Auditors ask whether you log access, changes to accounts and permissions, and attempts to clear logs. Arden Comply reads your existing Windows event logs and shows, requirement by requirement, which of that logging is in place and where the gaps are. It runs on your own server, and nothing is sent to the cloud. It documents your logging; it does not decide whether you are compliant.
GovRAMP (formerly StateRAMP) assesses cloud products sold to state and local governments. Arden has no cloud component, so there is no hosted service for GovRAMP to assess. Your agency would evaluate it the way it evaluates other software installed on its own systems.
Credentials Arden stores (endpoint deployment and SMTP passwords) are encrypted with Windows DPAPI. Dashboard TLS uses the OpenSSL library bundled with Arden, and the agent uses Go’s standard TLS. Arden does not currently run in a FIPS 140-3 validated mode. If your policy requires FIPS-validated cryptography, contact us before deploying.
Agencies that handle criminal justice information have to log and review access to CJI systems. The CJIS policy also puts encryption and access-control conditions on cloud services. Arden runs on your own server, and the logs it collects stay on your network.
The HIPAA Security Rule calls for audit controls that record and examine activity on systems containing ePHI. A small clinic has the same requirement as a hospital system, often without a SIEM or anyone on staff to run one.
PCI DSS requires any business that stores, processes, or transmits cardholder data to log and monitor access to system components and cardholder data. That includes restaurants and shops running Windows-based point-of-sale systems.
CMMC Level 2 assessments are based on the NIST SP 800-171 requirements, including the audit and accountability family. Many of the contractors and subcontractors going through them are small shops without a security team or a SIEM.
For public companies, SOX auditors test IT general controls over financial reporting systems, including who has access and how changes are made. Windows logon, account, and change events are part of what they look at.
Schools, districts, and colleges are responsible for protecting student education records. Their IT staff look after Windows labs and student information systems, usually without a dedicated security person.
Agents send logs only to your Arden server, which does the analysis and storage. Nothing is sent to a cloud service, and there is no telemetry.
When Arden sees a log-clearing event, it writes the alerts and events it has already collected to a local preservation file, so you still have a copy after the endpoint's log has been wiped.
For account changes, privilege assignments, and policy changes, Arden records which user account made the change, as reported in the Windows event.
Events in the 56 monitored categories, including logons, user and computer account changes, privilege use, group membership, scheduled tasks, and policy changes, are written to a rolling CSV file as they arrive. You can export them as CSV or JSON, filtered by framework and control.
You can generate a PDF audit-log coverage report from the dashboard. It shows coverage by framework, which baseline and enriched event categories were observed for each requirement, the logging gaps, an endpoint inventory, and recommended audit-policy changes. You can give it to your auditor or assessor as documentation of your logging.
For each requirement, Arden shows which event categories were observed, which probably need an audit-policy change, and which may be limited by the Windows edition or version. Each gap comes with a suggested Group Policy setting, or a note when the limit is in the OS itself.
After you enable an audit policy and those events start arriving, the dashboard picks them up and marks that category as observed. You don't need to reconfigure Arden or run a new scan.
The beta is invite-only, with two-week licenses. Arden Comply runs on Windows 10/11 or Server 2016 and later as a single executable, with no database or runtime to install.
Request a Beta Invite →