HodeiShield

HodeiShield brings security, compliance and third-party risk into one cycle for regulated organisations worldwide. It collects signed evidence from endpoints and suppliers, quantifies risk in euros with FAIR, proposes actions that a person approves, and issues signed attestations that can be verified offline. It covers 17 frameworks: NIS2, ENS, DORA, GDPR, EU AI Act, ISO/IEC 27001, ISO/IEC 42001, SOC 2, NIST CSF 2.0, PCI DSS v4.0, HIPAA, CMMC 2.0, Cyber Essentials, UAE IA (NESA), SAMA CSF, Saudi ECC and Nigeria NDPA.

SENSE - collect evidence

• Endpoint agent (Windows, macOS, Linux): 172 checks, every observation signed; stale machines stop counting.
• Evidence engine: owner, validity date and status for every item; expired evidence stops counting.
• Exposure radar: critical and high CVEs on your assets, CISA KEV first, EPSS, MITRE ATT&CK mapping.
• Vendor monitoring: external scan, SBOM matching against OSV.dev, and a no-account questionnaire portal.

PREDICT - quantify and simulate

• Vendor score 0-100, dependency graph, blast radius and concentration (HHI).
• FAIR/ALE exposure in euros per vendor and portfolio.
• Simulator: 7 scenario types propagated through your dependency graph.

ACT - propose, approve, record

• Compliance roadmap, policy library with versions and full change history.
• Incident management: one log, classified against DORA, NIS2 and GDPR, with deadline countdowns and a draft per authority.
• HodeiAI copilot and virtual CISO: a person approves every action, recorded in a hash-chained ledger.
• Alerts to ServiceNow, Jira, Slack, Teams, email, signed webhook, SIEM, PagerDuty and Opsgenie.

ATTEST - prove it to third parties

• Trust Center with public or controlled access.
• Per-framework attestations signed with ML-DSA-65 (post-quantum), verifiable offline with an open-source verifier.

Also

• Multi-framework crosswalk: one answer propagates to equivalent controls.
• DORA Register of Information exported as an xBRL-CSV package.
• Board and executive dashboards, 18 report templates (PDF, XLSX, Markdown, JSON).
• Read-only REST API, open-source CLI and hosted MCP server.

Hosted in the EU (OVHcloud, France). Console in English, Spanish, German, French, Italian and Basque. Built by Hodeitek (Spain). Free three-month public beta.