Product
IronSphere Inspector
An Enterprise Cyber Hygiene and Compliance product
IronSphere is a comprehensive solution designed to automate and manage multiple aspects of cybersecurity compliance and hygiene from a single platform. It is agentless, except for z/OS and IBM i environments, and continuously scans systems according to a defined schedule, automatically notifying users of newly identified findings by email.
01
Zero Agent Footprint on Standard Endpoints
VMware-ready virtual appliance executing scans via Ansible.
02
Legacy & Specialty Native Support
Seamless integration with IBM z/OS (Mainframe) and IBM i (AS/400).
03
Audit-Ready Integrity
Generate cryptographically Signed PDFs for any historical date.
Key Features
One platform for every framework and every asset
Feature 01
Normalized Framework Intelligence
Eliminate Framework Silos
Stop managing fragmented scans. IronSphere converts DISA STIG, SCAP, OpenSCAP, CIS Benchmarks, and CVE outputs into an internal standardized format with a unified STIG scale (None - Low - Medium - High). Map any technical assessment directly to overarching standards like ISO 27001.
Feature 02
The 4-Level Inspector UI
From High-Level Posture to Root-Cause Fixes
Drill down effortlessly across 4 operational levels—from high-level risk metrics for CISOs, down to specific check assignments, side-by-side endpoint comparisons, step-by-step remediation, and discussions for SysAdmins.
Calculated Risk = Σ Actual Severities ÷ Σ Potential Risks
Feature 03
Institutional Memory & Decision Tracking
Secure Your Knowledge Against Workforce Turnover
Document every remediation strategy, capture risk acceptance decisions, and attach evidence directly to findings. With built-in discussion threads and exception controls (by list, time, or both), your compliance context stays intact through team transitions.
Feature 04
Automated Scheduling & Time-Machine Reporting
Continuous Scanning & Historical Verification
Automate scans by CIDR network segments, start times, and custom intervals. Query the IronSphere database to reconstruct exact security posture snapshots on any historical date, exporting tamper-proof reports in CSV, XML, PDF, or Signed PDF formats.
Architecture
Core architecture & components
IronSphere Inspector
The central virtual appliance and management interface that aggregates, stores, and evaluates enterprise-wide assessment data.
IronSphere IronNet
An Ansible-driven orchestration layer that automates and schedules security evaluations against industry frameworks such as DISA SCAP, OpenSCAP, and CIS Benchmarks.
IronSphere SiemPeril
Real-time event integration engine that streams assessment findings and security alerts directly to external SIEM or SOC platforms over Syslog, supporting standard LEEF and CEF formats.
Legacy Agents
Lightweight local agents designed for platforms like IBM z/OS and OS/400 (IBM i) that run scheduled compliance scans autonomously without disrupting operations.
Open Source Analyzer
Scans z/OS environments to maintain an accurate inventory of Java and open-source packages. It cross-references detected packages and versions against the National Vulnerability Database (NVD) to automatically generate risk tickets for known vulnerabilities.
Unified Data Model
Translates disparate scan outputs into a standardized internal structure, allowing the Inspector engine to process every assessment with consistent logic regardless of source platform.
Specialized Capabilities
Built for the mainframe, not just around it
IronSphere LifeCycle (z/OS)
Cross-references active system inventories (via SMP/E PRODUCT records) against vendor lifecycle metrics to flag unsupported hardware/software and expiring licenses while storing vendor attestation letters for audit readiness. It also parses IBM HOLDDATA to verify that critical Security Integrity (SECINT) Program Temporary Fixes (PTFs) are applied.
Context-Aware COBOL Code Review
Performs COBOL code analysis that extends beyond static source code to evaluate execution environments. It correlates code-level risks directly with how underlying resources are protected, binding code analysis to JCL configuration, datasets, database tables, and runtime environments (e.g., Batch, CICS, IMS).
Security by Default
Secure by design, standards-based by default
IronSphere enforces strict security baselines by implementing standards like the NIST Cybersecurity Framework (CSF) and NIST Continuous Monitoring (ISCM).
Role-based access control
Operations and access are protected with strict role-based access control (RBAC).
End-to-end TLS 1.2
All network traffic is protected with end-to-end TLS 1.2 encryption.
Compiled agents
Agents are compiled to resist reverse engineering.
Why IronSphere
No one knows every platform and its risk.
IronSphere was planned for a novice. The dashboard displays the risk scores for each environment and the number of end-points. Diving into the reports, one can understand what the risk is, why it is a risk, how to remediate it and who should remediate the findings.
Our clients
IronSphere is used by banking conglomerates, federal government, insurance and even startups around the world.
IronSphere saves time and money and keeps your security configuration knowledge over manpower changes. And the bottom line: keep your organization safe!
See IronSphere in action.
Request a walkthrough, start a free trial, or ask us for a quote.