What's Included
Everything you need for compliance, organized by business outcome. Every plan starts with full compliance coverage.
Available in editions for NY DFS, SOC 2, HIPAA, ISO 27001, and PCI DSS.
Compliance Coverage
The foundation of every Buffalo Sentinel plan. Full NY DFS 23 NYCRR 500 requirements tracking and audit readiness.
NY DFS Requirements Dashboard
Every section of 23 NYCRR 500 mapped, with an exemption and Class A classification wizard. See your compliance score, identify gaps, and get remediation guidance.
Evidence Vault
Evidence is collected automatically and mapped to NY DFS sections, with 30-day freshness tracking. Export an evidence package with SHA-256 hashes for your next audit or examination.
Policy Management
41 policy templates for NY DFS, SOC 2, HIPAA, and small-business programs, with an approval workflow and PDF export. Track acknowledgments from every employee.
Training Tracking
Assign, track, and report on security awareness training from a library of 36 courses with quizzes. Supports the annual training in NY DFS Section 500.14(a)(3).
Audit Log
Complete activity trail for every action taken in the platform, so you can show who did what and when.
Certification Deadlines
Track your April 15 annual certification or acknowledgment and both signatures, alongside your other NY DFS deadlines.
Security Practices
Built-in security tools that go beyond checkbox compliance. Run phishing tests, assess vendors, and track remediation.
Phishing Simulation
Run phishing campaigns from 26 realistic templates, with credential-harvest landing pages, department targeting, and scheduled start dates. Anyone who clicks lands on an education page.
Vendor Risk Assessments
Send vendors a secure questionnaire link, track a weighted risk score over time, and watch contract and BAA expiry dates. Supports NY DFS Section 500.11.
Vulnerability Tracking
Track vulnerability remediation across your environment. Prioritize by severity and compliance impact.
Risk Register
Identify, score, and track risks to your information systems. Supports NY DFS Section 500.09.
Incident Tracking
Log and track security incidents, with a 72-hour DFS notice clock from your determination, a DFS update log, and extortion-payment deadlines.
Security Training
36 text and scenario-based security awareness courses, each with a quiz. Assign courses and track completion.
Operations
Device oversight and endpoint management for teams that need visibility into their fleet.
Device Inventory
See every device in your organization. Track compliance status, OS versions, and security configurations.
Endpoint Security Agent
The Windows agent monitors BitLocker, TPM, antivirus, Windows Firewall, and missing updates. The Linux agent runs about 45 hardening checks.
Encryption Monitoring
Verify BitLocker status and method on every Windows drive, and disk encryption on Linux. Supports NY DFS Section 500.15.
Patch Approval Workflow
Review and approve patches before deployment. Track patch compliance across your fleet.
Drift Detection
Get alerted when device configurations drift from your compliance baseline.
Automation
Remote tools and premium integrations for teams that want hands-off compliance operations, with automated workflows coming soon.
Live Terminal
Run commands on remote Linux devices in real time, with file transfer and session recording. Windows support is coming soon.
Remote Desktop
Take remote control of devices through the MeshCentral integration.
Runbooks
Automated workflows for common remediation tasks. Coming soon.
Scheduled Scripts
Schedule scripts and maintenance tasks across your fleet. Coming soon.
Premium Integrations
SIEM, ticketing, and advanced provider integrations such as NinjaOne, SentinelOne, CrowdStrike, and ConnectWise Manage.
Integrations
Standard integrations are available on all plans: Microsoft 365 / Entra, Google Workspace, Okta, Duo, and basic endpoint security sync. Premium integrations (SIEM, ticketing such as ConnectWise Manage, and advanced providers) are included with Premium Automation or available as an add-on.