Resources
Whitepapers & Guides
Technical deep-dives on vulnerability management, compliance automation, and audit readiness. Once a document's claims are verified against the shipped product, it is free to download with no email gate.
While a document's claims are under review, its download is withheld; each card below shows its current status.
Whitepapers
In-depth technical documents covering product architecture, platform security, compliance methodology, AI trust model, business case, and integration.
Compliance in 90 Seconds
How CVERiskPilot Maps Vulnerabilities to 13 Regulatory Frameworks in a Single CLI Scan
Product overview covering the vulnerability-compliance gap, six-layer architecture (Ingestion, Intelligence, Decision, Action, Executive Intelligence, Trust), CWE-to-control bridge, and the current control catalog across 13 implemented frameworks.
Doc ID: CRP-WP-2026-001 · Download withheld pending claim review
Platform Security & Operational Architecture
Where Your Data Lives and How It's Protected
Infrastructure security deep-dive for vendor risk assessments: cloud architecture, encryption (AES-256-GCM), tenant isolation, CI/CD security pipeline, the hash-chained audit log (signing in progress), and disaster recovery. Includes SOC 2 and NIST 800-53 control alignment.
Doc ID: CRP-WP-2026-004 · Download withheld pending claim review
The CWE-to-Control Bridge
Mapping Methodology Across 13 Regulatory Frameworks
Technical deep-dive into the compliance mapping engine: how CWE weakness classifications are mapped to specific controls across NIST 800-53, CMMC, SOC 2, FedRAMP, HIPAA, PCI DSS, ISO 27001, and the rest of the 13-framework catalog. Includes data sources, update cadence, validation methodology, and a worked example tracing CWE-89 through the shipped bridge.
Doc ID: CRP-WP-2026-005 · Download withheld pending claim review
Human-in-the-Loop AI Triage
Architecture and Trust Model for Agentic Vulnerability Assessment
How CVERiskPilot's AI triage works today: enrichment data passed to external models, a deterministic safety policy on every decision, refusal handling, spend controls and fallback between model tiers, plus the agent architecture we are testing internally. The AI recommends; humans decide.
Doc ID: CRP-WP-2026-006 · Download withheld pending claim review
The Cost of Doing Nothing
ROI Analysis for AI-Powered Vulnerability Compliance
Business case for automated vulnerability-to-compliance mapping: a cost model with its assumptions stated (analyst rate, time per task, findings per quarter) so you can substitute your own, covering per-finding triage and mapping effort, audit preparation time, and risk against breach and compliance failure costs. Figures are illustrative assumptions, not measured results.
Doc ID: CRP-WP-2026-007 · Download withheld pending claim review
Getting Started with CVERiskPilot
Scanner Integration, API Access, and Deployment in Under an Hour
Practical integration guide covering two paths: CLI scanner (13 package manager formats) and file upload (11 scanner formats). Includes CI/CD setup (GitHub Action) and the API-key triage endpoints. Scanner API connectors are in progress and self-serve SSO setup is planned.
Doc ID: CRP-WP-2026-008 · Download withheld pending claim review
Guides & Tools
Getting started documentation, integration guides, and free compliance tools.
CLI to Dashboard Guide
Step-by-step walkthrough: scan your project with the CLI, upload results, and review findings in the dashboard.
View guide Integration GuideGitHub Action Setup
Integrate CVERiskPilot into your CI/CD pipeline with automated PR comments and compliance checks.
View guide Free ToolSOC 2 Readiness Report
Free tool: paste CVERiskPilot CLI output or a JSON list of findings and get a SOC 2 gap analysis showing which controls are affected and what to fix.
View guideReady to see it in action?
Run your first compliance-mapped scan in under 60 seconds — no account required.