AxiomLens
By The Security Gator · Your GRC command deck
Load any environment’s NIST CSF 2.0 assessment — your own, a client’s, a subsidiary’s — and AxiomLens computes coverage and maturity, scores risk, and produces the deliverables that close engagements: the Board Report, the client-ready Hand-Off, and the Cyber-Insurance Evidence Pack (add-on). Every control ID validated against the real framework. A local application with a full rail GUI — built for vCISOs, MSPs, and MSSPs producing a deliverable for someone else’s business, not just their own.
Buy — $599 launch priceSee what it outputs
Eight relational tables, one engine
| Table | What it holds |
|---|---|
| 01 Frameworks | The control libraries themselves — NIST CSF 2.0 in the base, plus any framework you import under your own licence. |
| 02 Controls | All 106 CSF subcategories with outcome text, implementation examples, and IDs validated against the real framework. |
| 03 Clients | Each environment you assess — your own org, a subsidiary, or a client engagement — kept isolated. |
| 04 Control Status | Per-control implementation status, maturity score, owner, evidence link, and due date. |
| 05 Risks | A scored risk register — likelihood by impact, inherent and residual, each with a treatment. |
| 06 Remediation | The work to close gaps — actions, owners, and timelines, tied straight back to the controls. |
| 07 Crosswalk | Maps one control to many frameworks, so you map once and satisfy several standards at once. |
| 08 Reports | Computed board reports — metrics in code, narrative written by a deterministic template that owns every figure. |
Real ownership — without the CaaS leash
Bought once. Owned forever. Offline after activation. Every license is node-locked to your hardware, signed with ECDSA P-256, and fully operational after a single first-run activation — then it verifies offline, every launch. No subscription. No phone-home after activation. No remote kill switch on a paid-up customer. Your machine, your filesystem, your keys, your control.
If The Security Gator LLC ever closes its doors, the EULA carries a vendor-dissolution continuity commitment: an offline-activation fallback and an unsigned license-generation utility get released so your engine keeps running on new hardware, independent of us. That’s the trade a compliance lead can actually defend in a vendor-risk review.
No orchestration, by design. AxiomLens runs when you run it. After its one-time activation nothing phones home, nothing recomputes on a schedule, and your data never leaves your machine. Review cadences are reminders the deck surfaces — not jobs it executes for you.
Everything you need to run it day one
8-table relational base
Frameworks, Controls, Clients, Control Status, Risks, Remediation, Crosswalk, Reports.
Full NIST CSF 2.0 core
All 106 subcategories, pre-loaded, with references.
Deterministic report + risk generators
Computed metrics, validated IDs, template-written narrative — no API key required.
Sample data + walkthrough
Wipeable sample client, setup guide, and a video walkthrough.
The convenience add-on: Cyber-Insurance Evidence Pack ($250). Drop one file into your install and a dormant module unlocks in both paid tiers — a 20-question readiness view mapped to what insurance applications actually ask, with a clean evidence export you can hand straight over. The point is speed: minutes to a defensible answer, not an afternoon of spreadsheet archaeology.
Launch pricing
Launch pricing is in effect now: $599 for the AxiomLens GUI, $250 for Engine Core. It’s not a seat cap and there’s no countdown — buy at the launch price and it’s locked for you. Standard pricing takes effect when AxiomLens v1.4 ships.
When v1.4 ships, AxiomLens lists at $999 standard and Engine Core at $350; AxiomGlass stays $99 flat. Anyone who bought at the launch price keeps it — the difference is permanent, not a trial.
$599 launch price · then $999 standardBuy on GumroadEngine Core (CLI) — $250Questions? →
Watch the 2-minute demo · One org and a deadline? Start with AxiomGlass ($99)
One email each Tuesday: the week’s threats that matter, one copy-paste hardening step, and the script to explain it to a non-technical stakeholder. Free, no pitch.
