HEPHAESTUS reads findings from navi.db and maps each one to the compliance controls it violates — CIS, NIST, PCI-DSS, SOC 2, ISO 27001 — giving your team the regulatory context to prioritise by compliance risk and produce audit-ready evidence from data already in your estate.
Capabilities
- Queries navi.db findings and maps each to compliance framework controls
- Identifies control gaps across CIS, NIST, PCI-DSS, SOC 2, ISO 27001
- Ranks findings by compliance framework coverage and severity
- Gated compliance report — proposed, previewed, sent only on confirm
What HEPHAESTUS Maps
HEPHAESTUS takes every finding in navi.db and maps it to the controls it violates — giving your team the compliance context that turns a vulnerability score into a regulatory priority. No external feed required: the mapping logic lives in the skill, the facts come from your data.
Why It Matters
Auditors don't care about CVSS scores. HEPHAESTUS gives you the framework-aligned evidence that turns your navi.db exposure data into audit-ready compliance documentation — grounded in real findings, not estimated posture.
Gate Model
Every compliance report is proposed and previewed before delivery. HEPHAESTUS requires explicit per-call confirmation. Works entirely from navi.db — no external feeds.