Why we're here
Compliance and cyber work, without the enterprise theatre. We build the tools we wished we had in the audit room.
Built by people who do the work.
We did not find compliance in a market study. We run audits, implement ISMSs and ship code, and we build what we needed on those days.
Work where the work already is.
heyGRC and Aevral review on the pull request, before the merge. ISMS Copilot answers in the chat, through the API, or inside the agent you already use. The work does not move to our tools. The tools go where the work already is.
A specialist, on purpose.
A general model writes a full policy set in minutes. We will still tell you it is a first draft. Our tools are built for the work that follows: the less-known framework, the clause that decides the audit, the flaw hiding in a diff.
Show the evidence.
A heyGRC comment cites the clause. An Aevral finding is a lead with the evidence to re-check it, not a verdict. You should not have to trust us. You should be able to check us.
Experts decide. Agents do the hours.
The tools take the drafting, the mapping, the checking. What the auditor asks at the closing meeting, who decided and on what evidence, that stays with a person. We make that person faster. We do not build to pretend the seat is empty.
Prices in public. Your price is your price.
Product prices are public, and you can buy without talking to anyone. We never price per head. The price you started on is the price you keep: we have never raised it on an existing customer, and when a charge stops costing us, we remove it.
Neutral where we list others.
Our directories take no payment for placement, ranking, or a featured spot.
We run on what we sell.
Our own ISMS lives in git, and every pull request we merge is reviewed by heyGRC, our own compliance reviewer. We are not certified today, and we say "in progress" until the certificate exists. When a claim on this site cannot be backed, the line gets cut, not decorated.
We answer to the people who pay us.
No investors, no board. Nobody above us needs a story, so nobody asks us for theatre.