01 Policy Ingestion
A compliance officer uploads a corporate security policy PDF. The system parses the document, digitizes it into structured control statements, and automatically maps them to selected compliance frameworks.
02 Audit Readiness Dashboard
Before a scheduled ISO 27001 surveillance audit, the internal auditor reviews the Readiness Dashboard to assess policy coverage across all frameworks, filter by framework, and identify low-confidence mappings.
03 Live Environment State
A security engineer connects Verifod to their AWS account via a read-only IAM Role. The Live Dashboard shows real-time PASS/FAIL status for each control. The engineer drills into a failed control to see the specific misconfigured resource.
04 Integrity Gap Report
The CISO runs the Integrity Gap Engine to compare what the security policy says against what live infrastructure enforces. The report surfaces "False Compliance" items and a False Compliance Index score.
05 Remediation Board
A security analyst imports all integrity gaps as remediation tasks. They assign tasks to team members, track status, attach evidence files, and run re-audits to verify closure.
06 Vendor Risk Profiler
Before engaging a new SaaS vendor, the procurement officer enters the vendor's name into the Vendor Risk Profiler. The system aggregates external threat intelligence from multiple sources.
07 Compliance Check Tracking
The compliance administrator sets up checklists per framework, assigns evidence collection tasks to team members, and tracks completion status ahead of audit deadlines.
08 On-Premises Agent
An IT administrator deploys the Verifod agent to a Windows server in a remote branch office. The agent authenticates via WebSocket, scans Active Directory, and sends results back.
09 Vendor Assessment Forms
A compliance lead describes the service a new data processor will provide. The AI Form Generator produces a tailored security questionnaire. The lead sends a shareable link to the vendor.
10 Notifications
A remediation task is assigned to a team member. They receive an in-app notification with an unread badge. Opening it navigates directly to the Remediation Board.
11 TPRM Questionnaire Filler
A compliance lead receives a security questionnaire from a new vendor. Using the browser extension, questions are auto-filled from the Answer Library with Jaccard similarity matching, saving hours of manual work.
12 Web Application Vulnerability Scanner
A security engineer runs an on-demand scan of their web application. Verifod tests it against the OWASP Top 10, scores each finding by severity, and maps results to compliance controls with remediation guidance.
