ephemera · in private beta
Your cluster checked against twelve compliance frameworks, in one PDF
In brief
Answers the auditor's first question, how the cluster measures up, without installing anything in it. One read-only pass becomes a single PDF that maps every finding to the frameworks a regulator or a customer will cite, and the raw data is gone within a day.
A read-only posture and compliance audit for a cluster, taken from an uploaded dump or a read-only CLI run against the live cluster. No agent is installed. Results arrive in minutes as a single board-ready PDF, with every finding mapped to the framework that asks for it.
What it does
- Findings mapped across twelve frameworks. ISO 27001, NIS2, NIST CSF, SOC 2, the EU CRA and GDPR among them, with remediation drafts attached
- Processing stays in the region you pick, and the raw side, cluster dumps, findings, PDFs, deletes itself after 24 hours
- What survives that deletion is the aggregate: scores and trends, so the dashboard still shows whether you are getting better
A closer look
Select any screenshot to enlarge it.
The ephemera.sh landing page
The Ephemera demo dashboard, read-only, on invented clusters
The whitepaper behind it
The problem it measures, the method behind it, and what it deliberately does not do.