HodeiShield®

Eleven solutions, one cycle.

Security, compliance and third parties on one cycle: the HodeiShield integrated platform. SENSE, PREDICT, ACT and ATTEST are its architecture and the map of its solutions; none is an isolated module.

Request a demoRead the documentation (opens in a new tab)
  • Three of the eleven walk all four phases
  • The AI governance module is in preparation

  1. SENSE · collect evidence

    Collects verifiable signals from machines, vendors and vulnerability sources.

  2. PREDICT · quantify and simulate

    Turns them into comparable risk: points, euros and scenarios.

  3. ACT · propose and approve

    HodeiAI proposes; a person with a write role approves.

  4. ATTEST · prove it to third parties

    Proves the result to a third party, verifiable offline.

  5. Back to SENSE

The map: what each solution does in each phase

Read a row to follow one solution's path, or a column to see who takes part in a phase. «Not involved» means that solution takes no part in that phase.

Third-party risk management

Scores vendors, maps dependencies and concentration, and records every decision.

SENSEScans, questionnaires and CVEs for your vendors.
PREDICTFAIR/ALE in euros, scenario simulator and HHI concentration.
ACTRisk-register proposal and routed alerts.
ATTESTPer-framework maturity summary in the Trust Center.
Multi-framework compliance

Evidence with validity, a crosswalk and a roadmap across 17 frameworks.

SENSEEvidence with owner, validity and status.
PREDICTPosture per framework, measured against the canonical controls.
ACTRisk-register proposals.
ATTESTPer-framework maturity bands.
Endpoint security

An agent that sends signed observations, limits in plain sight.

SENSEAgent with 172 signed checks.
PREDICTEndpoint score; baselines are detail.
ACTAlerts routed to your systems.
ATTESTPosture evidence, with no per-machine detail.
Supply chain and SBOM

Vendor SBOMs matched against CVEs, with component evidence for the Cyber Resilience Act.

SENSEJSON SBOM, OSV.dev and a daily CVE sync.
PREDICTExploited CVEs (KEV) and blast radius.
ACTCritical and high CVE alerts.
ATTESTNot involved: the SBOM is never attested.
Trust Center and ATTEST

A public Trust Center that issues signed attestations, verifiable offline.

SENSETrust Center evidence points.
PREDICTWeakest band across the frameworks.
ACTNot involved
ATTESTCore: per-framework ML-DSA-65 attestation.
AI governance

Module in preparation

EU AI Act and ISO 42001 coverage among the 17 frameworks; the AI-systems register is in preparation.

SENSENot involved
PREDICTEU AI Act and ISO 42001 coverage.
ACTHodeiAI proposes and a person approves.
ATTESTNot involved
HodeiAI

A copilot that queries your tenant's data and proposes; a person approves.

SENSEQuery tools over your tenant's data.
PREDICTRisk queries.
ACTCore of ACT: it proposes, it does not execute.
ATTESTNot involved
Exposure radar

Matches the CVEs on your assets with your vendors, exploited ones (KEV) first.

SENSECVEs from NVD, CISA KEV and EPSS on your assets, synced daily.
PREDICTExploited CVEs (KEV) weigh more in the score.
ACTNot involved
ATTESTNot involved
Virtual CISO

Posture per framework, a roadmap ordered by rules and incident notification deadlines.

SENSENot involved
PREDICTPosture per framework and a rule-based remediation roadmap.
ACTStatus of each action and notification deadlines as obligations.
ATTESTNot involved
Incident management

A register that classifies against DORA, NIS2 and GDPR, with indicative deadlines and downloadable drafts.

SENSENot involved
PREDICTNot involved
ACTRegister, multi-framework classification, countdown and root cause.
ATTESTDownloadable drafts for each authority; you file them.
Board reporting

Executive and board dashboards, 18 report templates and a scenario simulator.

SENSENot involved
PREDICTA simulator with seven scenarios and score deltas.
ACTNot involved
ATTESTDashboard and report center in PDF, XLSX, Markdown, JSON and xBRL-CSV.

SENSE feeds PREDICT; PREDICT prioritises what ACT proposes; ATTEST proves the result to third parties, and what was attested goes back to SENSE with the next evidence.

Where to start, by job

You do not need to walk all eleven. Start with the one that solves what is on your desk now.

Questions about how they fit

What people comparing solutions usually ask.

Why a cycle rather than a catalogue of modules?

Because the value is in the union: signed endpoint evidence feeds quantified risk, risk prioritises what is proposed, and what is decided can be shown to a third party. It is an integrated platform, not a sum of modules.

Do I have to use all eleven?

No. Each solution stands on its own and connects to the others when you need it. In the demo we look at which ones fit your case and what the concrete availability of each feature is.

Is all of this available today?

What each solution describes exists today, within the limits each page states. In preparation with no date: the AI governance module; planned, not live: cloud evidence collectors. EU AI Act and ISO 42001 coverage is among the 17 frameworks. We go through the exact availability of each feature in the demo.

Does anything act autonomously?

No. HodeiAI proposes and a person with a write role approves, through a single-use, 15-minute approval bound to the proposal's hash. Today the only executable action is creating an entry in the risk register.

Does it work in real time?

No. The endpoint agent reports in cycles, vendor scans are periodic with external sources and the CVE sync is daily.

Choose where to come in

In the demo we start with the solution that solves your job and follow the cycle as far as it helps.

Request a demoRead the documentation (opens in a new tab)

The public documentation covers each solution.