Statepoint.Operate

Turn operating evidence into accountable action.

Connect cloud and on-premises evidence to understand risk, find waste and decide what needs attention. AI explains the priority; your team approves the response. Fresh evidence verifies what changed.

One operating record from observed signal to verified result.

Watch platform overview · 1:02
ObserveEvaluateAssignChangeReassessReport

One current view

See the condition of the infrastructure estate without rebuilding the story.

Statepoint.Operate connects observations that normally live in separate tools and spreadsheets. Every view keeps the project, environment, asset, owner and supporting evidence in context.

Statepoint.Operate

Security

Posture, exposure, attack paths and adversary validation.

Observed posture
Exposure paths
Asset risk context
Capability overview

Security and exposure

Know what is exposed, how it can be reached and why it matters.

Move beyond flat finding lists. Statepoint.Operate connects entry points, network boundaries, workload state, software and identity context to the asset that carries the risk.

Posture and hardening

Review cloud and host configuration against the standards that matter, with the observed state and remediation context kept together.

Exposure and attack paths

Connect public entry points, network rules, open ports, workload weaknesses and identities to show how an attacker could reach a material asset.

Adversary validation

Safely validate external, authenticated and API attack paths using scoped, non-destructive simulations and explicit safety controls.

Asset risk context

Bring preventive posture, weaknesses, MITRE mappings, open ports, software, vulnerabilities and services into one asset record.

AI-powered, human-governed

Turn connected operating evidence into explainable recommendations.

Build’s Copilot helps shape architecture; AI-powered Assurance helps understand its operation. It connects current evidence with architecture and controls to explain technical, operational, security and cost priorities. Recommendations inform people; engineering controls and approvals govern action, and reassessment verifies the result.

Continuous compliance

Assess AWS, Azure, Google Cloud, OCI, Kubernetes and on-premises operating systems against standard or tailored control sets, including manual evidence.

Identity and entitlements

Review access activity and entitlement evidence across cloud identities so privilege and ownership decisions remain explainable.

Certificate and trust monitoring

Monitor certificate validity, TLS posture, DNS protections, cipher strength and expiry risk across public services.

Patch assurance

Track patch posture across compute workloads and preserve the evidence needed to show what changed and what still needs attention.

Container and software security

Know what ships inside each image and what deserves action.

Discover registries and image versions, retain digest-level scan coverage and connect vulnerable packages to applicability, exploit signals and remediation context.

From registry inventory to actionable software risk.

  • Track repositories, tags, digests and when each image was last observed.
  • Separate version-matched candidates from vulnerabilities that require action.
  • Keep CVSS, exploit signals, vendor status and fixed versions together.
  • Expose scan gaps when new image digests have not yet been assessed.

Cloud cost

See where cloud spend is changing and where action creates value.

Review spend by project, environment, cloud and service. Surface budget movement, utilisation and rightsizing opportunities without disconnecting the recommendation from the resource and its operating context.

Cost evidence with engineering context.

  • Follow monthly, daily and service-level spend across cloud providers.
  • Compare current cost, forecast and movement against the previous period.
  • Identify waste, low utilisation and rightsizing opportunities.
  • Preserve the approved cost action through implementation and reassessment.

Verified outcomes

Move from finding to defensible closure.

Your team approves the response and carries it through its controlled change process. Statepoint keeps the owner, decision and evidence connected, then reassesses the environment to verify the result.

Guided remediation

Keep the owner, evidence, decision and approved action attached to the finding.

Verification

Reassess after change and record whether the exposure, control gap or waste was resolved.

Reporting

Create technical, executive, weekly and monthly views from the same operating evidence.

Frequently asked questions

Questions teams ask about Statepoint.Operate.

Clear answers for teams evaluating how Statepoint.Operate fits their infrastructure, governance and assurance workflows.

What is Statepoint Assurance Intelligence?

AI-powered Assurance connects operating evidence with architecture and controls to explain technical, operational, security and cost priorities and recommend responses. It complements Build’s AI Infrastructure Copilot, which helps shape architecture proposals from requirements. Assurance is shared across Build and Operate, not a third product; engineering controls and people govern consequential changes.

What evidence does Statepoint.Operate bring together?

Statepoint.Operate connects security, compliance, identity, software, container, certificate, cost and operational evidence. Each observation stays linked to its infrastructure environment, asset, owner and supporting context so teams do not have to reconstruct the story across separate tools.

How does Statepoint.Operate prioritize findings?

It goes beyond a flat severity list by correlating reachability, network boundaries, workload condition, software and identity context with the asset at risk. This helps teams focus on credible exposure paths and decisions that materially reduce risk.

How do Statepoint.Build and Statepoint.Operate handle container risk?

Statepoint.Build preserves the approved architecture and delivery context behind a workload. Statepoint.Operate connects registry, image, SBOM, package and vulnerability evidence to the running environment. Together, they help teams decide what should ship, understand what is running, approve action and verify the outcome.

Which environments can Statepoint.Operate cover?

Statepoint.Operate is designed for AWS, Microsoft Azure, Google Cloud, OCI, Kubernetes and on-premises estates. Teams can inspect platform-specific evidence while maintaining one assurance model and operating record across the wider environment.

Does Statepoint.Operate replace our existing security and monitoring tools?

Not necessarily. Statepoint.Operate is designed to connect and govern evidence that may already exist across infrastructure, security and operational systems. It adds shared context, prioritization, accountable action and verification rather than forcing every existing source to be replaced.

How does Statepoint.Operate support continuous compliance?

Requirements, applicable controls, observed evidence, exceptions and reassessment history remain connected. This gives engineering, risk and compliance teams a current record of what was evaluated, what decision was made and whether the resulting action was verified.

Can Statepoint.Operate help with cloud cost optimization?

Yes. It connects spend movement, utilization and rightsizing opportunities to the resources and operating context behind them. Teams can assess the recommendation, assign ownership, approve the response and verify the outcome with fresh evidence.

Who carries out an approved remediation?

Your team remains responsible for approving the response and carrying it through its controlled change process. The execution method and available automation depend on the action and configured environment and are confirmed during evaluation. Statepoint.Operate retains the owner, decision and evidence, then reassesses after the change to verify whether the exposure, control gap or waste was resolved.

Who uses the Statepoint.Operate record?

Security, infrastructure operations, platform engineering, FinOps, risk and leadership can work from the same current evidence. Each audience can inspect the level of detail it needs without creating a separate version of the outcome.

Does AI approve or execute changes on its own?

AI does not grant itself authority to change infrastructure. Build’s Copilot supports architecture proposals, while Assurance explains operating priorities and recommends responses. Engineering validation, authorised approval and configured execution workflows govern what proceeds. A recommendation is not an approval or proof of a verified outcome.

Where is Statepoint deployed?

Statepoint is delivered as a dedicated instance in your nominated Azure subscription or AWS account. This is separate from infrastructure coverage: Statepoint.Operate connects cloud and on-premises evidence, while Statepoint.Build governs supported cloud design and delivery. Collectors, connectivity and supported components are confirmed for your environment during evaluation.

Statepoint.Operate

See the risk. Decide the action. Prove the result.

Connect operating evidence across your hybrid infrastructure in one accountable record.

Book a demo