Review orchestration
Import a questionnaire, map supported requirements, coordinate asynchronous scans, and preserve every status transition.
Security review operations, grounded in infrastructure.
TrustFix converts questionnaire requirements into measurable controls, inspects Google Cloud, governs the smallest safe remediation, and attaches proof to the final answer.
Evidence records
Keep the source, project, resource identifier, relevant properties, collection time, and verification state.
Governed remediation
Show the current state, exact delta, impact, rollback, risk, and policy decision before execution.
Independent verification
Re-run the original control and an external probe where practical. API success alone never means verified.
THE OPERATING LOOP
From question to defensible answer.
- 01Interpret the natural-language requirement
- 02Map it to a deterministic control
- 03Inspect the disposable target project
- 04Collect resource-specific evidence
- 05Evaluate pass, fail, or incomplete
- 06Plan the minimum safe remediation
- 07Apply policy and human approval
- 08Execute with drift protection
- 09Re-test the security property
- 10Export the verified answer and audit trail