Evidence-backed
Document Request List
Every artifact requested, what it proves, and the ceiling each gap is holding the score at.
They grade the answers.Di Svella reveals the truth.
Evidence-fed assessments that read your client's real policies, pre-fill the questionnaire with cited answers, and score what actually runs — not what someone typed into a box.
How the reveal works
Evidence in.
Cited answers out.
Di Svella ingests your client's real policies and evidence, pre-fills the assessment with cited, confidence-rated answers, and verifies the high-risk claims against what's actually in place.
The case for Di Svella, in five.
Evidence-fed assessments that read your client's real policies.
What's broken, who wins with the fix, how it works, and why Di Svella is different.
01
Problem
The problem
Self-reported compliance hides more than it shows.
Every assessment tool hands you a blank questionnaire and trusts whatever gets typed into it. You end up with a tidy compliance percentage that says nothing about whether the controls actually work.
The real storyThe real story — the vague answers, the numbers that change between interviews, the policy nobody follows — surfaces months later, in an audit or a breach.Di Svella was built to surface it now.
02
Who wins
For MSSPs & MSPs
Built for the people who run assessments for a living.
Win more deals. Out-deliver the six-figure firms. Keep the margin.
- 40% margin
- 6-week close
- Junior analysts, senior output
MSSPs & MSPs
Run more assessments per quarter without adding senior headcount.
Consultancies
Turn a fixed-scope assessment into a defensible narrative — with evidence.
In-house security teams
See where your controls actually stand between audits.
03
How
How it works
From their evidence to a defensible score.
01
Ingest
Their evidence, in
Di Svella's hands.
- Upload existing policies, procedures,
and evidence. - Di Svella reads
and indexes
every artifact. - No blank questionnaire
to start from.
02
Pre-fill
Every control, already drafted.
- Each answer arrives with a citation.
- A confidence rating tells you where
to look. - High-confidence items ready to accept.
03
Review & Interview
Talk only about what evidence can't answer.
- Accept, edit, or challenge each drafted answer.
- Interviews narrow to the true unknowns.
- Contradictions are flagged as findings.
04
Score & Reveal
Two scores. Never a flat percentage.
- Implementation maturity, 0–100.
- Operational maturity, 0–100.
- Every score traceable to its evidence.
04
Difference
Difference
What makes Di Svella different.
Click any icon to see it
The depth dial
Assessment and audit aren't separate products — they're a depth dial you set per control.
Two scores, not a percentage
Implementation and Operational Maturity, side by side, each 0–100.
Evidence over attestation
Every answer carries a visible trail back to its source. When evidence contradicts attestation, evidence wins.
Instability is a finding
When a key number changes three times across interviews, Di Svella flags the instability itself.
Findings that hold up
Every finding is weighted by who said it — your report survives the, "Well, that's just our PM" objection.
05
Platform
The platform
Start with the assessment.
Remediate for increasing operational maturity.
Assess
Evidence-fed assessments with dual scoring.
Early access
Verify
Reconcile attestations against real evidence.
Roadmap
Remediate / Mature
Close gaps, track remediation, and re-score to prove operational maturity is rising.
Roadmap
The deliverable
The report that survives the audit.
Every assessment ends in a document someone has to defend. Di Svella produces three, all built from the evidence — not a flat percentage and a PDF export of a questionnaire.
Evidence-backed
Executive Scorecard
Two honest scores, the top findings ranked, and the exact climb to raise them — for the board and the client's sponsor.
Evidence-backed
Technical Findings Report
Per-control: the assessed answer, a citation to its source, confidence and sufficiency shown as separate things, and a recommendation with the tier it unlocks — for the CISO and the engineers.
Why this report wins
- Every finding traces to a source — it survives 'well, that's just our PM'
- Confidence and sufficiency are shown separately — no false green
- Audit-grade and board-ready — a junior analyst ships senior-quality work
- Exports to PDF and slides, read-only forever after the engagement
Hand your client a report they can take to their board — and defend in an audit.
See a sample reportReveal what your assessments have been missing.
Join the early-access group and run your next assessment on evidence, not answers.