one at a time, only after you say yes to each one.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PREDICT
Cloud security
Predicts where risk is building from threat intelligence and past findings, so teams act before an incident.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PULSE
Cloud security
Checks that your monitoring and alerting actually work: coverage gaps, silent alerts, slow pages.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
RECON
Cloud security
Counts every resource you pay for, spots the idle ones, and puts a dollar figure on the waste.
- 19 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SCOUT
Cloud security
Reads your whole cloud and lists every security gap it finds, with the exact fix. Read-only, nothing changes without you.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SECURE CODE
Cloud security
Checks the application code itself for the mistakes that turn into breaches.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SENTINEL
Cloud security
Keeps testing your cloud the way an attacker would, every day, and tells you what would have worked.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SHADOW
Cloud security
Finds shadow IT: apps, AI tools, bots and service accounts nobody approved, and shows what they can reach.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
WATCH
Cloud security
Watches for settings that drift away from the approved state and raises the flag before an auditor does.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
BAA
Compliance
Tracks every Business Associate Agreement and the evidence behind it.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
COMPLY
Compliance
Maps your cloud to nine compliance rulebooks at once and shows which controls pass and fail.
- 15 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
DR CLOUD AUDIT
Compliance
Checks backups, replication and recovery targets against what you promised the business.
- 6 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
ENGAGE
Compliance
Checks patient-engagement channels against HIPAA privacy rights: consent, access requests, notices.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
FEDRAMP CMMC
Compliance
CMMC 2.0 Level 2 readiness scored the DoD way: 110 requirements, read-only tenant checks, SPRS score, POA&M and SSP outline. Plus FedRAMP and NIST 800-53 / 800-171 gap evidence.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
HIPAA
Compliance
Continuously proves the HIPAA Security Rule is being met, with the paperwork to show it.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PHI
Compliance
Eighteen checks for patient data in places it should not be, that ordinary cloud scanners never run.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PHI CLOUD AUDIT
Compliance
Finds patient data hiding in storage, logs and test environments.
- 23 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
AI GUARD
Data layer
Stops sensitive data going into ChatGPT, Claude, Gemini and Copilot, blocks prompt attacks, and secures your own AI models and pipelines.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
DATABRICKS LATTICE
Data layer
Connects to your Databricks workspace and checks access lists, cluster policies, tokens, catalogs and admin rights. Fixes are exact API calls, applied with your approval.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
DATAFACTORY FLUX
Data layer
Connects to Azure Data Factory and Synapse and checks every linked service, pipeline and runtime for exposed secrets and public paths. Fixes applied with your approval.
- 15 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
ORACLE PORTAL PACK
Data layer
Audits vendor portals and reverse data flows for what is leaving your estate.
- 7 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SNOWFLAKE LATTICE
Data layer
Connects to your Snowflake account and checks who can log in, what is public, what is masked and what is leaving. Fixes are exact SQL, applied with your approval.
- 26 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
CRM SHIELD
Enterprise applications
Connects to your CRM (Salesforce) and checks profiles, sharing rules, connected apps and guest access, with the exact setting to change for each gap.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
EHR GUARD
Enterprise applications
Connects to your EHR through its FHIR interface and checks authentication, scopes, audit and data exposure, with the exact configuration change for each gap.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
ERP GUARD
Enterprise applications
Connects to your ERP and checks privileged profiles, default passwords and separation of duties, with the exact transaction and step to fix each one.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
FIN GUARD
Enterprise applications
Connects to your financial system and proves the controls SOX auditors ask about: responsibilities, segregation of duties, audit trails, with the exact fix for each gap.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
HCM SHIELD
Enterprise applications
Connects to your HR system and finds payroll, integration-user and access gaps, with the exact security policy change for each one.
- 16 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
CONDUIT
Integration
Forwards every finding to Jira, Datadog, PagerDuty, Slack, Teams and Splunk, and runs data-loss-prevention checks on what leaves through those channels.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
BASTION
Network and identity
Hardens the basics: firewalls, certificates, DNS, policies and service accounts.
- 14 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
CONDUCTOR
Reliability (bundled free)
Runs the platform: checks your license, starts only the agents you bought, deploys itself, and audits your DevOps change process. Free with any agent.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
PHOENIX
Reliability (bundled free)
Checks disaster-recovery and business-continuity readiness and rolls back a bad change automatically. Free with any agent.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
SIGNAL
Voice and signalling security
Detects call-channel fraud and signalling weaknesses (SS7, SIP, STIR/SHAKEN) and protects call records.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →
VOICE
Voice and signalling security
Detects fraud on voice channels and secures voice biometrics and call recordings.
- 12 detectors · auto-versioned from source
- Licensed on its own · price quoted per deal
- Details →