It checks your security setup for gaps. GapCheck reads the posture of the tools you already run and hands you the ranked list of what's missing — and what drifted.
The tools you already run — endpoint, identity, cloud — export their posture: which controls are on, which are not.
Every export is normalized into a single view of your controls: what each tool actually enforces, side by side.
The gaps come back prioritized, each with its explanation — the control, the evidence, and why it matters — a queue your team works top-down.
Re-runs compare against the signed baseline snapshot: new, resolved, and persistent gaps are reported, so posture can't quietly slide.
A sample posture set goes in; a ranked gap list and a drift report come out.
MFA not enforced on 2 admin roles
The identity export shows admin roles without an MFA policy — the highest-leverage gap in the set: one phished password away from full control.
Audit logging off on a data bucket
The cloud export shows a bucket holding regulated data with access logging disabled — anything that happens there leaves no trail.
Drift vs the signed baseline — new 2 · resolved 3 · persistent 5 — every change since the last run, named
Baseline signed — the snapshot drift is measured against is itself signed — posture history can't be rewritten
Queue updated — resolved gaps close with their evidence; persistent gaps keep their rank and their reasons
Per posture run