# Control+s

> Control+s turns evidence into defensible control assessments.

For consulting and vCISO teams.

## More margin on every fixed-scope assessment

Consulting and vCISO teams price assessments around expert time. Control+s handles the first-pass evidence mapping, scoring, and rationale, so your team spends fewer hours reaching the same defensible outcome, and expert time moves out of repetitive interpretation and back into review, judgment, and client advisory.

## Start with what is actually in scope

Pick the frameworks and systems in play, then narrow to the control families that matter. Action, scope, strength, and exceptions are captured as structured parameters, not loose prose.

## Know exactly what to request

Control+s turns the frameworks in scope into a prioritized intake plan: the evidence to request from the client, an example artifact for each, and the controls every item would cover. Less back-and-forth, fewer wasted hours.

## Upload evidence once

Evidence lives at the assessment level, tagged by source and type. A single upload maps across every framework in scope, so you never re-collect the same artifact for each audit.

## From files to control-level judgment

Control+s reconciles your evidence against each requirement, producing a maturity score, the evidence it cited, written rationale, and the gaps that still need closing.

## Move from files to an assessment matrix

A live control matrix rolls every score into category and framework views, with completion tracking and filters, so you always know exactly where the assessment stands.

## The assessor stays in control

Every automated score is a starting point. Override it, leave a reviewer note, set priority, and reanalyze as new evidence lands. The final score is always a human decision.

## Share a client-safe view

Send a framework-scoped, password-protected, expiring snapshot, or invite an auditor to challenge and accept controls directly. The rest of your workspace stays private.

## Turn the assessment into deliverables

Generate reports that capture the current state of the assessment, scoped per framework, ready to hand to the client when the cycle closes.

## The work, mostly done. The judgment, yours.

- About 80% of the assessment drafted before review
- 100% of scores cite the evidence behind them
- You make the final call on every control

## Product boundary

Automated scores are drafts. Control+s does not issue certifications or replace an assessor's final judgment. The product requires browser authentication and does not expose a supported public product API or CLI.

## Authoritative sources

- Homepage: https://controls.run/
- Agent guide: https://controls.run/llms.txt
- Trust centre: https://controls.run/trust
- Privacy: https://controls.run/privacy
- Terms: https://controls.run/terms
- Data processing agreement: https://controls.run/dpa