Collection
Connect the systems you already operate. Access is read-only, and a credential returned with write permission is rejected at connection time rather than retained. Setting up a source is a sign-in, not a configuration exercise.
PlatformFour stages
Four stages run continuously inside your network. The boundary at the end of them is fixed: Quanovio measures, and never changes anything in your systems.
Connect the systems you already operate. Access is read-only, and a credential returned with write permission is rejected at connection time rather than retained. Setting up a source is a sign-in, not a configuration exercise.
Every signal is attached to a numbered control of CIR (EU) 2024/2690 before it is stored. A signal that cannot be attached to a control is not reported, because an assessor has nowhere to put it.
One compliance report per day, written as a difference from the previous one: what opened, what closed, what recurred. Incidents are not held for the daily report — Article 23 measures in hours, and a batched alert consumes the window.
A finding persists between collections and carries state. Your administrators remediate; the next collection records the outcome as closed, unresolved or recurring. Time from first detection to verified closure is produced as a by-product, and is itself the evidence point 7 asks for.
It does not remediate. No connector holds write access, no configuration is changed, no account is disabled and no file is moved. Remediation is performed by your administrators, and Quanovio measures the result.
Sources are added one at a time, and each one states which numbered controls it advances. A source that advances none is not offered.
| Source | Status |
|---|---|
| Microsoft 365 and Entra ID — sign-in, authentication methods, accounts and external sharing | Available |
| Windows, Linux and macOS servers — file integrity, configuration, inventory and vulnerabilities | Available |
| Firewalls and network equipment | In development |
| Cloud platforms and identity providers | In development |
| Log destinations you already send to | In development |
Describe your environment and you will receive a written statement of the controls it would evidence, and the ones it would not.
See your coverage