MiraShieldCybersecurity platform

Pricing Support Sign in

Reads configuration and compliance metadata — never the regulated data itself.

Support

MiraShield support for assessments, scanning, evidence, and documents — 20 articles.

Getting Started

Set up your organization and produce your first score.

Creating your organization and choosing frameworksHow a company gets onboarded, and which standards it decides to measure itself against.
The guided questionnaireAnswer plain-English questions instead of reading 110 requirements yourself.
Understanding your scoreSPRS, Rev 3 readiness, and the gap report — where every number comes from.

Documents & Evidence

Turn your answers and scans into a System Security Plan, a POA&M, and files an assessor can read.

Generating the SSP and POA&MHow your answers and gaps turn into narrative documents an assessor reads.
Reviewing AI-drafted narrativeWhy a person has to read every paragraph before it counts as a statement your company makes.
Exporting and freezing a versionWord, PDF, and OSCAL downloads — and the difference between a draft and a frozen version.

Scanning Your Systems

Connect a cloud account or code repository and let MiraShield find real problems, nightly.

Connecting a cloud account or code repositoryAWS, Google Cloud, Azure, GitHub, and Microsoft 365 — one read-only role, scanned nightly.
Reading users from Microsoft Entra IDAdmin roles, two-factor sign-in and unused accounts in your Microsoft 365 directory, in one click.
Reading GitHub repositories, pull requests and security alertsBranch protection, who approved each merge, and open Dependabot, code scanning and secret scanning alerts.
Connecting SupabaseSSL enforcement, network restrictions and point-in-time recovery for every project in a Supabase organization.
Reading and resolving findingsWhat a scanner found wrong, and how a finding closes itself once it's fixed.

Endpoint Security

Cover the laptops your policies already claim to cover.

Enrolling a deviceInstall a lightweight agent on a company laptop to report its own security posture.
Managing and revoking devicesRotating a device's credential, revoking it, and what happens when someone leaves.

Mobile Device Management

Read device compliance from an MDM your company already runs.

Reading device compliance from Intune, Jamf, or Apple Business ManagerMDM connectors are built — here's what each will read once one is verified against a real tenant.

Team & Access

Who can see what, and how sign-in is protected.

Inviting people and understanding rolesWho can see, answer, review, or administer — and who counts as an outside provider.
Setting up two-factor authenticationTOTP, recovery codes, and what a lost device means.
Requiring two-factor authentication for everyoneOne switch that applies the requirement to the whole organization, not just yourself.

Audit & Trust

Prove where a claim came from.

The ledgerThe hash-chained, append-only record of who did what, and how to verify it.

Working Across Organizations

For a consultant or MSP responsible for more than one company.

Working across organizationsFor a consultant or MSP responsible for more than one company's compliance record.

Ask Mira

An assistant that knows the standards and where you are in one.

Ask MiraThe assistant in the corner of every screen — what it can answer, and what it deliberately can't decide.