Implementation Guides
Practical, step-by-step guides for security and GRC teams rolling out programs from scratch.
Why teams choose this
Program blueprints
End-to-end blueprints for TPRM, EASM and continuous compliance programs.
Maturity models
Self-assessment models with practical next steps for every maturity stage.
Stakeholder playbooks
Talk-tracks for board, procurement, legal and audit conversations.
90-day plans
Time-boxed plans to get from zero to value in a single quarter.
What's included
- Third-Party Risk Program in 90 Days
- Attack-Surface Management Quickstart
- Continuous Compliance Playbook
- Vendor Lifecycle Process Guide
- Board Reporting Templates
How it works
- 01Connect
Add your domain or vendor list — no agents, no DNS changes. a guide download starts within minutes.
- 02Analyze
Our engine continuously ingests open-source intelligence, scan data and threat feeds to produce an objective risk score.
- 03Act
Receive prioritized remediations, alerts and exportable evidence — share with your team, board or auditors.
Implementation Guides — frequently asked questions
- Are guides vendor-neutral?
- Yes. Guides describe programs and outcomes, not product features — usable by any team regardless of tooling.
- Can I get them in Notion?
- Yes — most guides ship as a PDF and a duplicatable Notion template.
- Do you offer workshops?
- Yes. Our Customer Success team runs workshops on each major guide for enterprise customers.
- Are guides free?
- Yes, all guides are free to download in PDF and Notion. Some advanced playbooks (vendor concentration, AI-vendor risk) are gated by business email for licensing reasons.
- Who writes the guides?
- Practitioners with operating experience as CISO, head of TPRM, head of compliance or GRC lead. Every guide lists author bios and review credits.
- Can I share guides with my team?
- Yes. Guides are licensed for unlimited internal use. Republishing externally is allowed with attribution under Creative Commons BY-NC-SA 4.0.
Related capabilities
Ready to see Implementation Guides in action?
Talk to our team about a 30-minute walkthrough tailored to your environment, or run a free non-intrusive scan of any domain.