# Mycroft

> Mycroft is a security and compliance automation platform that helps companies achieve enterprise-grade security, attestations and certifications like FedRAMP and CMMC without building a massive team.

Mycroft pairs an AI-driven Risk Operations Center with a stack of security products — cloud security, application security, device management, and third-party risk management — so teams get audit-ready fast and stay continuously compliant. It supports 150+ native integrations across AWS, Azure, GCP, GitHub, GitLab, and BitBucket, and maps to major compliance frameworks including CMMC, FedRAMP, SOC 2, ISO 27001, HIPAA and GDPR.

## Product

- [Product overview](https://www.mycroft.io/product): The automated Mycroft platform and its stack of security products.
- [Cloud Security](https://www.mycroft.io/product/cloud-security): Proactive security built for cloud-native architectures.
- [Application Security](https://www.mycroft.io/product/app-security): Catch vulnerabilities early and monitor app threats around the clock.
- [Device Management](https://www.mycroft.io/product/device-management): Enforce security policies and monitor device health across every endpoint.
- [Third-Party Risk Management](https://www.mycroft.io/product/third-party-risk-management): Visibility and control over external vendor risk.
- [Audit & Compliance](https://www.mycroft.io/product/audit-and-compliance): Get audit-ready and compliant fast.
- [Integrations](https://www.mycroft.io/integrations): 150+ native integrations across cloud providers and code hosts.
- [Pricing](https://www.mycroft.io/pricing): Packages for building and maintaining an enterprise-grade security and compliance program.

## Compliance frameworks

- [FedRAMP](https://www.mycroft.io/frameworks/fedramp): Achieve FedRAMP Certification and operate securely in the public sector.
- [FedRAMP 20x](https://www.mycroft.io/frameworks/fedramp-20x): Earn FedRAMP Certification on the 2026 rules with Key Security Indicators and automated evidence.
- [CMMC](https://www.mycroft.io/frameworks/cmmc): Meet CMMC requirements and secure DoD contracts.
- [CPCSC](https://www.mycroft.io/frameworks/cpcsc): Meet CPCSC requirements and win Government of Canada defence contracts.
- [SOC 2](https://www.mycroft.io/frameworks/soc2): Achieve SOC 2 compliance the right way.
- [ISO 27001](https://www.mycroft.io/frameworks/iso27001): Achieve ISO 27001 certification and strengthen your information security program.
- [ISO 42001](https://www.mycroft.io/frameworks/iso42001): Implement responsible AI practices and meet ISO 42001 requirements.
- [HIPAA](https://www.mycroft.io/frameworks/hipaa): Meet HIPAA requirements and protect sensitive health information.
- [GDPR](https://www.mycroft.io/frameworks/gdpr): Achieve and maintain GDPR compliance.
- [CPRA](https://www.mycroft.io/frameworks/cpra): Meet CPRA requirements and manage consumer data.
- [PIPEDA](https://www.mycroft.io/frameworks/pipeda): Meet PIPEDA requirements and manage personal data responsibly.

## CMMC

- [CMMC as a Service](https://www.mycroft.io/cmmc-as-a-service): Meet all CMMC requirements and secure DoD contracts with Mycroft's Risk Operations Center.
- [Book a CMMC demo](https://www.mycroft.io/cmmc-demo): We identify CUI boundaries, build your SSP and POA&M, implement controls, and submit compliant SPRS scores.

## Company

- [About](https://www.mycroft.io/about): Mycroft's mission and team — enterprise-grade security and compliance without a massive team.
- [Partnerships](https://www.mycroft.io/partnerships): Grow your business and help customers stay secure through Mycroft partnerships.
- [Book a demo](https://www.mycroft.io/demo): Schedule a personalized walkthrough of the platform.

## Resources

- [Blog](https://www.mycroft.io/blog): Insights on cybersecurity, compliance, and threat trends.
- [Case studies](https://www.mycroft.io/case-studies): How real customers improved security, efficiency, and compliance with Mycroft.
- [Resources](https://www.mycroft.io/resources): Expert guides, checklists, and customer stories.
- [FAQs](https://www.mycroft.io/faqs): Answers to common cybersecurity and compliance questions.
- [Webinars](https://www.mycroft.io/webinars): Expert-led, on-demand sessions on security and compliance.
- [Security Audit Checklist](https://www.mycroft.io/resources/security-audit-checklist): What to have in place before calling an external auditor.
- [CMMC Compliance Guide](https://www.mycroft.io/resources/cmmc-compliance-guide): A five-step operational framework for CMMC assessments.

## Optional

- [Customer story: Wisedocs](https://www.mycroft.io/case-studies/wisedocs)
- [Customer story: Weave](https://www.mycroft.io/case-studies/weave)
- [Customer story: Unified](https://www.mycroft.io/case-studies/unified)
- [Customer story: SmashSend](https://www.mycroft.io/case-studies/smashsend)
- [Sitemap](https://www.mycroft.io/sitemap.xml): The complete list of indexable pages, including every blog post.