Free Tool · No Signup
Compliance coverage, honest math.
Toggle the integrations in your stack. See exactly which SOC 2, ISO 27001, NIST CSF, CMMC, CIS v8, and HIPAA controls each one evidences and what's structurally unreachable without policy or attestation work.
Same matrix our paying customers use. Frozen 2026-05-01. Two integrations covering the same control don't auto-promote to full that's the marketing-inflation trick we don't play.
Coverage simulator
Click integrations to add them to your hypothetical stack. The bars below update in real time. Hovering each bar shows the raw control counts.
How the math works
The short version. Full breakdown linked below.
Deterministic math
Same inputs always produce the same output. No LLM in the loop, no opaque scoring. Union of full_control_refs across selected providers, divided by the framework's control total.
Full vs partial
Full means the integration directly evidences the control via a typed FINDING_MAP. Partial means evidence comes from keyword-matching against control text present but lower-confidence.
Honest defaults
Two integrations both partial-covering the same control stay partial. No auto-promotion to full. Conservative assuming additivity by default would silently inflate ceilings.
Process-control floor
Some controls structurally cannot be evidenced by integrations they require policy, attestation, or human review. The gap between your bar and the ceiling reveals this floor.
Coverage is just step one.
Radius360 turns this same data into board-ready posture trends, AI-drafted remediation, and a portfolio view for vCISO firms managing 5–50 clients.
7-day Pro trial. No credit card.