Controls

The controls you have in place and the gaps in coverage.

Fixing vulnerabilities is half the job. The other half is confirming that your controls are working: EDR installed, systems under support, and configurations that meet the standard. BeforeTHEM measures each of these on every scan and maps the results to the requirements of the frameworks your company follows.

Defense coverage

EDR coverage verified on every machine.

BeforeTHEM recognizes more than 30 EDR and antivirus products from the services running on each machine, with or without credentials. The result is a list of unprotected machines, cross-referenced with the highest-risk factors.

  • Unprotected. Machines with neither EDR nor antivirus, by branch and by type.
  • Exposed and unprotected. A server with an exposed service and no EDR moves up the queue.
  • Out of support. Systems that no longer receive patches, with their end-of-support date.
  • Blind spot. Machines that don't have an authenticated inventory yet.

Controls and frameworks

Alignment measured requirement by requirement.

Internal network findings are mapped to the controls of nine frameworks. Each requirement shows its status, score, affected assets, and the evidence behind the result, along with a plan to close the gaps that weigh the most.

BACEN · Res. CMN 4.893 and BCB 85PCI DSS 4.0ISO 27001CIS Controls v8NIST CSF 2.0LGPD and GDPRSOC 2HIPAANIS2
REPORT BY FRAMEWORK

Ready for your compliance team

HTML and PDF reports with the status of each requirement, the action plan, and the evidence trail. The framework selector produces the same view for every standard.

BENCHMARKS

Configuration compared with the baseline

CIS-style configuration benchmarks, with results by host and by rule, showing how far each server has drifted from the baseline.

See the controls on your network.

In the demo, we show EDR coverage and the framework report for a simulated network.