NOMARCH
Windows compliance that guards — and heals — itself.
NOMARCH is our autonomous Windows compliance platform. A guardrailed AI generates hardened PowerShell checks, verifies every line through a static safety gate, and auto-heals configuration drift across your entire fleet — turning audit prep into a continuous, provable, hands-off process.
- Cut audit-prep time from weeks to hours
- Zero unsafe scripts shipped to a host
- Continuous compliance instead of point-in-time snapshots
- One platform for your whole Windows fleet
- nist_firewall_enabledPASS
- nist_defender_antivirusPASS
- iso27001_password_policyDRIFT → HEAL
- iso27001_password_policyPASS
- cis_smb_v1_disabledPASS
Everything compliance should have been
Stop chasing spreadsheets and stale scans. NOMARCH turns your standards into living controls that fix themselves.
Guardrailed AI generation
Describe a control; NOMARCH writes the hardened PowerShell check — behind a four-layer static safety gate that rejects anything unsafe before it ever touches a host.
Self-healing baselines
When a machine drifts or a check breaks, NOMARCH repairs the script, re-validates it, version-bumps, and the agent re-runs — no analyst in the loop.
Ten frameworks built in
NIST 800-53 and nine ISO standards ship ready to deploy across your fleet — or author your own custom baseline, control by control.
True multi-tenant
Cryptographically isolated organizations on one deployment. Every org sees only its own fleet, findings, and keys — perfect for MSPs and holding companies.
Live Windows agent
A lightweight read-only agent runs checks on each machine and reports in seconds — online-aware, offline-aware, and invisible to your users.
Audit-ready evidence
Every check, pass, fail, and repair is logged and exportable — hand your auditor a live, per-machine compliance timeline instead of a stale spreadsheet.
From install to audit-ready in four steps
- 1
Enroll
Drop the agent on a Windows PC with your org token — it appears in your fleet in seconds.
- 2
Assign
Pick a framework, or a subset. NOMARCH generates the hardened checks for it automatically.
- 3
Heal
Drift is detected, repaired, re-verified, and re-run — continuously, without you.
- 4
Prove
Export a live, per-machine compliance timeline your auditor can actually read.
Compliance pricing that scales with your fleet
One lightweight agent per Windows host. Pay only for the hosts you protect — 14-day free trial, cancel anytime, and two months free when you bill annually.
One NOMARCH agent runs per host. Drag to match your fleet size.
Starter
For small teams getting their first fleet to continuous compliance.
- 1 organization
- All 10 built-in frameworks
- Self-healing remediation
- Live agent + dashboard
- Email support
Business
For growing security teams and MSPs running multiple tenants.
- Up to 5 organizations
- Custom & cloned baselines
- API + webhook access
- Priority support & onboarding
- Volume pricing per host
Enterprise
For regulated enterprises and air-gapped or on-prem deployments.
- Unlimited organizations
- SSO / SAML + audit exports
- On-prem / air-gapped option
- Dedicated engineer + SLA
- Custom frameworks & integrations
Prices in USD, billed per active host. Nonprofit and education discounts available. Need an exact quote? Talk to us.
Find your weak points before attackers do.
Book a scoping call and get a threat-model of your environment within 48 hours — no obligation, no jargon.