Asset Inventory
CIS-aligned CMDB with criticality, ownership, agent coverage and reconciliation.
Know what you own ZERONE GRC Platform Overview
Cyber governance, from Zero to One — controls, risk and evidence, connected
ZERONE connects assets, identities, vulnerabilities, configuration compliance, data security and risk automation into one control-driven operating model — turning fragmented tools and manual compliance into measurable, risk-based cyber maturity.
What is ZERONE GRC?
A Unified Cyber Governance, Risk & Compliance Platform
ZERONE is a unified cyber governance, risk and compliance platform. It connects every security control to the risks it reduces, the assets it protects, the evidence that proves it and the remediation it drives — turning fragmented tools and manual compliance into one measurable, control-driven operating model. From Zero to One.
Why Organizations Need It
Close the Gaps Between Security, GRC and Management
Fragmented tools and disconnected spreadsheets leave organizations without a shared, measurable view of risk. ZERONE brings it together.
Visibility Gaps
Fragmented security tools create blind spots — no single team sees the whole picture.
Siloed Data
Assets, software, accounts, vulnerabilities and compliance results are managed separately.
Issues, Not Risk
Security teams need a central place to convert technical issues into business risks.
Audit Readiness
GRC teams need evidence, audit readiness and clear risk ownership at all times.
Measurable Posture
Management needs measurable, continuous visibility into security and compliance posture.
One Operating Model
A single, auditable model connects every domain — from discovery to risk treatment.
Operating Model
From Discovery to Treatment & Reporting
Every step feeds the next on one shared data model — turning raw discovery into owned, tracked and reported business risk.
1
Discovery
Scan networks to fingerprint live hosts.
2
Asset Inventory
Populate the CMDB with discovered assets.
3
Endpoint Connection
Connect via credential-based agents.
4
Software Inventory
Collect installed software and versions.
5
Data Inventory
Map document metadata across endpoints.
6
Account Management
Enumerate local users and privileges.
7
Compliance Checks
Run CIS benchmark assessments.
8
Vulnerability Findings
Detect CVEs and exposure.
9
Risk Automation
Normalize findings into risk records.
10
Risk Register
Score, own and track every risk.
11
Treatment & Reporting
Remediate, evidence and report.
Core Modules
Every Domain on One Connected Core
Integrated, connected modules covering governance, risk, compliance, configuration checks, assets, data, identity and security operations — not siloed tools.
Software Inventory
Installed software with EOL/EOS lifecycle, CVE exposure and license reconciliation.
Control your software estateData Security
Locate business documents and sensitive-looking files with classification and DLP signals.
Reduce data exposureData Inventory
Metadata-only mapping of documents across endpoints — name, path, owner, size, dates.
Metadata only by defaultAccount Management
Local accounts, admins, guests, stale and privileged memberships from every endpoint.
Govern identitiesVulnerability Management
Multi-engine scanning with CVE detection, risk scoring and scheduled assessments.
Find and prioritize CVEsCompliance Management
Operationalise CIS Controls and framework requirements — map controls, run assessments and keep evidence audit-ready.
Prove complianceConfiguration Compliance
Upload CIS benchmarks, review the parsed checklist, scan assets with a read-only service account and score each asset — with manual review, exceptions, remediation and reports.
Benchmark-based assuranceRisk Register
Inherent/residual scoring, KRIs, treatment plans and a live heatmap.
Own your riskRisk Automation
Turn findings from every module into scored, deduplicated, owned risk records.
Findings become riskIncident Management
Operational incidents with taxonomy, impact rating and response strategies.
Respond fasterNotification Center
In-app and email alerts for overdue actions, critical risks and expirations.
Nothing slips throughAudit Logs
Tamper-evident, hash-chained audit trail captured automatically and exportable.
Tamper-evident historyLicense Management
License plans, seats and expiry tracked and reconciled across the deployment.
Stay within entitlementsVendor Update Management
SHA-256 / Ed25519-verified vendor packages applied through a controlled workflow.
Secure, verified updates Asset & Endpoint Intelligence
See Every Endpoint, In Context
ZERONE can discover hosts, test credential-based connection, then collect endpoint metadata, software inventory, local accounts, data file metadata, compliance status and vulnerability exposure — reconciled against the asset register.
Privacy by design. Data Inventory collects metadata only by default. It does not collect file contents, passwords, hashes, private keys, tokens or secrets.
Collected per endpoint
- Host fingerprint & asset metadata
- Software inventory & versions
- Local user accounts & privileges
- Data file metadata (no contents)
- CIS compliance status
- Vulnerability exposure
Data Security & Data Inventory
Know Where Your Sensitive Data Lives
Data Security helps organizations identify where business documents and sensitive-looking files are located across endpoints — so exposure can be measured, owned and reduced, without ever reading file contents.
Metadata only. Each record captures attributes about a file — never the document body, credentials or secrets inside it.
Captured per file
File namePathExtensionSizeOwnerModified dateSensitivity indicatorRisk levelLinked asset
Account Management
Surface Risky Identities & Privileges
Account Management collects local user accounts from endpoints and identifies the configurations that most often lead to compromise — so identity risk becomes visible and owned.
Identified signals
Local administratorsGuest accountsStale accountsDisabled / locked accountsPrivileged group membershipsRisky account configurations
Risk Automation
Turn Findings into Owned, Tracked Risk
Risk Automation converts findings from vulnerabilities, compliance gaps, data inventory, account management, software inventory and asset discovery into Risk Register records — automatically.
Finding→Normalize→Score→Deduplicate→Create Risk→Assign Owner→Create Task→Notify→Track Treatment
Compliance & Audit Readiness
Map Findings and Controls to the Standards You Report On
The platform helps map findings and controls to recognized frameworks and internal policy — with evidence ready whenever auditors ask.
CIS Controls
Benchmark-aligned configuration compliance and control mapping.
ISO 27001
ISMS controls, Statement of Applicability and maturity tracking.
NIST
Alignment to NIST CSF and 800-53 control families.
Internal Policies
Map controls to your own policy library and obligations.
Audit Evidence
Evidence, approvals and history captured automatically for every control.
Continuous Posture
Live dashboards keep compliance posture measurable between audits.
Security Architecture Principles
Secure by Design, Provable by Default
The platform is built on principles that keep your data protected and your governance defensible.
Least Privilege
Users and agents get only the access their role requires.
Defense in Depth
Layered controls across identity, endpoint, data and network.
Zero Trust Readiness
Per-request trust scoring and continuous verification.
Secure Credential Handling
MFA, hashed secrets and an encrypted vault for connection credentials.
Audit Logging
Tamper-evident, hash-chained logs of every sensitive action.
RBAC
Role-based access with vendor and customer separation.
Evidence-Based Governance
Decisions backed by captured evidence and approvals.
Metadata-Only Data Inventory
File metadata is collected — never contents, secrets or keys.
Business Value
Outcomes Leadership Can Measure
What centralizing GRC and security visibility delivers across the organization.
Better Visibility
One continuous, shared view of assets, risk and compliance posture.
Faster Audits
Evidence and control mappings are ready before auditors ask.
Centralized Risk Ownership
Every risk has a clear owner, task and treatment plan.
Reduced Manual Tracking
Automation replaces spreadsheets and manual reconciliation.
Stronger Endpoint Governance
Continuous endpoint intelligence and coverage reconciliation.
Better Management Reporting
Board-ready dashboards and measurable posture trends.
From fragmented controls to unified cyber governance.
Move your security programme from Zero to One — connecting assets, controls, configuration compliance, vulnerabilities, evidence and risk into one measurable, control-driven operating model.