Compliance you can
actually operate.
AxiomLens is your GRC command deck: NIST CSF 2.0 turned into computed coverage, scored risk, and a board-ready report — running locally on your machine, your data in a database you own. Where a CaaS platform rents you a dashboard and holds your evidence in their cloud, this is the owned alternative. One-time license: activate once, then it runs fully offline — no account, no subscription, nothing phoning home after activation. And when someone asks where your posture stands — an auditor, a cyber-insurer, a new client — the answer is already computed and one click from a PDF.
Own it. Don't rent it.
A CaaS platform rents you a dashboard and holds your evidence in their cloud. AxiomLens does the same job from a system you own outright.
"One-time license, per user. Activate once, then it runs fully offline on your machine — your own database, no API key needed. You own it and operate it — no account, no subscription, nothing phoning home after activation."
Own your deck. Don't rent your compliance.
Free to try, $99 to start, and two owned tiers that carry your whole client book — a difference, not a discount.
- Free starter kits & field guides
- All 5 CSF functions to explore
- No login, open in any browser
- All 106 NIST CSF 2.0 subcategories
- Answers stay in your browser
- Exports to a file you own
- Computed coverage, maturity & scored risk
- Board Report + Hand-Off, both print to PDF
- Multi-environment — your whole client book
- Founding: includes one framework pack free
- The full engine at CLI parity — no GUI
- Status, sign-off, POA&M, snapshots, exports
- Same database, same framework packs
Framework packs $199 each, à la carte. Cyber-Insurance Evidence Pack $250. Comparison: ComplianceForge ≈ $1,980 static · CaaS / SaaS GRC $10k+/yr rented · AxiomLens — computed, owned. Browse packs ↗
The Board Report and the Hand-Off. Both print to PDF.
Built for the moment a third party asks — the auditor, the insurer, the client. You're not reconstructing evidence at midnight; you're printing what's already there. File → Print → PDF, hand it over. No portal invites, no CSV wrangling, no evidence hunt the night before the audit.
The convenience add-on: Cyber-Insurance Evidence Pack ($250). Drop one file into your install and a dormant module unlocks in both paid tiers — a 20-question readiness view mapped to what insurance applications actually ask, with a clean evidence export you can hand straight over. Minutes to a defensible answer, not an afternoon of spreadsheet archaeology.
AxiomGlass — start here with one org and a deadline.
A single self-contained file that opens in any browser — no subscription, nothing to install, no account to create. Score NIST CSF 2.0 across all 106 subcategories; your answers stay in your browser and export to a file you own. When the security questionnaire lands or the deadline hits, you're working a structured checklist — not staring at a blank page at 11pm. The frictionless on-ramp to AxiomLens when you outgrow it.
Get AxiomGlass — $99 ↗One command deck. Your entire client book.
Run NIST CSF 2.0 across every engagement from one deck — computed coverage per client, scored risk, and the deliverables that close engagements: Board Reports, client-ready Hand-Offs, and Cyber-Insurance Evidence Packs. When procurement, the insurer, or the auditor asks for proof, the answer is a printed sheet — not a week of spreadsheet archaeology.
Parallel deployments
Run multiple environments side by side — each client's data isolated in its own private local database.
Team seats, one-time
2–10 named seats, the discount deepening with every seat added — no floating licenses, no rent. Above 10, or any MSP-wide / multi-tenant / white-label use: a signed MSA.
MSAs that defend
Continuity commitment and ownership posture that survive a vendor-risk review.
Read an issue before you subscribe.
Three sections, twelve minutes, every Tuesday — frameworks, configs, and the takes nobody else publishes. Each links to the free web archive.
#003Your team is already using AI you never approvedShadow AI: three questions that surface every unapproved tool — plus a 1-page policy to hand them.↗ #002An AI just ran a ransomware job. The whole thing.No human at the keyboard — what it changes for your controls, plus a free evidence tracker.↗ #001Come, Take Your First Byte.The launch issue: The Pulse, The Hardened Stack, and The Boardroom Bridge.↗ Subscribe free ↗Gatorbytes.
Free, self-contained kits and plain-language guides that ship inside Bayou Bytes — open in any browser and use today.
#001 · Ten NIST CSF 2.0 controls teams miss mostThe gaps auditors flag first, with the evidence that closes each.↗ #002 · The Govern TrackerThe three policies that move Govern fastest — run it this week.↗ #003 · The Evidence RegisterOne row per artifact — stop hunting for proof at audit time.↗ #004 · The Shadow AI Starter KitDiscovery drill, tool inventory, and a 1-page acceptable-use policy.↗The things you'd email to ask.
No tool does. AxiomLens helps you organize, document, and track your controls against NIST CSF 2.0 — visibility, computed posture, and evidence you can stand behind. Compliance itself requires human judgment, process, and often an external audit; the deck supports that work, it does not replace it.
No. Everything is a one-time license — AxiomLens $599 founding, Engine Core $250 founding, AxiomGlass $99 flat. Framework packs are à la carte at $199 each. No recurring fee on anything, ever.
The paid local tiers (AxiomLens and Engine Core) verify your purchase once at first launch — order ID and email, node-locked license — and every launch after that verifies offline. Fully offline in operation; nothing phones home after activation. AxiomGlass is the online entry tier: it runs a quick license check each time it opens.
Yes — AxiomLens and Engine Core are multi-environment by design: an MSP client book, vCISO engagements, subsidiaries, parallel environments. AxiomGlass ($99) is single-org only.
By default there is no AI in the report path. Metrics are computed in Python — deterministic. The board narrative is written by a deterministic template that owns every number, so the same input produces the same report. Want model-polished prose? Opt in with your own API key (BYOK) — your key, your account, your egress. We supply no keys, models, or usage.
We fix it — repair, not refund. All sales are final; see Legal for full terms and the storefront's policies.
Connect.
Field notes, the tools, and where to find us.