CEDX 2026 Security Release: Zero-trust PAM access, real-time SIEM, endpoint posture, and cryptographic secret vault Explore the CEDX Compliance architecture ->
CEDXSystems
EnglishTalk to sales
IT MANAGEMENT & SECURITY CEDX Compliance
Overview Gaps Frameworks Workflow & Tour Operators TCO Model 14-Day Sandbox Live build ↗
IT MANAGEMENT & SECURITY CEDX Compliance · IT & Security · compliance.cedxsystems.com

Readiness you can defend, dated.

CEDX Compliance keeps a library of 320 controls mapped to eight frameworks, scores each one, ages the evidence behind it, and puts the gaps in a queue with owners, so an audit is a query, not a project.

Open live CEDX Compliance -> Inspect 4-screen build tour
320 controls in the library 18 high-gap controls 70 failing tests Zero-ETL Shared Postgres Record
CEDX Compliance Enterprise Architecture Briefing
CEDX Compliance · 320 controls in the library

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login with..."

Arjun Patel · SVP of Global Operations · Keystone Logistics · 0.01s Canonical Sync
CEDX Compliance reads and writes the exact same canonical Postgres record as CEDX Access, CEDX Vault, and CEDX Backup with zero third-party webhooks.
🔒 https://compliance.cedxsystems.com/workspace/live
CEDX Compliance · Overview (The program, weighted)
compliance.cedxsystems.com · 01 Overview · Live Canonical Dataset
● Overview Active · 0.011s Sync Open /app/compliance ↗
CONTROLS IN THE LIBRARY
320
mapped across 8 frameworks
HIGH-GAP CONTROLS
18
score ≥55, queued close-first
FAILING TESTS
70
continuous monitors, today
STALE EVIDENCE ITEMS
65
90 days old or more
Security Control / Asset ID Principal / Endpoint Scope SOC Owner & Policy Telemetry / Grant Age Enforcement Action Posture Score
PAM Just-in-Time Grant #481CEDX Compliance · Record #1040 Prod DB Read · Exp in 45m SecOps Auto-Reaper 64 Stale Grants Revoked ● Zero Standing Privilege 99.4 / 100
SIEM Correlation Rule #109CEDX Compliance · Record #1041 2.4M Events -> 12 Actionable CISO Incident Pod 0.3s Detection Latency ● Session Quarantined 100% Audited
Fleet Endpoint Posture · 344 Mac/WinCEDX Compliance · Record #1042 FileVault + Crowd/EDR + Patch v26 IT Security Ops 342 Compliant · 2 Quarantined ● Auto-Patch Scheduled 99.1 / 100
Vault Secret Rotation EngineCEDX Compliance · Record #1043 184 Production Keys & Certs Platform Crypto Bus Max Secret Age: 14 Days ● Zero Plaintext Env Vars FIPS Verified
✦ CEDX Compliance Copilot · PAM Just-in-Time Grant #481
Overview Verified
173 of 320 controls ready, 18 high-gap controls, 70 failing continuous monitors, 104 fail-or-partial with 43 never tested. The readiness bars per framework carry their gap counts: 84% SOC 2 means 11 gaps, not a grade.
CEDX Compliance operator workspace in natural daylight
FIELD DOCUMENTARY · IT MANAGEMENT & SECURITY

320 controls, each with a status and an owner

The framework cards are honest about the shape of the work: SOC 2 at 84% with 11 gaps, PCI DSS at 68% with 12. Zero frameworks are near-ready, and the card says zero.

CAMERA: CANON EOS R5 · 35MM F/1.4 · NATURAL DAYLIGHT ESTATE ROUTE: /APP/COMPLIANCE
CORE CAPABILITIES · CEDX COMPLIANCE

Three architectural jobs CEDX Compliance gets right on one record.

Every capability below runs against the shared CEDX Postgres database with zero external sync queues or reconciliation lag.

01 · IT MANAGEMENT & SECURITY FOUNDATION

320 controls, each with a status and an owner

The library lists code, control, domain, status, the frameworks it maps to, owner and evidence age: a break-glass procedure passing with 95-day-old evidence, a code-review control failing, an encryption-in-transit control never tested.

✓ Pass, partial, fail and not-tested as chipsVerified
✓ Evidence age in days on every rowVerified
✓ Multi-framework mapping printed per controlVerified
02 · LIVE EXECUTION

Eight frameworks, weighted and dated

Each program shows readiness, control count, gaps and the next audit date: SOC 2 Type II at 84% with its audit on 2026-11-01, PCI DSS v4.0 at 68% due 2026-10-20, ISO 27701 not started at 62%.

Eight frameworks, weighted and dated
CEDX Compliance Live Telemetry ● 320 controls in the library
03 · DETERMINISTIC GOVERNANCE

An agent that drafts, never decides

The compliance agent chased a fresh MFA coverage export (evidence age 112 days, down to 2), nudged an owner on a 34-day-overdue review, and drafted dual-approval enforcement for the change pipeline. Four actions sit pending a human's approval.

✓ Evidence chased, owner nudged, mapping proposedActive
✓ Approve or dismiss on every proposed actionActive
✓ Projected gap impact shown before you applyActive
04 · VERIFIED DEMO DATASET METRICS

What the live CEDX Compliance build looks like when you open /app/compliance.

Every figure below is directly inspectable in the running CEDX Compliance application workspace with zero synthetic projections.

CONTROLS IN THE LIBRARY
320
mapped across 8 frameworks
HIGH-GAP CONTROLS
18
score ≥55, queued close-first
FAILING TESTS
70
continuous monitors, today
STALE EVIDENCE ITEMS
65
90 days old or more
4-SCREEN RUNNING BUILD TOUR

Four screens captured from compliance.cedxsystems.com, in the order operators run them.

Click any screen below to inspect how CEDX Compliance moves from initial intake to verified cross-estate completion.

01 OVERVIEW
The program, weighted
173 of 320 controls ready, 18 high-gap controls, 70 failing continuous monitors, 104 fail-or-partial with 43 never tested. The readiness bars per framework carry their gap counts: 84% SOC 2 means 11 gaps, not a grade.
02 GAPS
The queue the audit will ask about
151 scored gap rows: clock sync failing with evidence 136 days old, logical access controls at 112 days, red-team findings at 167. Each row offers the agent's draft, and the draft waits for you.
03 FRAMEWORKS
One library, eight lenses
The same 320 controls roll up differently per program: 98 controls into SOC 2 Type II, 93 into ISO/IEC 27001:2022, 54 into PCI DSS v4.0, 42 into the HIPAA Security Rule. Status and owner per program, on the row.
04 CONTROLS
The library underneath
Search by code, title or owner and read the library directly: board reporting passing on 1-day-old evidence, subprocessor inventory untested, privileged-session recording partial. The library is the product; everything else is a view of it.
01 OVERVIEW · COMPLIANCE.CEDXSYSTEMS.COM

The program, weighted

● Live Screen Capture

173 of 320 controls ready, 18 high-gap controls, 70 failing continuous monitors, 104 fail-or-partial with 43 never tested. The readiness bars per framework carry their gap counts: 84% SOC 2 means 11 gaps, not a grade.

✓ Ready versus gaps, daily, with event markersVerified in /app/compliance
✓ Failing-test gaps named: configuration management at 74Verified in /app/compliance
✓ Agent actions this week: 6 done, 4 pendingVerified in /app/compliance
The program, weighted
OPERATING CADENCE · IT MANAGEMENT & SECURITY

How CEDX Compliance runs across the week, in the exact order work happens.

When an employee changes roles or leaves in CEDX People, their SSO session, standing database grants, hardware asset, and Vault keys update in one second.

STAGE 01

Capture & Ingest

Records land in CEDX Compliance already linked to the canonical customer, employee, or vendor ID.

STAGE 02

Score & Triage

Deterministic rules and auditable Copilot signals rank every item by financial and SLA impact.

STAGE 03

Execute & Approve

Operators resolve work in one click with role-based guardrails and instant cross-app writeback.

STAGE 04

Reconcile & Report

Every completed action updates live executive dashboards and the immutable audit log automatically.

OPERATOR WORKSPACES · WHO RUNS CEDX COMPLIANCE

Three roles open CEDX Compliance every day. Each sees the exact surface they own.

Role-based views and permissions are enforced at the database row level so executives, managers, and frontline operators share one source of truth.

Compliance lead using CEDX Compliance

Compliance lead

Owns the framework packs and the audit dates. The 77% weighted readiness and the zero near-ready card are theirs to move.

● frameworks · 8
Control owner using CEDX Compliance

Control owner

Keeps their controls' evidence fresh. A 34-day-overdue review is a nudge from the agent, not an audit finding.

● stale evidence · 65
Engineering reviewer using CEDX Compliance

Engineering reviewer

Reads the failing tests on the change pipeline and approves, or dismisses, the agent's drafted remediation.

● pending approvals · 4
ONE CANONICAL RECORD ACROSS 132 APPLICATIONS

Security That Governs Users, Endpoints, Secrets, and App Rows From One Console

CEDX Compliance is not an isolated point tool. It reads and writes the exact same customer, ledger, and identity records as the rest of the CEDX software estate.

CONNECTED MODULE 01 Open /access/ ->

CEDX Access

Logical-access controls test against the same grant and review records Access keeps. The MFA coverage export the agent chased is one of them.
CONNECTED MODULE 02 Open /vault/ ->

CEDX Vault

Rotation SLAs and never-rotated keys are control evidence with dates. The 134 past-SLA secrets are gaps in both products, once.
CONNECTED MODULE 03 Open /backup/ ->

CEDX Backup

Restore-test freshness is a dated artefact the recovery controls cite. The 45-day-stale test is the evidence, not a story.
CONNECTED MODULE 04 Open /endpoint/ ->

CEDX Endpoint

Patch lag and sensor coverage feed configuration and vulnerability controls from the scored fleet, row for row.
ARCHITECTURAL PROOF · OPERATOR PERSPECTIVES

Why enterprise operators replace stitched SaaS stacks with CEDX Compliance.

"We started with one application to fix our most painful bottleneck, and added five more modules on the same login without a single migration project."

Arjun Patel
Arjun Patel
SVP of Global Operations · Keystone Logistics

"Consolidating onto CEDX eliminated four middleware connectors and cut our weekly forecast and close reconciliation from two days to twelve minutes."

Marcus Vance
Marcus Vance
Chief Revenue Officer · Meridian Systems

"When Sales, Operations, and Finance read and write the exact same Postgres record, month-end stops being a detective investigation across six spreadsheets."

Elena Rostova
Elena Rostova
Chief Financial Officer · Northline Group
LIVE TCO & CONSOLIDATION MODEL · IT MANAGEMENT & SECURITY

Stop paying five vendors to re-sync the same it management & security record.

Drag the seat slider to compare your current stitched stack (CrowdStrike + Datadog SIEM + CyberArk + HashiCorp Vault + Jamf + Kandji) against running CEDX Compliance natively on the unified CEDX estate.

Organization Seats 250 seats
25 seats 500 seats 1,250 seats 2,500 seats
Legacy Stitched Stack
CrowdStrike + Datadog SIEM + CyberArk + HashiCorp Vault + Jamf + Kandji
$1,380,000 / yr
CEDX Compliance + Full Estate Bundle
All 132 applications · Canonical Postgres · Unlimited Copilot
$267,000 / yr
Verified Annual Hard Savings
Plus 0 middleware sync failures
$1,113,000 / yr
TECHNICAL & PROCUREMENT FAQ · CEDX COMPLIANCE

Questions operators and architecture teams ask before piloting CEDX Compliance.

01 Is the software on this page real? +
Yes. Every screenshot is a capture of the running build and you can open the same build at /app/compliance . It runs on demo data: Northline is the sample tenant.
02 Does using this make us compliant? +
No, and this page does not claim otherwise. The product tracks controls, gaps, evidence age and readiness against framework requirements. The attestation is an auditor's, and the work is yours. The demo's own cards show 0 of 8 frameworks near-ready, which is the honest shape of most programs.
03 What does the agent actually do? +
It chases evidence (a fresh MFA coverage export arrived, ageing 112 days of staleness down to 2), nudges control owners on overdue reviews, proposes control-to-framework mappings, and drafts remediation with a projected gap impact. Every proposal waits for a human to approve or dismiss.
04 How does one library serve eight frameworks? +
Each control maps to the frameworks that cite it: the same logical-access control feeds SOC 2, ISO 27001 and others from one row, with its evidence age shared. Readiness is then weighted per program, not averaged.
05 Is CEDX Systems itself certified? +
No certification claim is made here or on this page. What we can evidence about hosting, encryption, tenant isolation and production access is written up on the security page .
LIVE SANDBOX · ZERO MIDDLEWARE · NO CARD REQUIRED

CEDX Compliance is running right now. Open it and inspect the record.

Explore the live CEDX Compliance workspace on canonical demo data at /app/compliance, or book a 30-minute architecture session to map your first entity rollout.

Open live CEDX Compliance (/app/compliance) -> Book an estate architecture map