Continuous scanning of your cloud infrastructure, a dashboard that is current rather than a year old, and a report you can put in front of a board or a supervisor. This page describes what we are building. It is not for sale yet.
The NIS2 directive applies whether or not anyone has audited you. The software checks continuously and writes down what it finds.
Your cloud accounts and servers are checked automatically against the controls NIS2 asks about, on a schedule, and on demand when you want a fresh answer.
Each finding is mapped to the article it relates to, rated by severity, and paired with what to do about it — so the list is a work order, not a verdict.
Every scan produces a report, and the difference between scans is tracked. That record is what turns an assertion that you comply into something you can show.
Security posture changes every time someone opens a port or adds an account. A yearly review is a snapshot of a moving thing, and it arrives as a consultant's report rather than as something the organisation can check for itself between reviews.
We are building the continuous version — meant to sit alongside the review, not to argue with it. The people who do these audits know the subject far better than a scanner does; what a scanner is better at is looking every day.
Healthcare, public authorities and defence have the problem that a compliance tool normally requires sending a list of your weaknesses to a third party. The platform is also being built to run entirely inside the customer's own environment, where scan results, findings and reports never leave it.
Scanning, scoring, the dashboard and the reports work, and have been running against our own servers for months. What is missing is what a customer would actually be buying: pricing, onboarding, support, and someone available to answer when a scan says something alarming on a Friday evening.
Our priority until then is digital filing of the annual report to Bolagsverket, which is approved and closest to production. This is the honest order of things, and we would rather say so here than sell you something we cannot yet stand behind.