THE SECURITY GATOR · CLI-ONLY GRC ENGINE

AxiomLens Engine Core — the same engine, zero web stack

One node-locked executable, one SQLite file you own, driven entirely from the command line. The full AxiomLens assessment engine for operators who live in a terminal, script their tooling, and want compliance work products they can diff, pipe, and automate on their own terms.

One outbound call in its entire lifecycle — license activation. After that: strictly offline.

WINDOWS 10/11 X64 CLI + INTERACTIVE SHELL --JSON EVERYWHERE UNSIGNED · SHA-256 PUBLISHED

Who it's for

Built for

  • MSP / vCISO operators and senior technicians who prefer a CLI to a GUI
  • Teams wiring compliance checks into their own scripts, RMM, or scheduled jobs
  • Anyone who wants assessment data in plain SQLite + JSON instead of a portal

Not built for

  • Anyone who wants a point-and-click experience — that's the AxiomLens GUI edition (includes everything Engine Core does, plus the visual control deck)
  • Hosted or multi-user setups — single-machine, node-locked, local-first by design

Sixty seconds to first posture

# builds security-gator.db from data\ (one time)
axiomlens migrate

# coverage bar, maturity, reviews due, POA&M, sign-off state
axiomlens status

# or live in the REPL: tab completion, SQL, every command
axiomlens shell

What it does

Everything the AxiomLens GUI can do, against the same database — numbers computed deterministically in code.

Assess

ctl set (single/bulk/by category/by function), ctl show, review mark, GRC note templates, tags.

Govern

signoff record, review, trail (+ CSV export), snapshot, posture.

Deliver

handoff export, report (deterministic board report), coverage (multi-framework rollup with add-on packs).

Manage

clients, client add, poam list/add/close, evidence attach/list/rm, backup / --restore.

Operate

shell, set, vars, alias, run (recipes), --json on every read command.

Make it yours

axiomlens.toml lives beside the exe and is yours to edit — the first run offers to write it for you (three questions, skippable, never blocks scripts). Named @variables, aliases, and recipes (named command sequences run with axiomlens run) turn repeat work into one line. No daemon, no scheduler inside the engine — point your own Task Scheduler/cron/RMM at the CLI if you want it on a timer.

Activation & network behavior — the honest version

First launch asks for the order ID + email from your receipt — the one outbound call this app ever makes, activating and node-locking the license to your machine.

Every launch after that verifies the license offline. No telemetry, no background jobs, no update pings.

The board report is generated on-device from a deterministic template — no cloud model, nothing to phone home for.

Verify your download

Ships unsigned — a folder-style build chosen deliberately to minimize antivirus false positives. Every release publishes a SHA-256 checksum so you can confirm the file byte for byte.

SHA-256 — AxiomLensEngineCore-v1.3.0-win64.zip 1717f9c78b2eec2e49d57fc83d50e1990c5a53b60b95df6d8a3409a99a7fa67f

In PowerShell:

Get-FileHash -Algorithm SHA256 .\AxiomLensEngineCore-v1.3.0-win64.zip

FAQ

Does it need the GUI edition?
No. Engine Core is complete on its own.
Can I move to the GUI edition later?
Yes — same database, same engine. Point the GUI at your security-gator.db and keep working.
Can I edit the data directly?
It's your SQLite file. The shell even gives you SQL — SELECT is always free; writes ask you to .unlock first, since direct SQL bypasses the engine's change history.
Multiple clients?
Unlimited. client add seeds each new client with the full NIST CSF 2.0 baseline, or clones an existing one.
Where are the ISO / PCI / SOC 2 crosswalks?
Separate add-on packs. The base engine is NIST CSF 2.0; each framework pack drops in beside the engine — no reinstall — and coverage picks it up.

Licensed per the terms on your purchase page — one license per named user, node-locked to that user's machine. Refund policy is stated on this listing.

AxiomLens Engine Core supports compliance documentation and audit preparation. Framework coverage views are estimated from installed crosswalk packs (largely NIST-hosted informative references; relationships unrated). It is decision-support — not legal, compliance, or audit advice, and not a certification or guarantee of compliance. Review outputs with a qualified professional before relying on them.