Sextant™
AI-Assisted Assessment Platform
Named for the navigator's instrument that fixes your exact position from the stars — Sextant™ tells you exactly where your compliance and security program stands, against any framework, with Agentic AI handling the workflow and audit trail while your people provide the answers.
Built For Two Audiences
Who Uses Sextant
Whether you're assessing your own organization or running assessments for clients, Sextant formalizes the process and eliminates the chaos.
Know exactly where you stand.
Run structured self-assessments against any framework — NIST CSF, SOC 2, HIPAA, ISO 27001, and more. Route questions to the right people inside your organization, track completion, collect evidence, and produce audit-ready output. No spreadsheets, no email chains.
- Internal assessment across any compliance framework
- Questions routed to your own team by role and domain
- Evidence collected and stored with a full audit trail
- Board-ready scoring and gap reports on demand
Professionalize your engagement process.
Stop running assessments out of spreadsheets and email. Sextant gives auditors and consulting firms a formal platform to manage their client engagements — structured question delivery, client evidence portals, multi-engagement dashboards, and standardized reporting across every client.
- Manage multiple client engagements from one dashboard
- Clients submit responses and evidence through a dedicated portal
- Standardized process across every engagement you run
- Audit trail and structured output your clients can show regulators
The Problem
Assessment Workflows Are Broken
Running a compliance assessment today means building a spreadsheet, emailing it to fifteen people, chasing responses for three weeks, and assembling a 200-page PDF that goes stale before it's read.
Sextant automates the workflow around the assessment — creation, assignment, governance, audit trail, evidence storage, and reporting — while Agentic AI handles the intelligence layer: tailoring question sets, routing to the right people, analyzing response quality, and generating gap analysis. Your people still provide the answers. Sextant makes sure they actually do, and does the analytical heavy lifting when they're done.
AI Does the Heavy Lifting. Your Team Provides the Answers.
Sextant's Agentic AI layer handles the intelligence work that consultants used to do manually — generating question sets, routing to the right people, analyzing response quality, identifying gaps, and drafting reports. Human judgment stays in the loop where it matters.
AI Assessment Builder
Describe your organization, industry, and compliance target — Sextant's AI generates a tailored question set mapped to framework controls in minutes. Risk-prioritized for your context, not a generic checklist.
Intelligent Routing
AI maps each question to the most appropriate respondent based on role, domain expertise, and organizational structure — with workload balancing across your team. No more manually deciding who answers what.
Evidence Guidance
Before a respondent answers, AI advises exactly what evidence should support that response — policy documents, configuration screenshots, access logs, attestations. Respondents know what to collect before they start typing, not after.
Response Evaluation
As each response is submitted, AI evaluates it against the framework control requirement — checking for completeness, consistency, and the quality of evidence attached. Vague or unsupported responses are flagged before the assessment closes, reducing back-and-forth cycles.
Internal Readiness Score
Sextant generates an AI-derived internal readiness score per framework domain — based on the quality and completeness of your responses and evidence. This is a self-assessment score for gap identification and tracking progress over time. An external auditor's formal opinion may differ; Sextant makes that distinction clear.
Remediation Recommendations
For each identified gap, AI suggests remediation actions, relevant controls to implement, and estimated effort — giving security teams a prioritized work plan and giving assessors a defensible recommendation set to discuss with clients.
How It Works
Workflow Automation, Human Judgment
Sextant automates everything around the human — the setup, routing, tracking, auditing, and reporting. Your respondents still provide the answers and upload the evidence. That's by design: no AI can replace your team's knowledge of your own environment.
Create
Select a framework. AI generates a tailored, risk-prioritized question set mapped to controls — ready to launch without any manual questionnaire building.
Assign
AI suggests routing based on role and domain. Questions go to your own team (self-assessment) or to a client-facing portal (auditor/assessor mode). No more emailing spreadsheets.
Govern
Track completion in real time. Send reminders. Reassign unanswered items. Escalate what is overdue. The platform manages the coordination — your team manages the answers.
Collect
Respondents answer questions and attach evidence directly in the platform. Human-in-the-loop by design — your people provide the answers; Sextant makes sure they actually do.
Audit
AI reviews responses for completeness and consistency as they arrive. Every response is timestamped and attributed — an unbroken audit trail from question to closure.
Report
AI-generated gap analysis, prioritized remediation plan, and board-ready narrative — compiled from structured response data. Not a static PDF that goes stale before it gets read.
What You Get
Platform Capabilities
Built from 9+ years of field assessments — every capability exists because we needed it on a real engagement.
Assessment Builder
Generate a structured question set from any framework — NIST CSF, SOC 2, HIPAA, ISO 27001, CISA, FedRAMP — pre-mapped to controls. AI-assisted generation tailors the question set to your industry and context. Launch a governed assessment in hours, not weeks.
Assignment & Governance
Route each question to the right respondent — internally to your own team, or externally to a client portal. Track completion, send reminders, reassign unanswered items, and escalate what's overdue — all within a governed workflow your auditors can see.
Evidence & Audit Trail
Respondents answer questions and attach supporting evidence directly in the platform — through internal workflows or client-facing portals. Every response is timestamped and attributed — creating an unbroken audit trail from question to closure.
Scoring & Reporting
Quantified readiness scores per framework domain, AI-powered gap analysis, prioritized remediation recommendations, and board-ready exports — generated from structured response data. Always current, always exportable.
Supported Frameworks
Any Framework. One Platform.
Sextant is framework-agnostic — custom frameworks can be loaded by the Blockstripe team
Included With Every Engagement
A Differentiator for Consulting Clients
Every Blockstripe consulting engagement includes Sextant access — at no additional cost. Assessment findings feed directly into the remediation roadmap, giving the engagement defined scope and your leadership quantified business justification.
Assessment → Scope
Gap findings map directly to remediation work packages — turning structured assessment output into actionable project scope with less consultant translation time.
Evidence → Budget Justification
Quantified risk scores, backed by the evidence your team provided, give leadership defensible numbers for cybersecurity investment conversations.
Roadmap → Follow-on Work
The remediation roadmap naturally sequences follow-on engagements — keeping programs progressing and clients ahead of their compliance calendar.
NexusGuard — Agentic AI Governance Platform
As Sextant solves the compliance assessment problem, NexusGuard will solve the AI governance problem — helping organizations rein in cost, security risk, and control gaps across LLM agents, Copilots, and AI-powered microservices. Currently in concept. Q4 2026 target.
Learn about our AI Governance consultingGet Early Access to Sextant™
Limited early access slots available for Q4 2026 launch. Partners, auditors, and Blockstripe consulting clients are first in line.