A live graph of cybersecurity compliance, queryable by people and by their agents.

Every framework, every control, every cross-mapping, dated and cited back to its source publication. Browse it here, query it from the API, hand it to an agent over MCP. Same data, three surfaces.

Search frameworks, controls, sources, jurisdictions ⌘ K

The Compliance Graph

Every framework, every cross-mapping. Click any node to explore.

— frameworks — mappings 7 layers refreshed continuously

Frameworks indexed

Controls

Cross-mappings

Jurisdictions

Last refresh

Top frameworks by cross-mapping density

Hubs in the graph. Other frameworks reference these the most.

browse all →

Loading frameworks…

Recent activity

Publishers, regulators, and the graph itself.

view all →

Loading activity…

Cross-mapping atlas

A radial view of every published cross-mapping in the catalogue. Ticks are frameworks grouped by layer; arcs are mappings between them. Hover an arc for the relation type and citation; click any framework to deep-dive into its controls.

— frameworks shown — mappings — uncharted

↵

One control, every equivalent

Pick a control, see it across the entire compliance landscape. Edge colour encodes relation type. Every edge cites back to a primary source.

SELECT A CONTROL TO EXPLORE

Use the search bar above, or click any framework on the Overview tab to walk its cross-mappings.

If I have these, what do I get? What is missing?

Tick the frameworks you already hold, then pick one framework to evaluate against them. RulesGraph reads the authoritative cross-mappings and shows how much of the target you already cover, what is partial, and where the gaps are. The result updates as you change the selection.

1 Tick the frameworks you already comply with.
2 Pick one framework to evaluate against them.
3 Read the coverage breakdown to the right.

Frameworks I already have

Loading\u2026

Framework I want to evaluate

Loading\u2026

Covered: a direct equivalent exists in a framework you hold. Partial: a related mapping exists; evidence may need extending. Gap: nothing in your selection maps to it yet.

Browse the catalogue

All frameworks RulesGraph tracks, with their current version, jurisdiction, layer, control count, and mapping count.

All layers L1 Foundational L2 Disclosure L3 Sector L4 Certification L5 Integrity L6 Procurement L7 Regulatory

Loading frameworks…

Activity timeline

Publisher releases, regulator enforcements, and ingestions into the graph. Each event cites the underlying revision in the audit trail.

Loading activity…

v1 API API Explorer Documentation Get API key MCP server

RulesGraph · continuous discovery, refreshed automatically