Aegis / Silverline Brands - Comply v2 Early Access Demo

Yeah exactly, and honestly the timing of this call is actually pretty good for us because we've got our PCI DSS renewal audit coming up in like six weeks so compliance is very top of mind right now.

Perfect, yeah that's — honestly that's exactly why I wanted to get you on early access for the Comply v2 demo because what you're about to see is going to be really relevant to that audit cycle.

Absolutely, so let me just pull up the environment here — bear with me one second — okay, so what you're looking at is the new Comply v2 dashboard and the big shift here is that previously, as you know, generating a compliance report was kind of a scheduled batch process, right, you'd request it and wait, sometimes hours.

Yeah that was — I'll be honest that was a pain point for us, like our auditors would ask for something and I'd have to say well come back tomorrow basically.

-1Dominic describes the old batch report process as a pain point, telling auditors to come back tomorrow. · compliance reporting

Right, and that's gone in v2 — so what we've built is a fully on-demand reporting engine, so you click here, you select your framework — and this is the other big thing — we now support PCI DSS, SOC 2, HIPAA, and ISO 27001 all natively in the platform.

Oh wow, okay so all four in one place — that's actually huge because right now we're kind of stitching together like three different tools to cover those.

+1Dominic reacts enthusiastically to four frameworks in one place, saying it is 'huge' because they currently stitch three tools together. · product capability

Yeah that's a really common thing we're hearing, and that's kind of the whole value prop of pulling it into Aegis Comply — so let me show you the PCI DSS report generation since that's what's most relevant for you right now.

So I'm clicking on PCI DSS here, you select your scope — in your case this would be your cardholder data environment, your point of sale systems, whatever you've got mapped — and then you just hit generate, and watch how fast this comes back.

Okay so that's... wow that was like eight seconds?

+1Dominic is impressed that the report returned in about eight seconds. · product capability

Eight, nine seconds yeah — and what you get is a full report with your control status, evidence mapping, gap analysis, and an audit-ready export in PDF or CSV depending on what your auditors prefer.

Okay I need to send this to my audit team — like, genuinely, our QSA has been asking us for faster evidence turnaround and this would just... this changes the dynamic completely.

+2Dominic says the report speed 'changes the dynamic completely' and wants to send it to his audit team. · product capability

Great question — so the comparison view is in the roadmap, that's targeted for the Q3 release, but what you can do right now is pull two reports and the timestamps are embedded in the metadata so you can diff them manually, which is not as slick but it works.

Yeah and I'll flag that to the product team that it's a requested feature, that kind of customer input actually does move things on the roadmap so I appreciate you calling it out.

Yeah so let me click into one of these gap items here — so this is showing a control gap under PCI DSS requirement 10, which is around log monitoring, and it's giving you the specific control ID, the description of what's failing, and then it links directly to the relevant log source or resource in your environment.

That's actually really useful because honestly one of the things my team struggles with is they know we have gaps but they don't always know how to articulate them to leadership — having something like this that just spells it out is gonna save us a lot of back and forth.

+1Dominic says the specific gap detail will save his team back-and-forth in explaining gaps to leadership. · product capability

How does this interact with Aegis Detect by the way? Like we're using both and I'm wondering if the threat events feed into the compliance posture at all.

Yeah great question and the short answer is yes, they're integrated — so Detect is feeding event data into Comply and certain threat signals can trigger control status changes, like if Detect identifies an anomalous access pattern that violates a PCI control, that gets surfaced in the compliance report.

Yeah, absolutely — we had some infrastructure work done on the Detect side earlier this month actually, some improvements to the processing pipeline, and that's all resolved and the integration with Comply is solid.

Yeah there was some scheduled work, everything's good now — and actually what the team built into Detect as part of that is a more resilient architecture, so it's actually more robust now than it was before, which cascades nicely into the Comply integration.

Good to know — okay so coming back to Comply v2, when does this actually go GA? Because if we could have this in place before our audit I would love that.

+1Dominic says he would love to have Comply v2 in place before the audit. · compliance reporting

So GA is April 7th — that's four days from now — so you will absolutely have it live before your six week audit window, and honestly you could start generating reports by April 8th if we get your environment configured.

Yeah and because you're on early access you're already provisioned in the new environment, so the upgrade is essentially automatic — you'll get a notification on the 7th and then you're on v2.

That's great, that's really great — honestly this has been one of the more exciting demos I've sat through in a while, like usually I'm looking at features and thinking yeah that's nice but this is stuff we actually need right now.

+2Dominic calls it one of the more exciting demos he has sat through and says Silverline needs this now. · product capability

That's really good to hear Dominic, genuinely — and I think the timing just worked out perfectly with your audit cycle, so let's make sure we set you up for success, what would be most helpful as a next step?

I think getting my compliance lead on a call with you after the 7th to do like a hands-on walkthrough would be the right move — she's the one who's actually going to be living in this tool so I want her to be comfortable with it.

Perfect, yeah let's do that — I'll send you a scheduling link today and you can loop her in, and I'll also send over the v2 release notes and the PCI DSS mapping documentation so she can review it ahead of time.