# Control+S

> Turn client evidence into assessments you can explain.

Your controls, understood.

Let Control+S map and assess evidence across your frameworks, with reasoning and gaps ready for review. Apply your expertise and deliver a clear picture to your client.

For security consultants and vCISO teams, from the first evidence request to the next assessment cycle.

## Your expertise creates the value. Keep more of it.

Control+S prepares the evidence mapping, scores, and rationale. Spend fewer delivery hours assembling the assessment, with more room for professional judgment, client advice, and margin.

The homepage illustrates how lower delivery cost can leave more retained margin at the same fixed fee. The comparison is illustrative.

## Start with what is actually in scope

Choose the frameworks, systems, and requirements that belong in the engagement. Set the parameters that make each control specific to your client before you assess the evidence.

## Give every evidence request a purpose

Control+S suggests what to request, provides examples, and connects each item to relevant controls. Give your client a practical starting point for gathering evidence.

## One evidence collection. Multiple frameworks.

Upload policies, exports, reports, and screenshots to the assessment. Relevant evidence can support controls across your selected frameworks, with each control assessed against its own requirements.

## See what the evidence establishes

Read the score alongside its rationale and supporting evidence. See what is demonstrated and what remains unresolved. A policy can establish intent without proving that a process operates consistently.

## Put the results in context

See evidence coverage and recorded results across the framework and its control groups. Keep unassessed areas visible, then open individual controls to understand the reasoning behind the picture.

## The assessor stays in control

Add observations, refine control parameters, and override scores where your judgment differs. New evidence can update the assessment while your manual score override keeps precedence.

## Bring your client into the picture

Share a framework-scoped view with the permissions, password, and expiry you choose. Invite auditors to review controls and raise questions against the supporting assessment.

## Turn the assessment into deliverables

Generate framework reports from the recorded assessment. Bring the scope, conclusions, gaps, and recommendations into a deliverable your client can work from.

## The first pass, prepared. The final word, yours.

You. Your judgment. Your recommendations. Your name on the deliverable.

Review the reasoning, add the context that matters, and override scores where you disagree. Deliver an assessment that reflects your expertise.

## Bring your next assessment to Control+S

Start free with two frameworks and five evidence files. Use your own material to inspect the mapping, reasoning, and results, and see how Control+S fits your engagements.

- Try it free: https://controls.run/try
- Sign in: https://controls.run/signin
- Read the whitepaper: https://controls.run/whitepaper.pdf

Help shape the product around real consulting work. We welcome teams who want to build their assessment workflow with us. Contact us about becoming a design partner or a dedicated instance: contact@controls.run.

## Product boundary

Control+S does not issue certifications or replace an assessor's professional judgment. Assessors can review the reasoning and evidence, add observations, and override scores. Manual score overrides retain precedence as new evidence arrives. The product requires browser authentication and does not expose a supported public product API or CLI.

## Authoritative sources

- Homepage: https://controls.run/
- Agent guide: https://controls.run/llms.txt
- Framework assessments: https://controls.run/frameworks
- Comparisons: https://controls.run/compare
- Trust centre: https://controls.run/trust
- Privacy: https://controls.run/privacy
- Terms: https://controls.run/terms
- Data processing agreement: https://controls.run/dpa
