βAsset Discovery & Continuous Compliance

You can't audit what you don't know you own.

Vamiset auto-discovers every asset across your cloud accounts, code repositories and identity systems — then continuously checks them against the regulations you have to comply with. One inventory. One control plane. Zero blind spots.

Request a discovery See an integration in action

Live integrations

Frameworks supported

Ad-hoc / daily

Scan cadence

EU-hosted

Data residency

Four moves

Connect. Discover. Test. Stay clean.

Run on the schedule you choose. Connect a system once, decide whether discovery should run on-demand or daily/weekly, and Vamiset takes care of the rest — keeping the inventory current and the controls evaluated without you having to remember anything.

Connect a system
Plug in any cloud, repo, identity provider or HRIS with read-only credentials. Setup takes minutes per integration.
Discover assets
Run discovery ad-hoc or on a schedule (daily, weekly, monthly). Vamiset enumerates every asset and snapshots its configuration.
Test against rules
Every asset is evaluated against the controls you care about — ISO 27001, SOC 2, GDPR, NIS2, PCI-DSS, HIPAA — plus your custom policies.
Flag & remediate
Violations show up in a single dashboard with severity, owner and the failing control. Track them to closure or export as evidence.

Integrations

If it can be audited, we can discover it.

Click any live integration to see the kind of findings Vamiset surfaces in a typical first scan. Examples are illustrative — your scan will reflect your tenant.

AWSAmazon Web Services

Assets · 1.842Services · 23Findings · 5

CRITICAL
2 EC2 instances with port 22 open to 0.0.0.0/0
Bastion-prod-eu and worker-stg-2 expose SSH to the public internet without an IP allow-list.
FND-AWS-7421
ISO A.13.1CIS 5.2
HIGH
S3 bucket vamiset-backups-eu has public-read ACL
Listing returns 412 objects — appears to contain database snapshots.
FND-AWS-7398
GDPR Art.32PCI 1.3
HIGH
IAM root account without hardware MFA
Account 4128… root user has only virtual MFA enabled. Hardware MFA recommended for production tenants.
FND-AWS-7401
SOC 2 CC6.1ISO A.9.4
MEDIUM
3 RDS instances with public accessibility = true
PostgreSQL clusters in eu-west-1 are reachable from the internet, even if SG restricts access.
FND-AWS-7335
NIS2 §21CIS 2.3
LOW
CloudTrail not delivering to a dedicated log account
Audit trail is local to each member account. Centralisation recommended for tamper resistance.
FND-AWS-7290
SOC 2 CC7.2

Posture overview

Every asset. Every control. One view.

After the first discovery you get a unified inventory and posture across every connected system. Filter by integration, owner, severity or framework — and pivot from a finding to the failing control in one click.

app.vamiset.com/posture/overview

Last sync · 12 min ago

Posture overview

scope ·all integrations· last 24h

Assets discovered

4,217

+182 this week

Critical

2 new today

High

−6 vs. last scan

Compliant

92%

across 7 frameworks

Findings by integration · severity breakdown

CriticalHighMediumLow

AWS57
Azure48
GCP30
GitHub43
GitLab27
Okta22

Next run · tomorrow 02:00 UTC

Frameworks

Map findings to the regulations you owe.

Every check Vamiset runs is tagged to one or more controls in the frameworks below. Auditors get evidence; engineers get a backlog. Need a framework that's not here? Let us know — adding new control sets is a config change, not a release.

[ ISO 27001 ]93 controls
Information security management
Annex A controls mapped end-to-end across cloud and identity domains.
[ SOC 2 ]61 controls
Type II · Trust Services Criteria
Security, availability, confidentiality and processing integrity criteria.
[ GDPR ]34 controls
EU data protection
Data residency, encryption-at-rest, retention & access controls.
[ NIS2 ]29 controls
EU cyber resilience
Risk management, incident reporting & supply-chain measures.
[ PCI-DSS ]78 controls
v4.0 · Payment card security
Network, encryption and access requirements for card-handling assets.
[ HIPAA ]42 controls
US healthcare privacy
Administrative, physical and technical safeguards for PHI.
[ CIS ]200+ checks
Benchmarks · Hardening baselines
Cloud, OS and Kubernetes hardening benchmarks evaluated per asset.
[ CUSTOM ]Unlimited
Bring your own policy
Author internal rules in YAML and apply them across any integration.