Device Discovery & Inventory
Subnet scanning, fingerprinting, and Windows/Linux agent deployment — a living inventory at 10,000+ device scale.
Kalyde Control
Your compliance command center.
Kalyde Control is a single-pane-of-glass RMF/NIST 800-53 management platform purpose-built for Information System Security Managers, ISSOs, system administrators, and security teams operating in high-assurance and air-gapped environments. It automates the hardest parts of compliance — device discovery, vulnerability scanning, patch remediation, STIG enforcement, POA&M lifecycle management, and OSCAL artifact generation — all under one roof.
Capabilities
Every stage of the compliance lifecycle, in one workflow — from the first subnet scan to the signed authorization package.
Vulnerability Management
CSAF-driven scanning with automatic POA&M creation and scoped risk decisions, from Global down to individual devices.
Patch & Configuration Compliance
Centralized patch jobs, STIG baseline enforcement, deviation tracking, and .ckl export for eMASS.
POA&M Lifecycle
Automated creation, assignment, remediation tracking, and closure — tied directly to scan findings, not spreadsheets.
OSCAL Engine
Auto-generated SSP, SAP, SAR, and POA&M artifacts in XML/JSON with schema validation, ready for the authorization package.
Continuous Monitoring
Real-time dashboards, weekly audit summaries, and KPI roll-ups that feed the RMF continuous monitoring package.
Air-Gap Operations
Secure import of CSAF and STIG updates via optical/USB media with hash validation. Full capability, zero connectivity required.
Credential & Audit Management
Encrypted credential vault, tamper-evident audit logs, and FIPS 140-3 validated cryptography throughout.
Issue & Task Tracking
Helpdesk-style issue submission linked to POA&M items, with full resolution tracking from report to close.
Technical foundation
Built for high-assurance environments
Kalyde Control is engineered for the enclaves where compliance actually gets hard: disconnected networks, strict cryptographic requirements, and auditors who read the fine print.
- Web application
- ASP.NET Core
- Authentication
- ASP.NET Identity with AD/LDAP federation
- Endpoint agents
- Windows & Linux
- Cryptography
- FIPS 140-3 validated
- Standards
- NIST 800-53 Rev.5, NIST 800-37 Rev.2, OSCAL, DISA STIGs
- Deployment
- Enterprise enclaves, including air-gapped environments
See it on your own terms.
Tell us about your enclave and your RMF workflow — we'll show you exactly where Kalyde Control closes the loop.