Hardening checks, without the spreadsheet.
Upload a CIS Benchmark, select your targets and run a review. Each result keeps its captured output and disposition, evidence is filed automatically, and dashboards show trend and drift.
Illustration with sample data
What Configuration Assessment (CIS) does
Configuration drift is a leading source of audit findings. Upload a CIS Benchmark and AI extracts its controls. Then start a review: select the benchmark and targets, run it, and review each result with the output captured from the target and your disposition, including Not Applicable. Reviews can be scheduled, and credentials are used only for the scan.
Evidence is kept for each scanned target and in the Evidence Library. Benchmark controls can be mapped to canonical controls, so results count toward every framework those controls reach. The dashboard shows the compliance score trend, top failing checks, drift alerts and mapping completeness, and each panel can be added to a personal dashboard.
Key capabilities
Benchmark extraction
AI extracts controls from an uploaded CIS Benchmark.
Windows & Linux targets
Scan over WinRM or SSH; credentials are never stored.
Reviewed results
Captured output and a disposition, including Not Applicable, for every check.
Scheduling
Recurring reviews to catch drift.
Evidence filed automatically
Per-target evidence, also in the Evidence Library.
Mapped to controls
Benchmark controls map to canonical controls and every framework they reach.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Configuration Assessment (CIS) changes for your programme.
Secure configuration evidence
Benchmark results support secure-configuration requirements.
Less manual configuration review
Automated checks replace host-by-host reviews.
Before attackers find it
Scheduled reviews and drift alerts surface insecure settings early.
Agentless scanning
No software to deploy on target hosts.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Upload the benchmark
AI extracts its controls.
Select targets
Pick hosts and the benchmark to apply.
Run and review
Record a disposition for each result.
Schedule
Repeat on a cadence and watch the trend.
Supports your obligations.
Configuration Assessment (CIS) contributes evidence and coverage to these frameworks and regulations.
Common questions.
Are credentials stored?
No. They are used for the scan and then discarded.
Can reviews run automatically?
Yes. Reviews can be scheduled to detect drift.
Do results count toward frameworks?
Yes, once benchmark controls are mapped to canonical controls.
Works better together.
Firewall Policy Assurance
Every ruleset upload becomes an immutable snapshot of that firewall. Deterministic checks find permissive, shadowed and risky rules, changes are tracked rule by rule,…
Learn more →Control Assurance & Security ReviewsExposure Assessment
Authorised, agentless scans of Linux and Windows servers that discover card data, credentials, exposed keys, expired certificates and configuration issues. The scanner…
Learn more →Compliance ManagementPolicy-as-Code & Continuous Monitoring
Run automated technical rules against the data RiskVantis already collects from Microsoft Entra ID, Microsoft 365, your assets and privacy records. Start from a rule…
Learn more →See Configuration Assessment (CIS) in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.