01Frameworks
Framework library
NIST, CIS, SOC 2, PCI, HIPAA, FedRAMP, and more — loaded from authoritative sources and searchable in one workspace.
ControlGraph connects frameworks, controls, capabilities, and the products you already use — so you can explore requirements once and assess posture without starting from scratch every audit.
The same capability — MFA, logging, asset management — appears in every framework under a different name. Teams evaluate them separately, pay consultants to translate, and run audits in parallel.
Explore, map, assess, and monitor — built on one shared control graph instead of disconnected spreadsheets and slide decks.
NIST, CIS, SOC 2, PCI, HIPAA, FedRAMP, and more — loaded from authoritative sources and searchable in one workspace.
See how requirements align across frameworks so you stop rebuilding the same mapping every engagement.
Identity, logging, encryption, and response expressed once — then linked to controls in every framework you care about.
Map Entra ID, Okta, CrowdStrike, AWS, and dozens of other products to the capabilities and controls they help satisfy.
Connect policies, configs, and artifacts to the controls they support — reduce duplicate evidence collection.
Run coverage analysis from your technology stack with a documented reasoning trail on every result.
Query controls, technologies, capabilities, and impact from your own GRC or consulting platform.
Get notified when framework sources change so your mappings and client advice stay current.
Ask compliance questions against your declared technology stack. Every assessment includes coverage estimates, priority gaps, and a step-by-step reasoning trail you can share with clients and auditors.
Embed crosswalks, capability lookups and compliance impact directly into your GRC, consulting, or compliance platform. Available on Team and Enterprise plans.
query { technology(name: "Microsoft Entra ID") { capabilities controls frameworks complianceImpact } }
Start with one framework. Scale to the full graph and the API.
Built for consultants, vCISOs, and compliance teams who need one place to explore controls and defend their conclusions.