For MSPs, vCISOs & compliance consultancies

Put working DIB compliance tools on your own site

Three tools built specifically for the defense industrial base — not another generic GRC dashboard. Under your brand, on your domain, with your logo. Published pricing and no demo call, because you should not have to sit through a sales meeting to find out what software costs.

What you'd be licensing

Three tools, already live and in use

These are not mockups. Every one is running in production on this site right now — click through and use them before you decide anything.

Tool 01
FOCI Screener
  • Foreign ownership, control & influence
  • Federal exclusion list pre-checks
  • Structured on NIST SP 1326
  • Weighted level-of-concern output
Try it →
Tool 02
800-171 → 800-53 → CMMC Crosswalk
  • Every control mapped across all three
  • Generated from the OSCAL catalogs
  • Provenance stated for each mapping
  • Searchable, filterable, exportable
Try it →
Tool 03
SPRS Score Calculator
  • Scores against all 110 controls
  • Shows which gaps cost the most points
  • Produces a prioritised remediation order
  • Roughly two minutes to complete
Try it →
Pricing

Published, because hiding it wastes both our time

Monthly, cancel any time. No setup fee, no minimum term, no per-client charge — use them with as many clients as you like.

Single
$99 /mo
  • Any one tool
  • Your colours, logo & name
  • Hosted on your domain
  • Unlimited client use
  • "Powered by BASTION" footer stays
Full set · most useful
$199 /mo
  • All three tools
  • Your colours, logo & name
  • Hosted on your domain
  • Unlimited client use
  • Updates as frameworks change
  • "Powered by BASTION" footer stays
Unbranded
$299 /mo
  • All three tools
  • Attribution removed entirely
  • Hosted on your domain
  • Unlimited client use
  • Updates as frameworks change
  • Source files, yours to modify
The part most vendors gloss over

How you get leads from a tool that transmits nothing

Every one of these tools computes entirely in the visitor's browser. No backend, no database, no telemetry on what anyone types. That is deliberate: the people you are selling to are the ones whose job is not leaking things, and "open your network tab and check" is a claim no cloud GRC platform can make.

Which raises the obvious question: if nothing is transmitted, how do you capture the lead?

The same way we do. You wrap your own email gate around the tool — before the result, or on the export. The lead is the email address; the assessment inputs stay on their machine. You get the contact, they keep their vendor data, and the privacy claim stays true. We will show you exactly how it is wired.

If you would rather the tool posted every answer back to your CRM, this is not the product for you — and we would rather say that now than after you have paid.

Early access

Register interest

The tools are live and working; the licensing package — theming, embed config, and the setup guide — ships to early-access partners first. Tell us which tools matter to you and we will come back with a date and a link, by email. No call, no demo, no discovery session.

BASTION is a KYSE Enterprise LLC property. Licensing is for the tools themselves; it is not a compliance service and does not make you or your clients CMMC compliant. Practitioner guidance, not legal advice.