FEATURE
Everything you need to run a compliance program in one platform.
VLOZ isn’t a checklist tool. It’s a complete operating environment for your compliance program — from the first control you implement to the SSP an assessor signs off on.
Guided from day one
- Wizard Workflow A step-by-step roadmap through your entire compliance program. Every step shows what's required, who's responsible — you or the Brea Networks team — and links straight to the part of the platform where the work happens.
- Administrator Dashboard A live, high-level snapshot of your compliance campaign: readiness, control status, and inventory health, updated as your team does the work.
Company
Core organization data, points of contact, compliance level, and information system details referenced throughout your generated documentation
Locations & Location Checklists
Every facility in your compliance boundary, with structured physical security checklists covering visitor controls, door locks, access logs, CUI/ITAR signage, secure media storage, CCTV, alarms, and floor diagrams
Departments & Groups
Your real organizational structure, used to assign policies, SOPs, and training to the right people automatically
Contracts
Your active federal contracts and POs, including applicable clauses and CUI/ITAR designation
What MAT does for your tenant
VLOZ builds your SSP from records that reflect how your business actually runs — not a generic template.
Vendors & Subcontractors
A full supply-chain inventory, so flow-down obligations and information-handling relationships are documented, not assumed
Every asset, system, and account — accounted for
- User Accounts — a complete account inventory with privilege level, asset category, ownership, and source, synced or imported in bulk
- Assets — systems and devices tracked by category, type, model, OS version, and integration source, synchronized automatically where an integration is configured
- Software — a live software inventory, synced from integrations or imported
- Systems — every cloud service, network, and technology component in scope, documented with boundary, purpose, FedRAMP level, CUI/ITAR authorization, and identity & access controls
- Connections & Protocols — the authorized network paths in your environment, documented down to protocol, port, and service — feeding directly into your SSP's connections appendix
- Roles, RBAC Roles, Functions & Transactions — a full access model mapping who can do what, in which system, supporting least-privilege and separation-of-duties analysis your assessor will look for
- Services — the technical and business services running in your environment (identity, DNS, VPN, PKI, collaboration, and more), tied directly into your system documentation
Documentation that writes itself as you work
Policies & SOPs
Assigned automatically based on your compliance level and org structure. Your team reviews and acknowledges them in one place no chasing signatures over email.
Campaigns & Controls
Every control and assessment objective in your framework, with responses, evidence, supporting policies, and status tracked in one workspace not a spreadsheet.
Live Online System Security Plan (SSP)
Generated directly from your live environment data System Identification, Environments, Controls, and five full appendices covering connections/ports/services, ongoing monitoring, audit and logging, scoping and asset categorization, and compliance/security roles. Built for rigor. Built for scrutiny.
Automated Plan of Action & Milestones (POA&M)
Every gap tracked with owner, due date, funding, affected components, and status with full version history for traceability. Controls not passing automatically generate a POA&M.
Visibility when you need it
Dashboards and Reports Generate or schedule reports across your entire compliance program, exportable in the formats you need.
Download Center One place to exchange files with your compliance team and pull your generated SSP and other compliance documents — organized, searchable, and archivable.
Built to scale across your supply chain
Partner & Multi-Tenant Support Primes, MSPs, and resellers can administer multiple contractor tenants through a dedicated Partner Portal — with permission boundaries that keep each contractor’s environment properly separated while giving oversight where it’s needed
