A point-in-time NIST CSF 2.0 assessment gives you a score, then quietly drifts as controls change, infrastructure shifts, and staff turnover erodes adherence. Continuous monitoring re-baselines on your cadence — 3, 6, or 12 months — and feeds a live dashboard that shows Current State plus Change Over Time. The output isn't a thicker report. It's posture you can stake decisions on.
Continuous monitoring is structured so each cycle is short, the dashboard stays live between cycles, and the burden on your team stays predictable. You start with a fresh NIST CSF 2.0 baseline, then your cadence cycles keep the score honest.
Your first cycle establishes the baseline — the NIST CSF 2.0 instrument runs across all six functions (Govern, Identify, Protect, Detect, Respond, Recover) with role-specific webforms. Self-Service clients complete the refresh themselves; Advisor-Led clients schedule an intake interview or email exchange with the founder. Output: a Current State dashboard and a baseline PDF you can hand to a board, a prime contractor, or an underwriter.
At each cadence boundary the same instrument runs again — refreshed webforms capture what changed since the last cycle. The dashboard adds a new row of function scores, the Change Over Time view extends one more step, and the cycle PDF is filed in your history. No quarterly scramble: most Self-Service clients spend ~30 minutes per cycle; Advisor-Led clients spend ~5 minutes reviewing founder-produced updates.
Between cycles the dashboard is live. Current State shows your latest function scores and the controls driving each score; Change Over Time shows the trajectory per function across every cycle you've run. Both views export to PDF on demand — for board updates, vendor security questionnaires, cyber insurance renewals, or evidence packs during a procurement cycle.
Each cycle produces a packaged PDF export that captures Current State + Change Over Time at that moment in time — a dated snapshot suitable for auditors, underwriters, and procurement teams. The full export history is retained on your dashboard so you can show the trajectory to anyone who needs to see it, no assembly required.
Faster-moving operations need shorter cycles to catch drift early. Stable environments can stretch to annual. Both tier options support all three cadences — switching cycle length is a single check at the next cycle boundary.
Both tiers deliver identical Current State + Change Over Time dashboards and PDF export. The difference is who drives data collection each cycle.
| Feature | Self-Service | Advisor-Led |
|---|---|---|
| Webform data entry | Client completes the refresh webforms each cycle | Founder gathers data via interview or email and inputs on client's behalf |
| Current State dashboard | ✓ | ✓ |
| Change Over Time dashboard | ✓ | ✓ |
| One-click PDF export | ✓ | ✓ |
| Interview / email data gathering | — | ✓ |
| Founder-led synthesis | — | ✓ |
| Time investment per cycle | ~30 minutes (webform refresh) | ~5 minutes (review founder output) |
| Price | [TBD] Pricing being finalized |
[TBD] Pricing being finalized |
The dashboard is the deliverable. Both tiers get the same set of views plus on-demand PDF export. Every cycle refreshes the views and adds a timestamped PDF to your export history.
Live snapshot of your NIST CSF 2.0 function scores — Govern, Identify, Protect, Detect, Respond, Recover — with the controls currently driving each score. Useful for vendor questionnaires, board updates, and "where do we stand right now" conversations.
Trend line per NIST function across every cycle you've recorded. Shows what improved, what regressed, and where the next quarter's effort should land. The view that makes a continuous-monitoring subscription worth more than an annual assessment.
Every dashboard view exports to a dated, branded PDF on demand. Cyber-insurance renewals, prime-contractor vendor security reviews, and audit evidence packs go from "let me run a report" to a single button click.
Email notification when your next cycle window opens. Self-Service clients get the reminder plus the link to the refresh webform; Advisor-Led clients get the reminder plus scheduling for the founder intake interview. No calendar drift.
Pricing research is in progress as of this page's launch. Subscribe buttons below take you to a discovery call where we share current pricing and confirm fit, cadence, and tier. Live pricing will appear here once final.
Continuous monitoring is best scoped with a 30-minute conversation — we'll confirm the right cadence, the right tier, and answer implementation questions for your stack. Early-access clients lock in launch pricing.