Essential Eight assessment
Assess controls and maturity levels 1 to 3 using a consistent scoring model.
PROD_01 | Endpoint Assurance
NebulE8
Essential Eight evidence from a Windows or Ubuntu endpoint, without changing the host.
NebulE8 checks a machine against the Essential Eight and records the evidence behind each result. It is designed for repeatable assessment, not automatic hardening.
Why it exists
Replace assumptions with repeatable evidence
Point-in-time spreadsheets can go stale quickly. NebulE8 gives teams a technical baseline they can run again and compare.
Assessment stays read-only
The assessment path queries configuration and records findings. It does not harden the endpoint or silently change settings.
Capabilities
What NebulE8 does
The focus is a clear answer to a practical question: what is the current Essential Eight posture of this endpoint, and what evidence supports that result?
Evidence with every finding
Record the technical signals used to support pass, fail and not-observed outcomes.
Windows and Ubuntu
Use one assessment model across the supported endpoint operating systems.
Structured outputs
Produce human-readable reports plus structured data such as JSON, CSV and OSCAL-oriented output.
Offline use
Support controlled environments where internet access is limited or unavailable.
Repeatable checks
Run the same assessment again after approved changes and compare the result.
Outputs
Evidence for technical and governance teams
Results are intended to be useful to the people fixing controls and the people reviewing assurance evidence.
| Output | Purpose |
|---|---|
| Human-readable report | Review findings, maturity results and supporting evidence. |
| JSON / CSV | Integrate findings into reporting, analysis or downstream workflows. |
| OSCAL-oriented output | Support structured security control evidence workflows where applicable. |
Where it fits
Start with the endpoint
NebulE8 is the first step in the suite. FederE8 extends the same assessment model across a fleet, while RemedE8 prepares remediation plans from the findings.
Security teams
Build a repeatable technical baseline without introducing configuration changes.
GRC and assurance
Collect technical evidence that can support control review and audit preparation.
Government and defence industry
Support Essential Eight assurance conversations in controlled environments.
Contact
Start with a representative endpoint
Tell us whether you want to assess Windows, Ubuntu or both, and what evidence you need from the first run.