Reveals the operational truth.
Vigil is StandFast's observation engine — the part of the platform that never looks away. It collects attributable signals across your environment, correlates what it sees, and reveals when the operating state no longer matches the approved state. Vigil does not change your systems; it makes their condition visible.
Telemetry, logging, SIEM, and behavioral analytics surface anomalies, drift, and indicators of compromise — configuration changes, unauthorized access attempts, policy deviations.
Vulnerability and posture scanning examine the environment as it is — without making configuration changes — so drift and potential gaps can be surfaced as they appear.
Every observation carries its provenance: what was seen, where, and when. Truth you can trace.
When the monitored environment stops matching its governed state, Vigil surfaces the difference and hands that observation to the engine responsible for the next move.
Vigil is one engine, not the whole platform. It stays in the observation lane — and that discipline is exactly what makes its signal trustworthy.
Vigil's observations are offered to GRITS as typed, traceable candidate evidence. An authorized practitioner determines what each observation means; GRITS preserves that determination and keeps the governed record current.
When Vigil reveals drift or a vulnerability, YellowRose turns the approved finding into governed, verified restoration. Vigil sees; YellowRose acts.
Vigil is the seeing. StandFast is the watch that holds. Continuous assurance is the sum — not any one engine.
Vigil sees. YellowRose restores. GRITS preserves the record. StandFast holds the watch.
Vigil carries forward an old discipline: observe carefully, read what changed, and tell the truth about what the ground reveals. The Guardians honor the Texas histories behind that discipline.
