The whole compliance loop, not just the score.
Aegis covers the work that surrounds an assessment: scoping the engagement, closing the gaps, recording the decisions, and proving all of it later. Organized here the way your week actually runs.
Numbers you can defend.
Assess against every control
Upload up to ten documents per run and score them against one framework or all four at once, with automatic detection when you are not sure. Every framework returns a 0 to 100 score with a per-function and per-category breakdown.
Two honest numbers, always
The effective score counts everything: policy text, supporting evidence, and accepted dispositions. The policy-only score counts nothing but the document itself. Both are always visible, side by side.
Score against intent, not the whole catalog
Reusable scope profiles capture what an engagement actually covers, down to individual controls. Scoped runs use the engagement as the denominator, and out-of-scope controls disappear from the report instead of dragging the score down.
From finding to fix, with a person in charge.
Remediate with a human gate
Aegis drafts a change set targeting your specific gaps, never a new document version. You review each change in a word-level diff and accept, edit, or reject it. Apply stays locked until every change is decided.
Resolve gaps with evidence
Attach supporting documents, procedures, runbooks, or screenshots of controls in action, and Aegis re-assesses the specific control against them. Coverage gained this way is labeled "via supporting doc" with full provenance.
Disposition what a document cannot fix
Some findings are risk-accepted, mitigated elsewhere, or simply not applicable. Four disposition kinds with mandatory written justification overlay the results, and not-applicable findings leave the denominator entirely.
Aegis proposes. You decide.
The review screen is where the engine hands control back to you. Word-level diffs show exactly what would change and which control it targets, and nothing reaches the document until a person with a name has decided every change.
Built for teams, remembered forever.
Generate policies that pass their own audit
Draft a new policy with AI: scope the controls, approve an outline, and let the engine draft section by section. Every draft is validated by the same analyzer that grades everything else and revised until it clears the bar.
Organize by team and engagement
Projects give each client or business unit its own workspace with lead, member, and viewer roles, an activity feed, and per-policy assignees and statuses. The versioned policy library shows whole-document diffs between any two versions.
Report in the format the audience needs
PDF for the executive, DOCX for the working session, XLSX and CSV for the GRC tooling. Exports carry scope, coverage provenance, dispositions, and remediation decision logs.
- 4
- Frameworks
- 296
- Controls enumerated
- 214
- Crosswalk mappings
- 29
- Table data model
- 266
- Automated tests
- 2
- Architectures
Thirty minutes, your policy, live.
The fastest way to evaluate Aegis is to watch it score a document you know well.