We co-authored the standards. Then we built on them.

Two decades of our founders' work lives inside the standards the cybersecurity industry meets every day. That heritage is why the Aesir Systems Automation Platform™ speaks the language of security evidence natively, and why AI built on it can cite its sources.

20-Year Pedigree

From the first machine-readable security content standards to an open evidence format for the AI era.
Early 2000s
The Machine-Readable Era Begins
Our founders contribute to XCCDF, OVAL, and SCAP — the first generation of standards that let machines, not just people, read security guidance.
2010s
Automation at Federal Scale
Work on the Risk Management Framework and the MITRE Security Automation Framework ecosystem turns standards into tooling used across government, including DoD Forge.mil, serving 40,000+ defense users.
Late 2010s
The Heimdall Data Format
One normalized format for security results, so that evidence from any scanner can be aggregated, compared, and consumed by machines, the missing piece between scan and decision.
2020s
OHDF Becomes an OASIS Standard
The Heimdall Data Format is standardized in the open as OHDF under OASIS, with our founders co-chairing the technical committee. Security evidence gets a vendor-neutral home.
2025
Aesir Systems
The Aesir Systems Automation Platform™ is built natively on the standard, the first platform whose knowledge, evidence, and AI all share one open evidence language.

The Heimdall Data Format (OHDF)

An OASIS standard our founders created is the common language of security evidence.
OASIS OHDF

Every security tool speaks its own dialect. Scanners, SCA tools, cloud posture tools, and manual assessments all produce results in incompatible formats so that every compliance program starts with a translation project, and most never finish it.

The Heimdall Data Format solves this once. Results from any tool are normalized into one machine-readable structure that preserves what matters, the requirement tested, the outcome, and the evidence. And the results stay traceable to its source. OHDF, its OASIS-standardized form, gives that format a vendor-neutral home that no single company controls, including us.

That neutrality is the point. A standard the whole industry can adopt is worth more than a proprietary format we could own because assurance evidence must outlive any one vendor's product decisions.

Open-Source Tooling

The libraries that get the world's tools speaking the standard.

The open-source HDF libraries of converters, parsers, validators, and schemas translate output from dozens of commercial and open-source security tools into the standard format. They are the onramp; any program can start normalizing its evidence today, no purchase is required.

We steward and contribute to this tooling because our platform is downstream of it. Aesir Systems Bifrost™ consumes standard evidence natively, and everything above it — analysis, posture, and AI — inherits that foundation. When the open tooling gets better, so does every assurance program using it, ours included.

Built on the Standard, from the Ground Up

See how the platform turns standard evidence into machine-speed assurance.
Explore the PlatformAI-Driven Software Assurance

Aesir Systems, the Aesir logo, and all related product names are trademarks of Aesir Systems, Inc. All other trademarks are the property of their respective owners. View our trademarks