Technical Control Assurance
SigXOS captures network configurations locally and read-only, evaluates them with versioned deterministic rules, and produces findings and evidence that stay technically traceable.
FAIL HIGH
Actual state
switchport mode dynamic auto
Target state
switchport mode access switchport nonegotiate
Schematic view from the PoC
Technical assurance is still manual work
MSPs and IT service providers check similar technical controls again and again, across many regulated customers. The effort is high, quality varies, and the knowledge does not scale.
Vendors, baselines and requirements keep changing and have to be reassessed regularly.
The real technical state lives across different tools and teams — and is hard to prove.
Checks, reports and re-tests are rebuilt for every customer environment.
Growing reporting duties meet limited security capacity: 70 % name compliance as a driver of their security investments, 76 % report difficulties hiring staff and 71 % retaining them. Source: ENISA, NIS Investments 2025.
The SigXOS solution
Four components working together — for MSPs and regulated organisations.
Customers, assets, findings, exceptions, history and re-verification in one place.
Captures and evaluates configurations read-only inside the customer environment.
Versioned, validated rules and the technical semantics behind them.
Puts results in context and prioritises actions — without setting a technical status.
The customer decides. SigXOS changes no infrastructure.
From configuration to evidence
Five steps, from the source of a rule to reliable proof.
Vendor knowledge, security baselines and regulatory reference frameworks form the basis.
These become validated rules, tests and mappings — versioned and reusable.
Distributes the rules to the edge components and governs evidence, history and re-verification.
Captures over read-only SSH, normalises the technical state and checks deterministically on site.
Prioritised findings with rule version, asset, timestamp and redacted technical proof.
Maintains and validates the rules.
Provides the context and decides.
Explains and correlates — does not decide.
Credentials stay local. Generation 1 makes no changes to customer devices. PASS, FAIL, UNKNOWN, NOT APPLICABLE and ERROR are produced deterministically; AI changes none of these states. Missing or filtered information never leads to a passing result.
The product core
SigXOS does not rebuild check logic for every customer. Control Intelligence makes expert knowledge versionable, testable and reusable.
PASS, FAIL and UNKNOWN are produced deterministically — not by a language model.
Control semantics, test logic and platform or version differences are maintained centrally.
Source, rule version and result stay documented across the full history.
AI explains and prioritises without altering technical results.
Whether this becomes a lasting competitive advantage is an assumption. The pilot measures it against reuse, engineer time, and false-positive and false-negative rates.
Honest product status
Tested within the documented scope
Open and deliberately named
No claim is made of full CIS, NIS2 or BSIG conformity. SigXOS supports technical checking and evidence processes. Further vendors are prioritised only once a concrete pilot or partner need exists.
Local-first architecture
The planned edge platform separates local capture and rule checking from the approved, minimised control channel.
Customer network
Routers and switches within the approved scope.
SigXOS Edge
Local checking, local evidence. Credentials and full configurations stay on site.
SigXOS Platform
Rule distribution, history and approved finding context in an EU/EEA data centre.
Rules decide. AI explains, optionally. People review and approve.
Commercial model
Base fee for tenant, control library, API and support.
Recurring
Fee per managed customer environment.
Recurring
Predictable packages by number of assets checked.
Recurring
Onboarding, rule packs and integrations.
Available on request
Pricing and packaging are not final. The pilot validates pricing logic and willingness to pay.
Go-to-market
One partner reaches many customer environments. Similar controls repeat per customer — SigXOS turns that into a repeatable assurance service of their own instead of repeated manual work.
Traceable technical evidence in the NIS2 and BSIG context, with local processing and clear data boundaries.
Larger system houses, critical infrastructure and the public sector follow once product, security and compliance maturity allow.
MSP pilot
The pilot measures engineer time, evidence effort, false positives, false negatives and willingness to pay.
Team
Founder & CEO
Co-Founder & CTO
Owns check logic, vendor knowledge and quality. To be hired after technical and commercial pilot validation.
In 30 minutes we clarify scope, asset profiles, AAA prerequisites and the possible pilot value.