Argus finds the gaps, ranks the fixes and shows its work.
Argus is the orchestrator behind the Compliance Workspace. It connects to your systems, evaluates what they actually report, and runs a team of specialist agents that map each gap, rank the fix, check it once your team has made it, and assemble the evidence. Compliance becomes the result of being secure, not a checklist you fill in.
- Read-only Microsoft Entra ID connection, in controlled beta
- Every finding with the facts behind it
- Fixes ranked, then verified on the next assessment
- Built and hosted in the EU
The problem
Compliant, and still exposed.
Most compliance tools were built to get a startup through its first audit. They track a checklist, collect documents as proof, tell you a control failed, and leave a person to work out why, what to fix first and how to convince the auditor. Companies end up holding the certificate and the risk at the same time.
European regulation is now pulling mid-sized companies into this for the first time. They need to know what is actually wrong, in what order to fix it, and how to show their working.
The Compliance Workspace
One web workspace, four areas
Everything Argus finds lives in one workspace in your browser. Each area shows its status today, so you know what works now and what is still coming.
Integrations
Controlled betaThe systems you have connected, what each one is allowed to read, and whether its last collection succeeded.
Findings
AvailableEach gap with its severity, the control it affects, the facts behind it, and its place in the plan.
Reasoning
AvailableFor every claim, the chain from what Argus observed to the control, the fix and the evidence that closes it. A graph view of the whole chain is planned.
Evidence and readiness
AvailableThe evidence library, and readiness as controls confirmed and evidence coverage, each with its reasons. Evidence is recorded as text and details today; file upload is not available yet.
What Argus answers
Every claim ends in one of five states
Argus evaluates requirements, controls and evidence into bounded claims. Each claim carries one state, and an open claim names the blocker holding it up and who has to clear it.
Proven
Every proof condition Veylan defined for this claim is established.
Partially proven
Some of what this claim needs is established and some is not.
Open
What this claim needs is unresolved or not established.
Stale
This claim would otherwise meet its conditions, and its evidence is no longer current.
Contradicted
Facts recorded against this claim conflict with each other.
One flow, start to finish
Security review before we sign
The moment Argus is built for: an enterprise deal waiting on evidence. This is an illustrative flow, not a customer case.
The ask
An enterprise prospect wants security evidence before they sign, and the review is due on Friday.
Connect
Your administrator opens the Compliance Workspace and connects Microsoft Entra ID with read-only consent.
Find and map
Argus reports, for example, that multi-factor authentication is not enforced for some administrator roles, with the role assignments that show it and the control it fails.
Explain, fix, verify
The reasoning shows what Argus saw, why this fix ranks first and which evidence closes it. Your administrator makes the change. On the next assessment Argus checks it and marks the fix verified.
Prove
You answer the prospect with a readiness report that carries the reasoning and the evidence behind each control, not a score.
Who it is for
Teams that have to prove they are secure
Built for
Mid-sized European companies meeting NIS2, the EU AI Act or GDPR scrutiny for the first time: fintech, health, SaaS sold to enterprises, and suppliers to critical infrastructure.
Also for
Security teams that already passed an audit and still feel exposed, and want the reasoning behind every control rather than a green tick.
Who buys it
Usually the CISO or Head of Security, with the CEO or COO involved when an enterprise deal is waiting on a security review.
Where we draw the line
Argus makes you ready. It does not make you certified.
Everything in the workspace is designed for structured preparation: knowing what is missing, closing it in a sensible order, and being able to show your working. The claims stop exactly where the evidence does.
Readiness, not certification
Argus prepares you for audits and enterprise reviews. Certificates and audit opinions come from an accredited auditor, never from us, and never from an agent.
Evidence decides
A control counts as supported when there is evidence behind it. No evidence, no green status, even if the policy sounds right.
Argus recommends, people act
Argus tells you what to fix first and checks the fix afterwards. A person in your team makes every change in your own systems; Argus never changes them, and never signs off on your behalf.
No scanning theatre
We review the checklists and configuration you connect. We do not run penetration tests, and we never claim your systems are secure.
See what you can actually prove
Set up your workspace, let your specialist team evaluate it, and get back a list of claims that are proven, and the blockers holding up the ones that are not.
Free to start · No credit card · Readiness preparation, not certification