The Architecture
of Trust.
Cyber and information-security governance for organisations in Ireland, the UK and the EU — and, since October 2026, the EU AI Act for the AI systems they use. It also keeps records for UK financial firms’ FCA and PRA duties.
Purpose-built modules to assess, analyze, and report on your enterprise IT risk and compliance posture.
- Alliance & Fleet Console
Partner Fleet Console
Multi-tenant client fleet orchestration for MSPs, MSSPs, vCISOs, and audit consultancies. Per-client data isolation enforced by database security rules, with up to 30%+ recurring commission.
- Per-Client Isolation Enforced by Security Rules
- 5-Milestone Rapid Practice Onboarding
- Co-Branded PDF Report Exports
View Product Details - Cross-Regulation AI Engine
Semantic Cross-Mapper
Single-evidence, multi-regulation harmonization. Map one policy or telemetry artifact simultaneously across NIS2, DORA, NIST CSF 2.0, and ISO 27001. AI-generated draft output — review before relying on it for an actual audit.
- Simultaneous 4-Framework Mapping
- AI-Generated Fulfillment Scoring (0–100%)
- Auditor Defense Memo — an AI draft for your review
View Product Details - Core Product
IT Risk Assessment
Our primary assessment module. Your answers are scored into the Vivid Maturity Index, each scored control names the requirement it is cited against, and every gap is ranked into a remediation roadmap.
- Remediation Roadmap
- Audit-Ready Reporting
- Framework Citations
View Product Details - EU AI Act
AI Act
The AI systems you use, and what the EU AI Act asks of you for each one.
- A register of your AI systems
- A guided path through the rules, for each system
- Your determination, recorded
View Product Details - FCA and PRA
UK Financial Records
For UK financial firms: your firm profile, important business services, material third parties and operational resilience work, with incident report packs in your incident register, and a Coverage tab showing what you have recorded against the operational resilience rules. You make every decision and submit every report yourself.
- Firm profile and important business services
- Incident report packs
- Material third-party register
View Product Details - Foundation
Core Platform
Our flagship assurance platform. Centralizes risk data, AI-assisted framework mappings, and audit evidence — driven by your real assessments, not run autonomously.
- Unified Governance Dashboard
- Multi-Framework Support (ISO/NIST/NIS2/DORA)
- Evidence Metadata Registry
View Product Details - Real VMI Scoring
Risk Magnitude
Your VMI score, a remediation spend optimizer and a Monte Carlo loss estimate, each worked out from your own answers and estimates.
- VMI Scoring From Your Real Answers (ENG-01)
- Exact 0/1 Knapsack Spend Optimizer (ENG-09)
- FAIR Monte Carlo Loss Distribution (ENG-03)
View Product Details - Real AI, Real Data
Audit-Readiness Agent
Vigilance-1: an AI-assisted summary of your real assessment findings. Additional agents are on our public roadmap, not sold before they exist.
- Vigilance-1 Summarizes Your Real Findings
- Shows Nothing Before a Real Assessment Exists
- Fails Honestly If the AI Service Is Down
View Product Details - Strategy
Strategic Posture
High-level risk assessments that align IT controls with enterprise business outcomes.
- C-Suite Level Reporting
- COBIT 2019 Goal Alignment
- AI-Assisted High-Level Risk Assessment (Draft Output)
View Product Details - Security
Vulnerability Hub
Lifecycle tracking for technical exposures, logged by hand or imported from your scanner's export. Nothing here scans your systems.
- Scanner Export Import (CSV, .nessus, SARIF, Trivy)
- CVSS-Sorted Triage
- Remediation Deadline Tracking
View Product Details - Evidence
Technical Controls
Your record of the security tests you commission, the tools you run and the assets each covers, and where your logs go. Recorded by you: we run no test and read no log.
- Security Testing Register
- Tool Coverage by Asset
- Logging & Retention Register
View Product Details
See the Vivid Risk Stack in Action
Explore how consulting firms, MSPs, and enterprises streamline audit readiness, reduce compliance duplication with AI-assisted cross-mapping, and manage multi-tenant client fleets.
Vivid Risk Governance Platform Overview
Deep dive into multi-framework cross-mapping, the evidence metadata registry, and managing multiple client entities as a partner.
Better together.
For MSPs & Auditors.
We provide co-branded reporting tools for partners to scale their cybersecurity advisory — full white-label at our top partner tier. Replace spreadsheets with structured, defensible governance workflows, multi-tenant client fleet orchestration, and up to 30%+ recurring commission.
MSP Fleet Console
Manage compliance for any number of client entities on every partner tier — each holds its own Compliance Workspace subscription and consents to being managed, or, from Practice Partner, is paid for by your practice per client per month — and each is isolated from the others by database security rules.
5-Milestone Onboarding
Structured roadmap from Day 1 qualification to full MRR scaling.
Cross-Regulation Engine
Map a single piece of evidence across NIS2, DORA, ISO 27001, and NIST CSF 2.0 today, with more frameworks on our roadmap.
Co-Branded Report Exports
Your logo and accent color on every PDF export — Full Report, Findings Report, Response Log, and Certificate of Diligence.
Start Your Assurance Journey Today.
Deploy the Vivid Risk stack and transform your audit readiness from a burden into a competitive advantage.