Know who has access to what
Run access reviews, collect evidence and keep your ISO 27001 programme audit-ready — then drive all of it from your own pipelines and AI tools.
Choose where to start
Set up your organisation, run your first access audit, and learn the roles and plans every other page refers to.
- 1Overview
The problems AutoCISO solves, the handful of concepts every other page builds on, and where each part of the product lives in the console.
- 2Quickstart
Set up your organisation with the five-step Organization Setup, run your first access audit, and invite your team — about 30 minutes.
- 3Setup Checklist
A phased checklist from first sign-in to audit readiness, with the console location and plan for each step.
Prefer a home screen built for your job?Role Focus
REST endpoints for your pipelines, and an MCP server for AI clients.
$ curl -s \
-H "Authorization: Bearer $AUTOCISO_API_TOKEN" \
"https://api.autociso.io/api/v1/sscs/sboms"
{ "data": [ … ], "error": null, "meta": { … } }Learn a feature
How each part of AutoCISO works, with step-by-step guides for the everyday tasks. Grouped the way the console sidebar is.
- Dashboard & postureSecurity Operating Surface2 pages
- Access auditsCorrect an Employee Match3 pages
- AI access reviewAI Agents and Reviews2 pages
- Employee lifecycleOn-boarding & Access Profiles2 pages
- ISO 27001Upload Evidence for a Control
- SuppliersSupplier Assessments2 pages
- Partner PortalPartner Portal Overview5 pages
- PrivacyPersonal Data Dictionary
- Single sign-onHow Sign-in Works5 pages
- AdministrationAI Providers3 pages
- Browse all product docs
- Dashboard Shows Only Verified Data, and Help Opens on RequestThe Executive tab no longer shows an overall score without evidence, unverified assets are no longer counted as healthy, tip pop-ups are gone, and the Compliance menu shows a badge.
- Read Endpoints for Platform Data in the Public APIAPI tokens can now read assets, risks, suppliers, ISO projects, compliance posture, evidence, the access inventory, employees and the Audit Trail with nine read-only scopes.
- Audit Trail Actions Are Past-Tense VerbsEvery Audit Trail entry now shows one past-tense verb as its action, with the record type in the Subject column, and filtering by a verb also finds older entries.
- Look up employees by e-mail over MCPThe new employee_lookup MCP tool maps e-mail addresses to employee IDs, up to 50 per call, with results by input position and no names or addresses in the response.