Gordon Security Checklist

0 reviews

Gordon Security Checklist assesses an organization's current security controls against a structured set of industry-standard requirements and produces a prioritized, plain-language action list identifying what is in place, what is missing, and what to address first without requiring prior compliance experience or a dedicated security team to operate. The checklist covers controls across identity and access management, endpoint security, network configuration, data handling, incident response, backup and recovery, vendor management, and employee security practices. Each control is assessed through a combination of automated technical verification drawing on live data from connected systems, including Microsoft 365, Google Workspace, and cloud environments, and guided self-assessment questions for controls that cannot be verified programmatically. This means checklist results reflect the actual state of the environment, not only what an administrator has manually confirmed. Each gap identified in the checklist is assigned a risk severity, a plain-language explanation of why the control matters, and step-by-step remediation instructions that can be executed by an IT generalist without specialised security knowledge. Controls are grouped into a recommended fix sequence based on risk impact and implementation effort, so teams know where to start rather than working through an undifferentiated list of findings. Completed checklists are saved and re-run on a configurable schedule, tracking which gaps have been closed and flagging new issues introduced by environmental changes. Progress reports are formatted in two views: an operational task list for IT and security teams, showing open items and fix status, and an executive summary showing the overall security posture score, trends over time, and outstanding risk areas for leadership and board reporting. Checklist results map to SOC 2, ISO 27001, NIST CSF, Cyber Essentials, PCI DSS, and HIPAA control requirements, generating a compliance gap report that can be used as evidence during certification preparation or, on request, supplied to auditors, insurers, and enterprise procurement teams.

Gordon Security Awareness

0 reviews

Gordon Security Awareness delivers role-specific, short-form security training to employees on a continuous, automated schedule, combining structured learning modules with behavioural data from phishing simulations to build and track individual-level security competency. Training is assigned automatically based on each employee's role, department, and current risk score, rather than on a fixed calendar. Employees who fail a simulation receive a targeted micro-lesson on the specific technique used. Content adjusts as behaviour changes, so training stays relevant without repeating the same material at arbitrary intervals. Modules average three to five minutes and are delivered directly via email and Slack, without requiring employees to log in to a separate portal. Each employee maintains a continuously updated behavioural risk score combining training completion, simulation performance, and threat reporting activity. Administrators view individual, department, and organization-level risk trends in a single dashboard without pulling individual campaign reports. Scheduled reports are automatically formatted for both security teams and non-technical leadership. The platform syncs with Microsoft 365 and Google Workspace for directory management and SSO. Phishing simulation delivery does not depend on Direct Mail Injection. Content is available in multiple languages with regionally reviewed translations. Training outcomes map to SOC 2, ISO 27001, NIST CSF, HIPAA, and Cyber Essentials for compliance reporting.

Gordon AI Compliance (GRC)

0 reviews

Gordon AI Compliance manages an organization's governance, risk, and compliance programme across two parallel tracks: compliance with external security and privacy frameworks, and governance of AI systems the organization develops or deploys internally. For external compliance, the platform maps an organization's current security controls against the requirements of SOC 2, ISO 27001, ISO 42001, EU AI Act, GDPR, HIPAA, PCI DSS, NIST CSF, and Cyber Essentials. Controls are assessed through a combination of automated technical verification drawing on live data from connected cloud, identity, and security systems, and structured self-assessment for controls that cannot be verified programmatically. Compliance status updates continuously as the environment changes, rather than reflecting a point-in-time assessment. Evidence is collected and organized automatically per framework, reducing manual preparation ahead of audits. For AI governance, the platform maintains an inventory of AI systems in use across the organization, including third-party AI tools and internally developed models. Each system is assessed against applicable regulatory requirements and ethical risk categories, including data provenance, bias risk, explainability, and access controls, producing a per-system compliance status and risk score that updates as the system or its regulatory obligations change. Risk findings from both tracks are consolidated into a single register with remediation priorities, owner assignments, and progress tracking. Reports are available in operational and executive formats, technical control-gap details for security and compliance teams, and plain-language risk summaries for legal, procurement, and board stakeholders. All outputs are formatted as audit-ready evidence packages exportable on demand. The platform integrates with Microsoft 365, Google Workspace, AWS, Azure, and GCP to automate evidence collection and connects to HR and ticketing systems via APIs for owner assignment and workflow routing.

Gordon Cyber Insurance

0 reviews

Gordon Cyber Insurance provides cyber liability coverage for businesses, with premiums informed by the organization's continuously monitored security posture rather than a point-in-time application questionnaire. At quote, the platform assesses the organization's external attack surface, workforce risk score, and third-party exposure data to generate an underwriting profile that reflects the actual environment, reducing the gap between self-reported answers and real security posture. Coverage terms and exclusions are presented in plain language before binding, mapped to the specific risk categories each component covers. Coverage includes first-party costs for ransomware response, business interruption, data recovery, and breach notification, as well as third-party liability for data breach claims, regulatory investigations, and media liability. Organizations that demonstrably reduce their risk profile through remediation or training programme completion are eligible for mid-term premium adjustments, reflected at the next renewal cycle. Following a covered incident, policyholders access an in-house response team for forensic investigation, breach notification, legal coordination, and ransom negotiation. Claims are managed through a self-serve portal with direct access to the assigned handler; no broker intermediary is required. Gordon Cyber Insurance is available directly to businesses with online quoting, binding, and policy management through the platform.

Gordon

0 reviews

Gordon is an AI-powered cyber resilience platform built by Mitigata for regulated enterprises. It replaces multiple point solutions with one unified console covering SOC, VAPT, GRC, phishing simulation, third-party risk, brand monitoring, and cyber insurance. 𝗖𝗼𝗿𝗲 𝗰𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝘆 Discover and map all cyber assets across domains, IPs, subdomains, and mobile apps. Score employee cyber risk (0–100) using real behavior like phishing clicks, credential reuse, and unusual access patterns. Integrates with HRMS tools like Darwinbox, Keka, and SAP SuccessFactors. 𝗔𝘀𝘀𝗲𝘀𝘀 Continuous VAPT by CERT-In empanelled testers across web, API, cloud (AWS, Azure, GCP), network, and mobile. Third-party risk scoring using 200+ signals. Compliance mapped to RBI, SEBI, DPDP Act 2023, IRDAI, and CERT-In. Quantifies financial impact using FAIR methodology. 𝗠𝗶𝘁𝗶𝗴𝗮𝘁𝗲 Automated phishing simulations with multilingual templates. Risk-based microlearning and gamified training. Integrated cyber insurance from leading providers with posture-linked pricing, reducing premiums by up to 40%. 𝗠𝗼𝗻𝗶𝘁𝗼𝗿 24/7 SOC with AI-driven alert triage to reduce false positives. Full attack chain visibility mapped to MITRE ATT&CK. Automated CERT-In reporting within 6 hours. Continuous brand monitoring across dark web, domains, and social platforms with takedown support. 𝗪𝗵𝘆 𝗚𝗼𝗿𝗱𝗼𝗻 Gordon AI powers the platform with executive summaries, prioritised actions, anomaly alerts, and ready-to-share board reports. Built for BFSI, fintech, healthcare, SaaS, and manufacturing. Deploys in hours, not months. Starts at $1,787/month with a 15-day free trial.