Certisyn Bastion

Certisyn Bastion is a security posture verification service for your public-facing surface. It assesses your domain against a 196-control catalogue spanning 37 categories, among them TLS configuration, HTTP security headers, DNS, email authentication (SPF, DKIM, DMARC), and external attack surface. Every scan returns a clear letter grade, a finding-by-finding breakdown, and a precise remediation directive for each issue, so your team knows exactly what to fix and why.

Findings are aligned to recognised frameworks including Essential Eight, CMMC, and ISO 27001, making Bastion useful for both day-to-day hardening and formal compliance evidence. Results are deterministic and reproducible: the same surface always produces the same grade, and every result is issued with downloadable, cryptographically sealed evidence you can hand to auditors, customers, and counterparties. Each scan also states its own coverage: the record names the controls the engine evaluated against your surface and those it did not, and a control that did not execute carries no verdict.

Bastion Pro adds continuous re-scanning so posture drift is caught as it happens, not at audit time. Bastion is one of seven institutional front doors onto the Certisyn deterministic verification engine, operated from Salt Lake City, Utah.