Contact Open demo
Questions

Know the answer before the auditor asks

nerl0 suggests the security questions that fit your connected platforms, lets you activate the checks you need, and measures every answer again with each scan.

Start with the questions that matter

Every environment is different. nerl0 reads your connected platforms and suggests the questions that fit, so you never begin from a blank page.

Discover Questions
TrackedArchivedDiscover⌕⚙▥
Tracked15Archived4 suggestions in Discover →
Tracked questions15
Getting worse2since last scan
Improving1since last scan
Not comparable10
QuestionTrendStatus
HCredentials unused for 45 daysNot comparableIncomplete data
OShare of agents without an ownerIncomplete data
HShare of identities older than 365 daysIncomplete data
WHow is the proven write and admin access of agents changing?Tracking
WWhich agents hold proven write or admin access to resources on more than one platform?Tracking
Discover Questions4 suggested
✓
Which agents can reach northstar-customer-data?Crown-jewel store · 7 agent paths · Measurable
✓
Which agents can reach northstar-support-tickets?Crown-jewel store · 6 agent paths · Measurable
Which agents can reach prod/payments/stripe-key?Crown-jewel store · 4 agent paths · Measurable
Which agents can reach northstar-payments-db?Crown-jewel store · 2 agent paths · Measurable
Nothing is tracked until you confirm.
Select recommended (4)2 selectedTrack selected
Tracked · worse · improving
One row per question
Suggested for your platforms
Nothing tracked until you confirm
01Ask a security questionStart from a suggestion or write your own.
02Get an answer you can proveEvery answer shows the evidence behind it.
03Watch it change scan by scanThe same question is measured again with every scan.

Suggested from what is connected

nerl0 reads AWS, Azure, Salesforce, GitHub, Slack, OpenAI and MCP servers, and proposes the questions that fit what it finds.

Cloud & CRM
Code, chat & AI
aws
azure
salesforce
github
slack
openai
mcp
githubGitHub · AI agent in GitHub Actions

anthropics/claude-code-action in northstar-tech/platform

Discover Questions4 SUGGESTED
Suggested question

Which agents can reach northstar-customer-data?

Crown-jewel store7 agent pathsMeasurable

Track every answer across scans

Each tracked question keeps its history, so you see what is improving, what is getting worse and when it changed.

  • TrackingMeasured with every scan.
  • Incomplete dataA connector is missing or only partly collected.
  • Not comparableNot enough scans yet.
How is the proven write and admin access of agents changing?
TrackingMeasured every scanSince 11 Sep
new access for a known agent25 Oct 07:00
partner-sync no longer counts toward this questionaccess removed
What this answer cannot showThe scan of 9 Nov 07:00 collected salesforce only partly: a difference there can be a difference in visibility, not in your environment.
MONTUEWEDTHUFRISATSUN
19
20
21
22
23
24
25
26
27
28
29
30
31
1 Nov
2
3
4
5
6
7
8
9
10
11
12
13
14
15

Every scan, on the record

Each scan is a dated snapshot. See when something changed, and which scans only collected part of your platforms.

Scheduled scansAnswer historyGap analysisCompare scans

Questions your team will ask first

From stale credentials to cross-platform admin access. Start from a question that already has an owner in your company.

Browse questions

One question, asked on every scan, beats a hundred audits that are out of date the day after.

Questionsnerl0 · Track the answers that matter

Questions.
Evidence.
Action.

See how nerl0 worksView docs →

Start with the questions that matter.