Evidence & reports
Evidence you don't have to defend.
LEA Platform turns every check into evidence: taken on a schedule, mapped to controls, signed when it's recorded, and written up for each person who reads it.
Continuous evidence
Evidence is collected, not assembled.
- Evidence snapshots run on a schedule you set (daily by default).
- Each snapshot covers the hosts and rules in scope and maps them to framework controls through rule tags.
- Every evidence record is signed with HMAC-SHA256 using a rotating key, so any later edit shows.
One check, many controls.
A single rule, say "SSH Legacy Algorithms Disabled", is tagged with every control it supports. LEA uses those tags to build framework views, so you check once and report everywhere.
| Framework | How LEA covers it |
|---|---|
| CIS Controls v8 | Rules tagged by safeguard |
| ISO 27001 | Rules tagged by Annex A control |
| SOC 2 | Rules tagged by Trust Services Criteria (CC6, CC7, CC8) |
| CMMC Level 2 | Rules tagged by practice |
| NIST SP 800-53 | Rules tagged by control |
| PCI DSS 4.0 | Rules tagged by requirement |
| NIS2 | Rules tagged by Article 21 measure |
| DORA | Rules tagged by article |
| NIST post-quantum (FIPS 203/204/205) | Crypto-readiness rules |
LEA Platform produces evidence; certification is granted only by an accredited auditor.
Stakeholder reports
Each reader gets their own report.
IT Manager
Detailed technical findings and remediation.
CISO
Risk posture, drift and security priorities.
GRC (Technical)
Control-by-control gap analysis.
GRC (Legal)
Regulatory obligations and exposure.
GRC (External Auditor)
Evidence integrity and audit trail.
Generate one report as a branded PDF, or all five as a single ZIP.
Sample reports
Read the reports before you talk to us.
These PDFs were generated by LEA Platform from a demo environment, for ISO 27001. Host names and results are examples; the layout, sections and signatures are exactly what you get.
IT Manager
Detailed technical findings, ready to assign.
PDF · 4 pages · 81 KB
Download PDFCISO
Risk posture by severity and category.
PDF · 3 pages · 74 KB
Download PDFGRC (Technical)
Control-by-control gap analysis.
PDF · 3 pages · 76 KB
Download PDFGRC (Legal)
Regulatory obligations and exposure.
PDF · 3 pages · 76 KB
Download PDF
LEA Platform produces evidence; certification is granted only by an accredited auditor.
What changed, who changed it.
- The drift report lists every rule that went from pass to fail, per host, with times.
- The system audit log records admin actions; the webhook audit records every notification sent.
- Execution history keeps every check and remedy result.
FAQ
Try it on your own servers.
30 days, up to 25 endpoints, every feature. We help you install it and agree on success criteria first.