Foxx Cyber / Security software
Bedrock GRC
The governance, risk and compliance console behind our fractional-CISO practice.
Overview
Bedrock GRC runs client security programs: risks, controls, vendors, assets, outside assessments and the reports leadership reads. Our fractional-CISO practice and partner assessment firms use it to run client programs.
Who it is for
Fractional CISOs, consultancies and assessment firms running security programs for several clients.
What it does
- Client programsEach client's risks, controls, registers and roadmap in its own workspace.
- Outside assessmentsAssessors work the same record the client keeps.
- ReportsProgram reports produced from the record, not rebuilt in a slide deck.
More security software
| Sheet | Title | Scope | Status |
|---|---|---|---|
| FC-201 | vCISO | A personal AI security advisor for small businesses. | |
| FC-203 | Bedrock CMMC | CMMC compliance software for defense contractors and the firms that serve them. | |
| FC-204 | Bedrock Flowdown | CMMC flow-down tracking for prime contractors. | |
| FC-205 | Bedrock C3PAO | The containerized assessment client for CMMC assessors. | |
| FC-206 | Bedrock RMF | An open-source alternative to eMASS and Xacta for NIST SP 800-53 packages. | Open source |
| FC-207 | Bedrock AFT | Assured File Transfer: cross-domain transfer requests without the paper form. | Open source |
Talk to us about Bedrock GRC.
A person reads every message and answers, usually within one business day. No pricing page and no sales script: a conversation about your work.
FOXX CYBER LLCCOLORADO SPRINGS, CO
Drawn byJ. P. Price, CISSP, CISM
OwnershipVeteran-owned
FC-202
Contact sales