Pages: Home
/en, Product overview/en/productChinese source: 03-product-page-copy.md[Screenshot #N]refers to the screenshot list in 01 inventory §3.🟡marks features that are finished but not yet released; the decision maker decides whether to keep them at launch.🔵marks features committed and in development (built-in ISO 27001 framework), to be finished before the site launches.
/enVoice (set by the decision-maker on 2026-10-22, applies site-wide): a working auditor talking. Short sentences, concrete scenes, no adjectives; say what the product does not do; name tools, framework versions and numbers. The headline is a slogan; the definition sentence right under it is what search engines and AI use to identify the product.
Headline
Compliance, as part of the everyday
Definition (first line under the headline, for SEO/GEO, do not remove)
Guidant AI is a compliance audit management platform deployed in your own data center, supporting CMMC 2.0, ISO/IEC 27001:2022 and the EU CRA.
Subheadline
Evidence is where you left it. Findings are on record. What you fixed last year is still visible this year. Every control's status, evidence and remediation live in one place, so the day the auditor arrives, nobody is digging through folders.
Buttons: [Book a demo] [See the product]
Built-in frameworks and standards
The audit date is set. The evidence is still missing. Policies on a shared drive, screenshots on a colleague's laptop, last year's scan report buried in an inbox. Two or three weeks later, what you found may not even be the right version.
Last year's findings, and nobody remembers them The report listed twelve items to fix. How far they got, and where the evidence is, lived with the person who handled it. They moved on, and so did the record.
This evidence was never meant to leave the building Network diagrams, vulnerability reports, your customers' controlled information. Upload that to someone else's cloud, and your security team will be the first to say no.
AI evidence classification Drop in a few hundred files. The AI reads each one, proposes which requirement it belongs to, and puts the low-confidence ones first. It suggests; it never decides. Nothing is filed until you confirm it.
Scan results become evidence automatically The scan Agent sits inside your network and runs eight tools, including OpenVAS, Nessus, ZAP and OpenSCAP. Reports land in the matching task automatically. It scans only the assets you registered, and nothing else.
Audit records carry over year after year One project manages one framework for as long as you need. Each new cycle carries over the controls, evidence and open findings from the last one, with every past ruling intact.
The whole system in your data center A complete installer, with evidence files stored wherever you specify. AI features pass through a built-in gateway that blocks prompt injection and improper requests. You choose the model and hold the keys. On an isolated network, connect an internal model or switch AI off entirely.
Guidant AI does not issue certificates and does not replace the auditor. Its job is to have your system security plan, evidence and remediation plan ready before the auditor walks in.
Compliance consultants and audit firms Every client you serve follows the same method. Turn your control selections, system security plan templates and audit procedures into a reusable library and apply it to the next engagement. Interview notes import as the client's system security plan; the closing report is generated from the data, and you write only the summary.
Enterprise security and audit teams ISO 27001 and CMMC in the same year? Overlapping controls are done once and the evidence is shared. Management opens the GRC overview and sees which department is behind and which risk matters most, without another slide deck.
Regulation guides
Bring the framework you are preparing for Thirty minutes, walked through with your controls and your evidence. Not a generic demo. [Book a demo] [Talk to us]
/en/productHeadline
One platform for every step of the compliance audit
Subheadline
From frameworks to final reports — twelve core capabilities that let consultants, audited teams and auditors work in the same place.
[Screenshot #1]
Turn regulations into reusable work templates
Regulations are long. What teams actually need is "what do we check for this requirement, and what evidence proves it." Guidant AI ships with major frameworks and lets consultants package their expertise into libraries the next client can reuse.
[Screenshot #2]
One project per framework, managed cycle after cycle
A project doesn't close when an audit ends. Each cycle moves through planning, internal audit, external audit, remediation and closing. Items that fail go into a re-verification cycle, and next year's cycle picks up where this one left off.
[Screenshot #1]
Explain, control by control, how you do it today
The system security plan is the first document an auditor reads. Guidant AI lets you record the implementation status and description of every control, link procedures, and keep it current year after year.
[Screenshot #3]
Every requirement has an owner, evidence, and someone who signs off
Break assessment objectives into tasks and assign them to the people who actually do the work. Owners upload evidence and fill in questionnaires; managers and consultants review in turn, and every approval or rejection is recorded.
[Screenshot #4] [Screenshot #5]
Drop in a batch of files — AI puts them in the right place
The slowest part of evidence work is deciding which requirement each document supports. Guidant AI reads the content — PDFs, images, Word, Excel, slides — and suggests the matching assessment objective. You confirm, and it's filed into the task.
[Screenshot #6]
Vulnerability and configuration scans that become evidence on their own
Deploy the Guidant AI detection agent in your environment and assign scans from the platform. The agent runs them inside your network, and reports flow back to the matching task.
Nessus and SonarQube require your own licenses. Nmap must be installed on the execution host.
[Screenshot #7]
See which components carry known risk — no coding background needed
Upload source code or an SBOM. Guidant AI produces a standard software bill of materials, checks it against known vulnerabilities with three tools, and flags what's actively exploited (KEV) and how likely exploitation is (EPSS).
[Screenshot #8]
Auditors assess item by item; failures go straight into the remediation plan
The audit plan sets out the method and the people and assets in scope for every objective. Auditors see the system security plan narrative, evidence and scan reports on one screen and record their assessment. Anything marked not met flows into the remediation plan with an owner and a due date.
[Screenshot #9] [Screenshot #10]
When a cycle ends, the formal report is ready
Every chapter — project overview, overall conformance, key findings, remediation summary — is generated live from the audit data. Only the "summary and recommendations" section needs a consultant's hand.
[Screenshot #11]
The one page leadership wants: compliance and risk across the company
Once compliance is under way, leadership asks: "Which department needs attention? What's our biggest risk?" Guidant AI brings ownership and risk into the same platform.
[Screenshot #12] [Screenshot #13]
Ask how the system works, ask how to meet a requirement, or build a chart in one sentence
[Screenshot #14] [Screenshot #15]
Meets enterprise IT requirements, installed in your data center
[Screenshot #16]
| Feature | Description |
|---|---|
| Questionnaires | Design questionnaires and attach them to tasks for audited teams to answer |
| Announcements and feedback | In-app announcements; issue reports can sync to GitLab or GitHub |
| Cloud integration | Pull evidence from Google Drive folders |
| Asset inventory | Information systems and devices, including versions and support periods |
| Languages | Traditional Chinese and English interfaces |
| Light and dark themes | Switch to suit your preference |
| On-premises | |
|---|---|
| Where it runs | Your own servers or private cloud |
| Where data lives | Entirely in your environment; evidence files on local disk, SeaweedFS object storage or a designated file agent |
| Installation | Complete installation package, manuals and video tutorials |
| Outbound connections | AI features connect to an AI service; other features can run in a closed network [to be confirmed] |
| Licensing | Licensed by module; enable modules in stages |
How much audit-prep time could Guidant AI save your team? Tell us which framework you're preparing for, and we'll set up a 30-minute demo. [Book a demo] [Talk to us]
/en/product/*)| Page | Headline | Subheadline |
|---|---|---|
| Compliance and audit management | From first assessment to final report, on one platform | Frameworks, system security plans, tasks and evidence, audits and remediation — every step owned and on record. |
| AI capabilities | AI does the sorting. People make the calls. | Evidence classification, an AI assistant and AI dashboards — with every AI call screened by the gateway. |
| Automated scanning | Stop uploading scan reports by hand | The detection agent runs eight scanning tools inside your network, and the results become audit evidence automatically. |
| GRC: governance and risk | Start with compliance, then see ownership and risk across the company | Department ownership, a company risk register with heat map, and a one-page view for leadership. |
| Deployment and security | Your compliance data stays in your data center | On-premises deployment, access management, enterprise integration and code protection that meet IT and security requirements. |