Continuous cloud assurance for the UK public sector
Prove your security once. Keep every promise checked.
Turn your live cloud configuration into sealed evidence for G-Cloud 15, Cyber Essentials and the NHS DSPT — and keep every promise to every buyer checked.
- 14
- NCSC principles mapped
- < 1 hr
- broken-promise alerts
- 0
- write permissions
What you get
Built for the 90% of G-Cloud suppliers who are small — and tired of proving the same thing twice.
Read-only connectors
Published CloudFormation, Azure and Terraform templates. No write access, ever — or upload a snapshot for a free check.
Sealed evidence
Every pack is hash-chained and time-stamped. Any buyer or auditor can verify a seal publicly, without an account.
Buyer-specific ledger
Promises are tracked per buyer and contract. A drift alert names the exact commitment and buyer at risk.
Pre-deployment gate
A CI step blocks a Terraform change before it breaks a commitment — prevention, not after-the-fact reports.
Grounded answers
G-Cloud, Cyber Essentials v3.3 and DSPT answers cite evidence IDs. Anything unproven is flagged, never assumed.
Ready-to-submit exports
Service Security Annex and UK Data Residency & Sub-processor Schedule, formatted for the Digital Marketplace.
Buying from a supplier?
Buyers use the verification portal free — you see whether promises hold, never their configuration.