Policy analysis
Upload a policy and receive improvement recommendations against what examiners look for.
AuditHat Pulse
Drift
happens.
Pulse logs every change that moves you off the security baseline: who, what, when, and whether it was approved.
- Firewall rules
- Admin & privileged accounts
- MFA & Conditional Access
- Patches
- Backups
- New devices & software
What is drift?
Any change that moves a system off the baseline you approved.
What it is
Firewall rules, admin rights, MFA policies, patches, backups. Any of them changed since you last approved them.
Why it matters
Most incidents start with a change nobody reviewed. Examiners ask who approved it. Attackers never do.
What Pulse does
Logs each change with who, what, when, and whether it was approved. It does not make or block changes.
The gap.
Your environment changed 40 times this month. Who approved them?
0changes
Approved
Pulse.
Every change. Who, what, when, approved or not.
Drift.
Firewall. Admins. MFA. Patches. Backups.
Baseline.
Assign it. Fix it. Prove it.
We fix it.
With your IT provider. Free during your trial.
Every finding.
Tracked from audit to closed.
Stale admin accountsOpen
Firewall rule review overdueOpen
MFA gap on shared mailboxOpen
Backup restore untestedOpen
Patch window missedOpen
Vendor access not expiredOpen
Every policy.
Uploaded. Analyzed. Recommended. Flow · coming soon
Information Security Policy
The committee.
One page. Walk in with it.
Drift
Findings
Approvals
IT Oversight — Monthly
Reviewed
Monthly call.
Our security and compliance team reviews the report with you.
The examiner.
Share the program. Answer the request in one click. Flow · coming soon
Policies42 approved
Findings6 tracked
Reports12 months
For banks.
And credit unions. Their committees and examiners.
Flow, the compliance side Coming soon
A sneak peek at the features on the way. Pulse is available today; Flow follows.
Custom templates
Policy templates from a library. If one is missing, our auditors create it.
Community library
Policies and procedures shared by institutions like yours.
Auditor communication
Share the program with auditors and examiners inside Flow, read-only.
Why we built it
Examiners expect documented IT oversight, and most community institutions assemble it by hand each quarter: emails from the MSP, screenshots from the firewall, a spreadsheet of findings that nobody trusts. AuditHat exists so the change log, the findings, and the policies live in one place, and the committee gets one page it can read before the meeting. — [Founder name], AuditHat
Questions
What happens after the six months?
The trial ends and your data stays. Plans start at $99, and your specialist can tailor the plan to your needs, or export what Pulse collected.
Do you make changes to our systems?
No. Pulse tracks and reports. It does not make, block, or automate changes, and it does not replace your MSP, firewall, or RMM. When we help fix drift during the trial, we give guidance and steps and coordinate with your IT provider; the change is theirs to make and ours to confirm closed.
Is Pulse a monitoring tool?
It watches your systems like one, but it tracks changes and drift from your security baseline rather than uptime: admin and privileged-account changes, firewall rules, MFA and conditional-access changes, patch status, backup status, new devices and software.
What is the monthly call?
A review of the executive report with AuditHat's security and compliance team before it goes to your IT/Audit Committee: what changed, what drifted, and what to say about it. It is a report review, not an audit or a risk assessment.
When is Flow available?
Flow, the policy and compliance side, is coming soon. The sections above are a preview of its features. Policy recommendations will reference FFIEC, GLBA, NIST and NCUA guidance as frameworks; Flow is not endorsed by any regulator.