← Back to drnolyn.com
Built by Dr. Nolyn Johnson · vCISO · Cybersecurity Executive

I built the platform
I wished I had.

After years as a vCISO managing vendor reviews with spreadsheets, gut-feel, and prayer — I built the tool that should have always existed.

Diliventa™ — Vendor Security Assurance · AI-Powered · Human-Signed

Diliventa™ is the intelligent GRC and vendor security assurance platform built by a working vCISO for organizations that need defensible vendor decisions — fast, consistent, and audit-ready.

60+
Security Controls
16
Auto-Deny Triggers
15
Frameworks Mapped
7
Steps to Verdict
NIST CSF 2.0 ISO 27001 SOC 2 HIPAA GDPR PCI DSS 4.0 NIST 800-53 CMMC CIS Controls v8 EU AI Act NIST AI RMF
The Problem I Solved
"Vendor security reviews used to mean weeks of spreadsheets, inconsistent scoring, and gut-feel decisions that nobody could defend in an audit. I built Diliventa to fix that — permanently."
— Dr. Nolyn Johnson, Founder & vCISO
📊
Spreadsheet Chaos
30-tab Excel workbooks that nobody updates, scores that can't be explained, and reviews that take two weeks when they should take two hours.
🎲
Inconsistent Scoring
Every reviewer scores differently. No standardized framework. No deny triggers. The same vendor gets approved by one team and rejected by another.
🤷
Gut-Feel Decisions
Vendor approved because the sales rep was persuasive. No documented justification. No evidence log. Completely indefensible when the auditor asks.
Weeks of Delay
Business is waiting. Legal is waiting. The vendor is waiting. And your security team is still manually reviewing a 40-page SOC 2 report line by line.
What Diliventa™ Does

Three capabilities that change
everything about vendor review.

Not another compliance checklist. A structured, AI-assisted, human-signed workflow that produces defensible vendor determinations every time.

🤖
AI-Powered Analysis
Upload SOC 2 reports, pen tests, ISO certificates, and privacy policies. Claude AI reads every page and returns structured findings in seconds — not days.
  • Evidence adequacy scoring
  • Framework alignment mapping
  • Risk identification & summary
  • Preliminary verdict recommendation
  • Offline triage scan for fast pre-screening
🚫
Automated Deny Triggers
16 critical failure conditions that instantly produce a DENIED verdict — no matter the score, no matter who's reviewing. Non-negotiable security baselines enforced automatically.
  • No MFA on admin accounts
  • Expired SOC 2 or ISO certificate
  • Unpatched critical CVE (CVSS ≥ 9.0)
  • No incident response plan
  • No DPA for data processors
📋
Board-Ready Reports
One click. Immutable, signed PDF with verdict, scores, AI summary, evidence log, control gaps, and priority recommendations — ready for board, auditors, or regulators.
  • Cryptographically signed determinations
  • Override justification documentation
  • Residual risk acceptance logging
  • Immutable audit trail export
  • SIEM-ready TSV log output
For vCISO Retainer Clients
Included with every retainer

Every active vCISO client gets
Diliventa™ Professional — included.

When you engage Dr. Nolyn Johnson LLC on a vCISO retainer, your organization receives a full Diliventa™ Professional license at no additional charge. Your team gets the platform. You get my expertise. Together, you get a vendor security program that's actually defensible.

Essentials Retainer ✓ Professional Retainer ✓ Executive Retainer ✓
Included Free
Diliventa™
Professional License
$149/mo value
Explore vCISO Packages →
Pricing

Simple, transparent
pricing.

7-day free trial. No credit card required. Cancel anytime. Full pricing and feature comparison at diliventa.io.

Starter
$49
per month · cancel anytime
  • Up to 5 vendor assessments/mo
  • 2 users
  • Auto deny trigger engine
  • Basic scoring & posture report
  • GRC: controls, risks, findings
  • Document triage scan
Get Started
Most Popular · Included w/ vCISO
Professional
$149
per month · cancel anytime
  • Unlimited vendor assessments
  • 5 users
  • AI deep analysis (Claude AI)
  • Document upload & evidence scan
  • Human sign-off & override logging
  • Immutable signed board report
  • Full GRC suite + audit module
Start Free Trial
Enterprise
$499
per month · cancel anytime
  • Everything in Professional
  • 15 users + RBAC
  • SSO / SAML
  • Priority support SLA (24-hr)
  • SIEM integration & TSV export
  • Multi-tenant isolation
View Full Details

7-day free trial · No credit card required · Full details at diliventa.io

Ready to replace spreadsheets with assurance?

Try it free.
Seven days. No card.

Join security teams who've moved from guesswork to defensible, audit-ready vendor determinations — powered by AI, signed by humans.

Built by Dr. Nolyn Johnson LLC · drnolyn.com · 1-844-DRNOLYN