Security and compliance
In productionA composite security scorecard per client, a GRC module with frameworks and evidence, nightly attack-surface scanning, and privileged access that expires.
Measured: 273 client security scorecards generated in production.
What it does
- A monthly composite scorecard per client, delivered as a PDF and in the portal.
- Per-client GRC: frameworks, controls, evidence, policies and a risk register, with eleven framework libraries including an Atlas baseline.
- Nightly attack-surface scanning — open ports, TLS and HSTS — with findings tracked.
- Time-boxed privileged access with a second approver and an audit trail.
- Change management as a ticket kind, with approval, outcome and a calendar window.
What it does not do
- The scorecard is a composite of what Atlas can see. It is not an audit and does not claim to be.
- Compliance evidence is collected and stored; mapping it to a specific auditor’s request list is still manual.
What it replaces
- A GRC spreadsheet
- A separate external-scan subscription
Included in the single per-user price. No per-module or per-endpoint add-ons.
What it connects to
Each of these has its own page, with how much production traffic it is carrying.
More in security
Microsoft 365 managementIn production
Every client tenant, benchmarked nightly, with the unused licences priced.
Zero Trace secure eraseBuilt, lightly used
Wipe a drive, get a signed certificate anybody can verify.
Email signaturesBuilt, not proven
Centrally managed Outlook signatures, three ways to deliver them.