Your security program,always current.
Controls, third-party risk and M&A diligence on one record that stays current on its own, read end to end by Hudson, our AI analyst.
CommandNorthwind HealthNIST CSF 2.0 · 248 controlsEvidence starts going stale the day you collect it.
Most programs are measured once a quarter. By week six nobody can say which of those answers are still true, so the next board deck starts with a rebuild.
One record. Three ways in.
Start with Command. When third-party risk or an acquisition lands on your desk, the vendors and the deal arrive on the same record, read by the same analyst.
Northwind HealthFindings/F-1042Object lock disabled on production backup buckets
Activity
AWS reported 3 production buckets without object lock
Controls marked PR.DS-11 as a gap in NIST CSF, ISO 27001, CIS and SOC 2
Hudson wrote this finding and linked it to the ransomware risk
- PN
Priya Nair accepted it and set the due date to December 12
Jira created SEC-1187 when PRJ-118 was funded at $18,000
Northwind HealthVendors/Relay
Relay
Activity
Monitoring found a breach disclosure for Relay’s support platform
Scout rescored Relay from 79 to 58
Hudson traced Relay’s access to Salesforce, Okta and the billing exports
- AK
Aisha Khan sent the breach questionnaire, due in 5 days
Command raised RSK-012 to High and added it to the Q4 board brief
Halden SoftwareProject Juniper/Findings/F-0217Backups never tested for a restore
Activity
Hudson found it on page 41 of Halden’s SOC 2 report
Hudson linked it to the 2023 ransomware, which took 11 days to recover
- MK
Maya Kim confirmed it as a price issue
- EP
Elena Park added a restore test before close to the purchase agreement
Integration plan scheduled the backup move for Day 40
Ask the record anything.
Hudson has every control, finding, assessment and connection open at once. It answers from the record and shows its sources.
Reading the record…
This is what Tuesday looks like.
The Command Center opens on Hudson's read of the program, what needs you today, and where health and risk stand. Every number on it is a link back to the record.
Hudson's readA plain-language summary of what changed overnight and what to do first.
Needs you todayPast-due findings, risks over appetite and blocked work, ranked.
Health and riskProgram health on a five-point scale and every risk against appetite.
Built by people who have held the job.
Pylon comes from The Pylon Group, led by a practicing CISO and CIO. We built the platform we wanted when we were the ones answering to the board, and we still work inside programs alongside the teams that run on it.
See it on your own program.
Bring a framework you are held to and a finding you have been carrying. We will walk the loop with your material, not a demo tenant.