The differentiator
“Are our endpoints hardened right now, and can you prove it?”
That is the board question. Hardening Proof is the single-screen answer. A CISO opens it in front of an auditor and walks out in ten seconds with a defensible answer — posture, proof, and action, in one place.
Screen anatomy
Seven data points. One story an auditor can take unedited.
Every value on the screen traces back to a service that already exists. Nothing here is a mock-up of a promise — it is the promise, rendered.
Posture score
Applied controls across the selected tenants — 247 of 254 scored controls. Refreshes every 15 minutes. Carries a delta versus the prior window, never a bare percentage.
Drift events, 30 days
Every configuration change the Drift Detector caught in the window. Live over websocket — a new event slides into the timeline as it happens.
Mean time to remediate
Average from drift detected to control restored, drawn from the Playbook Execution Log. Down from 6 minutes 12 seconds the prior window.
Auto-remediation rate
Share of drift closed with no human in the loop. The remaining fraction escalates to a playbook awaiting a condition or a human decision — never a silent failure.
Drift timeline
Green is restored. Amber is investigating. Red is open.
A stacked bar per day for the window. Every segment is clickable and drills to the filtered receipts below. The story a board wants is the colour balance: mostly green, and shrinking amber.
Control families
Ranked by framework, applied over total.
Live receipts
The single most important table on the screen.
Each row is a signed audit entry — timestamp, asset, control, what drifted, the playbook that fixed it, and the status. Exportable as JSON or PDF. This is the receipt that turns proof into a story.
Empty state, when it happens: “No drift detected in the selected window. Every scored control is currently applied.” A green tick still carries a last-verified time — there are no ticks without timestamps on this screen.
Discipline
What this screen will never show.
A policy PDF as evidence
This screen is the proof. The PDF is the promise. We do not confuse the two.
A green tick without a timestamp
Every green state carries a last-verified time. "Applied" means "applied as of a moment you can point to."
A vendor logo
The screen belongs to the customer in front of the auditor, not to us.
A chart without a headline finding
Every chart title states the finding, not the metric name. The board reads findings, not axes.
Open this screen on your infrastructure, in front of your evaluator.
Two hours. Your board question. If the answer is not one screen, ten seconds, and a signed receipt, you leave with a written scorecard instead.