THE SECURITY GATOR · LOCAL-FIRST GRC ENGINE

AxiomLens — the local compliance command deck

One node-locked executable, one SQLite file you own, one control deck that opens in your browser. The full NIST CSF 2.0 assessment engine with a visual rail GUI on top — or drive the exact same engine from the command line. It runs entirely on your machine.

One outbound call in its entire lifecycle — license activation. After that: strictly offline.

AxiomLens — $599
WINDOWS 10/11 X64 NIST CSF 2.0 ONE-TIME ACTIVATION UNSIGNED · SHA-256 PUBLISHED

Who it's for

Built for

  • MSP / vCISO operators, cybersecurity consultants, and senior technicians running GRC-style assessments for one or many clients
  • Compliance-minded IT teams who want a control deck they own outright — no portal, no subscription, no data leaving the building
  • Anyone who wants a point-and-click surface and a scriptable CLI from one purchase

Not built for

  • Terminal-only operators who don't want a web panel at all — that's the lighter AxiomLens Engine Core (CLI-only, same engine, same database)
  • Teams needing a hosted/multi-user portal — AxiomLens is single-machine, node-locked, local-first by design
  • Anyone expecting instant certification — this is decision-support, not an auditor

What it does

A visual control deck backed by the same deterministic engine as Engine Core. Numbers are computed deterministically in code — coverage, maturity, review cadence, and framework rollups can never be "hallucinated."

Assess

Control status (single / bulk / by category / by function), maturity, review cadence, GRC note templates, tags.

Govern

Sign-off with posture snapshots, audit trail (+ CSV export), snapshots, posture-over-time.

Deliver

Board report (deterministic, on-device narrative — no cloud model), client-ready hand-off package, multi-framework coverage rollup with add-on crosswalk packs.

Manage

Multiple clients (seed the full CSF 2.0 baseline or clone), POA&M, evidence vault mapped to controls.

Operate

Workflows tab (saved recipes run in-app), integrated terminal, --json on every read command.

Activation & network behavior — the honest version

First launch asks for the order ID + email from your receipt. That is the one outbound call this app ever makes — it activates and node-locks the license to your machine.

After that, strictly offline. The web panel binds to 127.0.0.1 only — loopback, never exposed to your network. No telemetry, no background jobs, no update pings, no phone-home.

Your compliance data never leaves the machine. Everything lives in the install folder — security-gator.db (SQLite), evidence, backups, output — in formats you can open with anything.

Verify your download

AxiomLens ships unsigned — a folder-style build chosen deliberately to minimize antivirus false positives. Windows SmartScreen will say "unknown publisher" on first run; that's expected for an unsigned indie release, not a warning sign. We'd rather you verify than trust: every release publishes a SHA-256 checksum so you can confirm the file is exactly what we built, byte for byte.

SHA-256 — AxiomLens-v1.3.0-win64.zip 36c3aa6bfe052ae8d3ba1a0b86688274bdb0dbcac24e62613f4a0bab5bec6f44

In PowerShell:

Get-FileHash -Algorithm SHA256 .\AxiomLens-v1.3.0-win64.zip

Match = the file is exactly what we shipped. Authenticode code-signing is on the roadmap, funded by revenue as it comes in.

FAQ

Do I need to be online to use it?
Only once, for activation. Everything after is offline.
Is the GUI hosted somewhere?
No. The panel runs on your own machine at 127.0.0.1. It only exists while the app window is open.
Can I use it from the command line too?
Yes — the full CLI ships in the same exe (status, shell, and every other command). Same engine, same database.
Multiple clients?
Unlimited. Each new client seeds the full NIST CSF 2.0 baseline, or clones an existing one.
Where are the ISO / PCI / SOC 2 crosswalks?
AxiomLens ships with NIST CSF 2.0 (a public-domain US Government publication). Other frameworks come in through the built-in importer, under the licence you already hold — no reinstall, and coverage views pick them up. Published identifier-only crosswalks are free at thesecuritygator.com/crosswalks/.

Licensed per the terms on your purchase page — one license per named user, node-locked to that user's machine. Refund policy is stated on this listing.

AxiomLens supports compliance documentation, helps organize control status and evidence, and supports audit preparation. Framework coverage views are estimated from installed crosswalk packs (largely NIST-hosted informative references; relationships unrated). It is decision-support — not legal, compliance, or audit advice, and not a certification or guarantee of compliance. Review outputs with a qualified professional before relying on them.