Govern security
across the portfolio.
Monitor every portfolio company's program, run assessments, broadcast advisories and watch each company's attack surface 24/7, all from one read-only seat across the entire book.
Security across a portfolio is invisible until a deal or a breach. Each company reports differently, on its own cadence, in its own format, so there's no way to compare a holding's security the way you compare its financials. Portfolio Lens normalizes every company onto one scorecard, rolled up and drillable.
Hudson writes the risk story
for every company.
Granite still has two critical findings open and sits below the portfolio average (2.6 out of 5). Threat detection is its weakest area, and nothing has moved in 30 days. Worth pushing on before the next board meeting.
Helix is in solid shape at 3.4 out of 5, with one minor finding open. Incident response is the only area trailing the rest, but the 30-day trend is flat, so a light push on response keeps it on track.
Hudson reads every assessment, finding and trend across the book, then writes a plain-English risk story for each company, so the portfolio review narrative is ready before you open the deck.
Every company, one scorecard.
Every portfolio company on one scorecard: maturity, trend, open criticals and audit posture, normalized so a holding's security is as comparable as its financials.
Board and LP reports, generated
Portfolio rollups, LP summaries and pre-deal diligence briefs, written by Hudson and ready to send.
Coverage, every framework, every company
One matrix of how far each company has gotten on every framework they're held to, so the gaps stand out.
Watch every company from the outside
Command scans each company's external attack surface around the clock: SSL, headers, DNS, email and breach signals, scored and tracked.
One message, the whole book
Push an advisory or board-prep request to every company at once, or a segment, and track who has acted, per company.
Run an assessment
on any company.
Walk a portfolio company's framework out loud. Command transcribes the conversation, drafts the status and maturity for every control, and pulls the evidence, so diligence and reviews write themselves.
Each company owns
its program. You see it all.
Every portfolio company runs in its own instance of Command, with full read-write control of their program. The firm gets a read-only seat over the whole book, so governance never means taking the keys.
Their own Command.
Each company runs its full program in a dedicated instance, assessments, findings, controls, evidence and projects, with read-write access for their team.
One read-only lens.
The firm sees every company's posture rolled up and drillable, can run assessments and broadcasts, but never edits a company's program directly.
The portfolio security deck, on demand.
Ask Hudson for the portfolio summary and it assembles the deck: maturity by company, exposure, audit posture and what changed since last quarter, sourced and drillable. Reach it anywhere with ⌘K.
See how Hudson works →Govern the portfolio in Command.
One note when Portfolio Lens is live, or reach out for a look before then. We'll walk through your portfolio and what governing it in Command looks like.