Last updated March 2026
The Platform
One instrument. Three measurements.
Scan. Quantify. Comply. One platform that turns vulnerability data into board-ready decisions.
Theodolite unifies vulnerability intelligence, data discovery, and SOC 2 compliance into a single AI-powered workflow that speaks in dollars, not CVSS scores.
Pillar 01
Vulnerability Intelligence
Scan. Quantify. Prioritize.
Import Nessus and OpenVAS scans, then let FAIR methodology translate every CVE into a dollar figure your board actually understands. Theory of Constraints finds the single fix that unblocks everything else.
- Nessus and OpenVAS scan import
- FAIR quantification with dollar-denominated risk
- Theory of Constraints prioritization
- Automated action plan generation
- Executive-ready risk reports
Pillar 02
Data Discovery
Find. Classify. Protect.
Scan AWS, Azure, and GCS for sensitive data before attackers find it. Automatically classify PII, PHI, financial records, and exposed credentials across your entire cloud footprint.
- Multi-cloud scanning: AWS, Azure, GCS
- PII and PHI detection
- Financial data classification
- Credential exposure alerts
- Data inventory reports with drill-down
Pillar 03
SOC 2 Compliance
Assess. Answer. Comply.
Connect cloud accounts and watch 486 assessment questions answer themselves across 17 categories. Generate audit-ready evidence packages and compliance roadmaps with a single click.
- Auto-answered assessment questions
- NIST CSF and SOC 2 mapping
- Evidence attachments and audit trail
- Auditor-ready ZIP export
- Compliance readiness heatmap
Built-in Intelligence
AI and project management, native.
Every feature is designed to close the loop from finding to fix, with AI that works the way your security team does.
AI Action PlansClaude-powered
Claude-powered analysis — backed by Anthropic — generates prioritized remediation plans from your scan findings, ranked by risk reduction per dollar spent. No guesswork, no generic checklists.
Project Management
Kanban boards, Gantt charts, task dependencies, and critical path analysis. Auto-generate projects from scans and action plans.
Portfolio Dashboard
Track risk posture across every project with RAG status, capacity planning, and resource conflict detection in one view.
Customer Stories
How customers use it
Real workflows from teams that moved from spreadsheets and siloed tools to a single instrument.
Security teams use vulnerability intelligence to present dollar-denominated risk to their board and cut remediation time by focusing on the constraint that matters most.
Vulnerability Intelligence
Cloud-native companies use data discovery to find exposed PII and credentials across AWS, Azure, and GCS before their next SOC 2 audit.
Data Discovery
Compliance teams use automated assessment answering to turn a six-week audit prep cycle into a single afternoon with a one-click evidence package.
SOC 2 Compliance
See the full platform in action.
Thirty minutes. No slides. Just a live walkthrough of your risk posture.
Evaluating alternatives? See how we compare