There are a lot of native integrations available for you to connect to ensure compliance for workstations, identity, and policy acknolwedgements Very easy to connect Entra ID to pull in all your users and from there you can connect your MDM (Intune or JAMF/Kandji), RMM tools, and security training (KnowBe4) platforms to match up with the respective end user. Its really easy to manage users and their associated devices and check for device and policy compliance.

We use it for compliance tracking. It has a very intuitive framework with automatic tests and controls mapped to specific compliance requirements. It also offers tools to keep track of compliance requirements like Personnel compliance list, Vendor and Subprocessor inventories, a policy center, and a risk register - all of which we use as part of our day-to-day company processes. It easily connected to our infrastructure console, cloud workspace, HR system, and trust portal - automatically running tests and checking controls, which reduces our workload. The performance is smooth, and the AI agent gives quick advice when you bump into an unknown. Tickets were addressed and resolved quickly, so technical support is responsive and gives ample explanation and updates. The pricing is competitive and can be compared to other alternatives.

As a devops engineer the most useful part is the AWS integrations (and other similar integrations), and the automated controls.