Small corrections.
Whole fleet on course.

Trimtab checks every Windows device and Microsoft 365 tenant against the standards your clients answer to, explains each gap in plain English, and tells you the morning something drifts.

Coming soon. We’ll email you when Trimtab launches, and that’s it.

A chart of a fleet’s compliance course against its heading, CMMC Level 2. The track drifts toward a shoal when a firewall is turned off on three laptops, is corrected the next morning, drifts again when MFA is turned off for two users, is corrected, and ends on course.

How it works

Post a Lookout

Install the Lookout agent on each Windows device with one command and a client enrollment key. It scans every day and after each restart, and never changes a setting. Microsoft 365 connects with one admin approval.
See where you stand

Every result is charted to the exact requirements it proves, for each standard you choose per client. One score per device, one view of the whole fleet.
Correct course

The Bridge flags anything that drifted since the last scan and walks you through the fix, step by step, with the evidence behind it.

Every gap, explained in a sentence your client can read.

Standards are written for assessors. Each Trimtab finding says what it found on the device, how the check helps, and what the requirement means in everyday words. The official wording and a link to the source sit one click away.

Fail Medium severity, check SES-001

Screen locks after inactivity

What we found: No screen lock of 15 minutes or less is enforced on this laptop.
How this check helps: An automatic screen lock protects an unattended computer from whoever walks up to it.
What the requirement means: CMMC Level 2, AC.L2-3.1.10: if someone walks away from their computer, the screen should lock and hide what was on it.

Official requirement

Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity.

NIST SP 800-171 r2, requirement 3.1.10

The standards your clients answer to

Choose one or several per client. The same 41 Windows checks and 20 Microsoft 365 checks feed every standard, so adding one costs nothing.

Standard	Who it’s for	Checked by Trimtab
CMMC Level 1	Defense contractors handling Federal Contract Information	11 of 15 requirements
CMMC Level 2	Defense contractors handling Controlled Unclassified Information (NIST SP 800-171)	34 requirements
HIPAA Security Rule	Healthcare providers and their business associates	11 safeguards
FTC Safeguards Rule	Tax preparers, CPA firms, mortgage brokers, auto dealers, and insurance agencies	7 requirements
CIS Controls IG1	Anyone who wants a recognized security baseline	20 safeguards

Scans prove technical settings. Policies, training, and physical security still need their own evidence, and Trimtab marks exactly which requirements it covers. Coming next: cyber insurance readiness and NIST CSF 2.0.

Built for the people doing the work

Read-only by design: Lookout observes and reports. It never changes a setting, so it’s safe on production machines.
Drift, the next morning: Each scan is compared with the last, so a setting that slipped shows up the next day instead of at audit time.
Fixes you can follow: Every finding comes with its evidence and step-by-step instructions. Reports print cleanly for clients and auditors.
Every client kept apart: Each client has its own enrollment keys and standards, and each organization its own database.
Keeps watch offline: Laptops keep scanning away from the office and report in when they reconnect.
Your thresholds: Password length, patch age, log size, and other limits can match your policy rather than ours.

For MSPs

Run every client from one Bridge. Spot drift before an assessor does, and hand clients reports they can actually read. Lookout deploys in minutes with the tools you already use.

For the businesses they serve

Know where you stand every day instead of once a year. Gaps come explained in language leadership can follow, with a clear line between what’s proven and what’s still on you.

A compliance tool shouldn’t add risk

Nothing changes on your devices: No check modifies the system. Lookout only reads settings.
A credential per device: Each device gets its own token, encrypted with Windows DPAPI and revocable at any time.
Outbound HTTPS only: Lookout opens no ports and accepts no commands.
Separate data for every organization: Each organization’s results live in their own database, and every sign-in needs an authenticator code.

Questions

Does Trimtab change anything on my devices?

No. Every check is read-only. Trimtab reports what it finds and recommends a fix, and your team decides what to change.

Does Trimtab make me CMMC certified or HIPAA compliant?

No tool can. Certification comes from an assessment, and compliance includes policies and processes as well as technology. Trimtab gives you continuous, evidence-backed visibility into the technical requirements, and clearly marks what it doesn’t cover.

What does it run on?

Windows 10, Windows 11, and Windows Server, using the built-in Windows PowerShell. Microsoft 365 connects with read-only access that a Global Administrator approves once.

What data does Lookout collect?

Security configuration only: device name, model, serial number, operating system, and the result and evidence for each check. It never reads documents, email, or browsing activity. See the privacy page for the full list.

When can I get Trimtab?

Trimtab is coming soon and isn’t for sale yet. Sign up below and we’ll email you when it launches.

Small corrections.Whole fleet on course.