Project Compass
This product evaluates how close an organization's identity, device and network controls are to a zero-trust architecture, and produces a concrete, evidence-backed gap list rather than an abstract maturity score.
Product status
- Concept
- Prototype
- MVP
- Pilot
- Beta
- Production
- Scale
Problem
Zero-trust adoption guidance is often abstract, and organizations struggle to translate it into concrete, prioritized engineering work.
Why this problem matters
Without a concrete gap analysis, zero-trust initiatives risk becoming a marketing label rather than a measurable architectural change.
Solution
Evaluates identity, device and network configuration against a zero-trust reference model and produces a prioritized, evidence-linked list of concrete gaps and recommended controls.
Core capabilities
- Zero-trust gap analysis
- Evidence-linked findings
- Prioritized remediation list
Architecture
Configuration from identity, device and network sources is evaluated against a zero-trust reference model, producing a prioritized gap list.
How it works
- 1Connect identity, device and network policy sources.
- 2Configuration is evaluated against a zero-trust reference model.
- 3Gaps are prioritized and linked to the evidence behind them.
- 4Teams track remediation of specific, concrete gaps rather than an abstract score.
Security model
- • Read-only configuration access
Designed to align with NIST 800-207 concepts; no certification held
Integrations
- • Planned: major identity providers and MDM platforms
Deployment models
Target customers
- • Identity and access management teams
- • Security architects
- • Enterprises pursuing zero-trust initiatives
Business model
To be determined.
Differentiators
- • Concrete, evidence-linked gaps rather than a single abstract maturity score.
Evidence
Architecture & documentation
Reference model draft
ConfidentialTraction
Stage
Concept
Roadmap
now
Reference model definition
Define the concrete control checklist behind the gap analysis.
next
First IdP connector
Working evaluation pipeline against one identity provider.
later
Device and network expansion
Extend evaluation to device and network policy sources.
Team capability
Investor relevance
Targets the gap between zero-trust messaging and concrete, measurable engineering progress.