Readmodel's answer

SMBs and mid-market organisations (1–250 employees) in the EU that need to document their data processing for GDPR compliance — particularly IT managers, privacy officers, and consultants who are responsible for data protection but don't have a dedicated privacy team or enterprise budget. Also DPOs managing multiple clients or business units.

CGPulse's answer:

Small and mid-size DevOps and platform teams, typically 10 to 200 people, running production workloads on Azure and AWS. Often they're preparing for their first SOC 2 or ISO 27001 audit, or their first customer security review. Many have tried open-source scanners (Prowler, ScoutSuite) and found the detection useful but the workflow missing. Others have been quoted by enterprise CSPM and found it outside their budget. CGPulse is built for the gap between those two.

Readmodel's answer

Readmodel® combines data flow mapping, automated risk scoring, and ROPA generation in a single tool — built specifically for GDPR. Unlike enterprise platforms that require months of implementation, Readmodel® is operational within an hour. It maps which systems process what data, who has access, under what legal basis, and for how long — then calculates risk scores automatically and flags documentation gaps. It includes AI-powered analysis reports, breach and DSAR registers, access review campaigns, device security assessments, and backup compliance checking. Everything is EU-hosted, and there's a free tier with no time limit.

CGPulse's answer:

Three things. First, an MCP server. Claude or any MCP client can run compliance scans, read findings, and trigger auto-remediation through natural language. No other CSPM ships this. Second, public self-serve pricing (€99/€299/month, Stripe checkout, no demo required) in a category where the norm is six-figure enterprise contracts. Third, every finding ships with Terraform and Bicep templates so teams apply fixes through their own change management, not a vendor UI.

Readmodel's answer

Most GDPR tools are either enterprise platforms priced for large organisations (OneTrust, Vanta) or basic ROPA generators. Readmodel® sits in between: it offers deep GDPR coverage — data mapping, risk scoring, DPIA documentation, breach register, DSAR tracker, access reviews, LIA, training log, NIS2 support — at a price point accessible to SMBs (free to EUR 499/month). The ROPA is generated automatically from your data map, not maintained separately. Risk scores are computed on-the-fly, not self-assessed. And it includes 200+ service templates so you're not starting from scratch.

CGPulse's answer:

Price and speed to value. Wiz, Prisma Cloud, Orca typically start at $50k/year with six-week rollouts and sales gatekeepers. CGPulse is €99 to €299 per month with public pricing and a 60-second self-serve onboarding. You get 621 policy rules across 19 compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, CIS v8), the same category coverage, without enterprise overhead. For teams preparing their first audit, that's the difference between starting this quarter or next year.

Readmodel's answer

PHP and MariaDB

CGPulse's answer:

.NET 10 with Blazor Server for the portal. Azure Cosmos DB for tenant and scan data, Azure App Service plus Azure Functions for the backend, Azure Service Bus for scan orchestration. Cloud scanning uses the Azure ARM SDK and AWS SDK directly. No agents, no proxies. Stripe for subscription billing. MCP server built on the ModelContextProtocol.AspNetCore library. Hosted entirely in Azure North Europe with per-tenant Cosmos partition keys.

Readmodel's answer

Your digital infrastructure is the backbone of your business. Every service, every data flow, every access point matters. We built Readmodel® to help organisations become more digitally reliable and resilient — not just compliant on paper, but genuinely in control of their data landscape.

Readmodel® maps what you have, scores where the risks are, and tracks your progress as you improve. Because protecting your business and your clients starts with knowing what you have.

CGPulse's answer:

It started a year ago with a simple wish: one clear view of what was actually running across my Azure and AWS accounts. Not console-hopping, a real map. Once the map was working, the obvious next layer was security. Not "here's a VM" but "here's a VM and here's what's wrong with it".

What I kept wishing for was honest answers with honest fixes. Not a red light on a dashboard, but guidance you can act on. Real automation where it's safe, and clear "do this, then this" steps where it isn't.

So a small scanner became a rule engine. Rules became compliance frameworks. Findings grew actual Terraform, Bicep, and CLI you can run. Then AWS support landed on top.

CGPulse today is a multi-cloud governance platform built around three promises: Connect, Govern, Protect. Connect your Azure and AWS accounts and see every resource in one view. Govern with 621 policy rules across 19 compliance frameworks. Protect with auto-remediation where it's safe and IaC export where the change needs human review.