Framework crosswalks are free. The published library maps every NIST CSF 2.0 subcategory to other frameworks, identifier-only, no signup and no gate. AxiomLens ships with CSF 2.0 in the box — and for anything else, the importer maps a framework you already licence into the bench. That capability is included in the license, not a separate purchase (it ships next — see NEXT below).
Live now in the library: NIST 800-53 r5 · ISO 27001:2022 · PCI DSS v4. Mapped and queued for publication: SOC 2 · HIPAA · CMMC / 800-171 r3 · OWASP LLM Top 10 · NIST 800-82 r3 · NIST 800-81 r3. Map once in CSF 2.0, see the crosswalk everywhere.
Browse the library →A 20-question readiness view plus a hand-ready export built for insurance applications — drop the pack file in and the dormant module unlocks in both paid tiers. Convenience is the product: minutes to a defensible answer, not an afternoon.
The full engine at CLI parity — status, sign-off, POA&M, snapshots, evidence, hand-off export — for operators who live in the terminal. Same database, same packs, no GUI.
Live on Gumroad ↗The crosswalk library is free and stays free — identifier-only references, no signup, no rent on frameworks you never touch. Frameworks beyond CSF 2.0 come in through the importer, under the licence you already hold.
The crosswalks above are free on the web. The engine ships NIST CSF 2.0 in the box; the importer brings anything else. Here’s what comes after.
A visual builder for the recipe workflows the GUI and CLI already share — design once, run from either side.
Control-level custom frameworks with reusable, scoped client templates — model the standard your client actually signed.
A post-purchase setup sequence so you’re running the deck with confidence on day one.
Import a framework you already licence and map it against CSF 2.0 inside the bench. Included in AxiomLens — not a separate purchase.
Keep every framework current as the standards move — ownership, without the CaaS lock-in.
A private channel for paying customers, plus real outcomes from the field.
A partner track for shops deploying the deck across a whole client book.
A separate SKU bridging detection engineering to compliance posture.
Tiered pricing and a white-label option for larger MSPs and MSSPs, under MSA.
The vendor-dissolution continuity commitment, backed by a formal escrow arrangement.
Vanta / Drata import, Jira / Linear push, and GitHub Issues sync.
Read-only board reports and a risk dashboard, in your pocket.
Training and certification for operators who run the deck professionally.
Let MSP-built tooling call the engine for evidence rollup.
Every Tuesday — plus regular Gatorbyte releases and a steady YouTube cadence.
Every framework reviewed and refreshed each quarter.
Directional, not a commitment to dates — sequencing shifts with what customers need most.
