Lockpath

Lockpath was a governance, risk management, and compliance software company headquartered in Overland Park, Kansas. Founded in 2010 by Chris Caldwell and Chris Goodwin, the company developed software intended to help organizations coordinate security, compliance, operational risk, and audit-related activities through a common platform. Its principal product was the Keylight Platform, which brought together configurable applications, workflow, reporting, regulatory content, and control information in a shared environment. The company initially positioned Keylight as a way to replace fragmented spreadsheets, point tools, and manually maintained compliance processes. Its first application, Compliance Manager, launched in October 2010 with a regulatory content and controls library integrated with the Unified Compliance Framework, together with workflow and reporting capabilities. Subsequent releases broadened the platform into a wider governance, risk, and compliance suite. Applications and functions covered threat and security management, vendor management, incident management, enterprise risk management, business continuity, audit preparation, vulnerability-related information, policy and procedure management, and internal control monitoring. Keylight’s development emphasized the correlation of security content and organizational controls. The platform’s Dynamic Content Framework supported the handling of changing regulatory, security, and risk information, while later versions added integrations, analytics, automated collection, and support for industry frameworks. The product also included capabilities for business-impact analysis, tabletop exercises, audit histories, historical reporting, syslog collection, and connectivity with on-premises or custom applications. In 2014, Lockpath received a United States patent related to the Dynamic Content Framework. Lockpath expanded beyond Keylight in 2018 with Blacklight, a platform focused on automating configuration assessment for servers and corporate devices. Blacklight used agent technology to evaluate systems against Center for Internet Security benchmarks and organization-specific benchmarks, helping identify configuration weaknesses associated with security exposure or compliance failures. In 2019, NAVEX Global acquired Lockpath. The acquisition placed Lockpath’s governance, risk, and compliance technology within the NAVEX portfolio. Public reference material identifies Lockpath primarily through its software products and acquisition history; it does not establish a separate current corporate operating structure or a continuing standalone brand status after the acquisition.

Lockpath was established in 2010 by Chris Caldwell and Chris Goodwin to develop governance, risk management, and compliance software. The company operated from Overland Park, Kansas, and focused on the practical problem of managing compliance obligations, security controls, operational risks, and audit evidence across increasingly complex organizations. Its initial product strategy centered on the Keylight Platform. Keylight launched in October 2010 with Compliance Manager, an application that combined a regulatory content and controls library integrated with the Unified Compliance Framework with workflow and reporting tools. Rather than treating compliance as a collection of isolated assessments, the platform was designed to connect policies, controls, responsibilities, evidence, and reports within a common interface. Later Keylight releases expanded the platform’s scope. Version 1.2 added Threat Manager and Vendor Manager. Version 2.0 introduced the Dynamic Content Framework and added Incident Manager and Risk Manager. Version 2.4 added Business Continuity Manager, including support for business-impact analyses, continuity planning, and tabletop exercises. Version 3.0 incorporated the HITRUST Common Security Framework, a control framework particularly relevant to healthcare organizations. In version 3.3, Audit Manager was introduced and Threat Manager was renamed Security Manager. Version 3.5 added hybrid-cloud delivery for Vendor Manager and an Anonymous Incident Portal. Version 4.0 added an Advanced Analytics Engine. Keylight 4.1 introduced the Keylight Ambassador, a hybrid connector intended to automate data collection from on-premises systems, custom applications, applications without conventional APIs, and ad hoc data sources. The release also added SAML and LDAP integration, bulk operations on records, historical-content reporting, and syslog data collection. These features extended Keylight from a repository and workflow system into a more connected platform for collecting and analyzing risk and security information. On October 28, 2014, Lockpath received U.S. Patent No. 8,874,621 for the Dynamic Content Framework. The patent was associated with the company’s effort to manage and correlate changing content relevant to governance, risk, compliance, and security activities. In 2018, Lockpath introduced Blacklight. Unlike the broader Keylight suite, Blacklight concentrated on automated configuration assessment. Its agent technology continuously assessed servers and corporate devices against Center for Internet Security benchmarks and custom benchmarks, allowing organizations to detect configuration issues that could contribute to breaches or noncompliance. NAVEX Global acquired Lockpath in 2019. The transaction ended Lockpath’s period as an independent company and added its technology to NAVEX Global’s governance, risk, and compliance portfolio. Available reference material does not provide enough information to determine the extent to which the Lockpath name, individual products, or former executive roles continued after the acquisition.

• 2019

  Acquisition by NAVEX Global

  [1]Lockpathen.wikipedia.org

  NAVEX Global acquired Lockpath and incorporated its technology into the NAVEX portfolio.

• 2018

  Blacklight launches

  [1]Lockpathen.wikipedia.org

  Lockpath introduced Blacklight for automated security-configuration assessment of servers and corporate devices.

• 2014

  Dynamic Content Framework patent granted

  [1]Lockpathen.wikipedia.org

  Lockpath received U.S. Patent No. 8,874,621 for the Dynamic Content Framework.

• 2010

  Lockpath is founded

  [1]Lockpathen.wikipedia.org

  Chris Caldwell and Chris Goodwin founded Lockpath to develop governance, risk management, and compliance software.

• 2010

  Keylight and Compliance Manager launch

  [1]Lockpathen.wikipedia.org

  Lockpath launched the Keylight Platform and its first application, Compliance Manager, in October.

Lockpath positioned its software as an integrated governance, risk, compliance, and information-security platform that gave organizations centralized visibility into controls, risks, incidents, vendors, vulnerabilities, continuity plans, and audit preparation.

• Governance, risk, compliance, and information-security software · 2010

  Keylight Platform

  Keylight was Lockpath’s principal software platform. It brought together compliance content, controls, workflows, reporting, risk management, incident management, security management, vendor management, business continuity, audit preparation, analytics, and related security information in a unified environment. Its successive releases added the Dynamic Content Framework, HITRUST CSF support, hybrid-cloud functionality, an anonymous incident portal, advanced analytics, identity and directory integrations, historical reporting, and syslog collection.

• Compliance management software · 2010

  Compliance Manager

  Compliance Manager was the first Keylight application, launched in October 2010. It provided a regulatory content and controls library integrated with the Unified Compliance Framework, along with workflow and reporting features intended to help organizations organize compliance activities and demonstrate the relationship between requirements and controls.

• Security configuration assessment software · 2018

  Blacklight Platform

  Blacklight was introduced in 2018 to automate configuration assessment for servers and corporate devices. Agent technology continuously evaluated systems against Center for Internet Security benchmarks and custom benchmarks, helping identify potentially risky misconfigurations and issues that could affect security or regulatory compliance.

• Data integration and collection connector · 2014

  Keylight Ambassador

  Keylight Ambassador was introduced with Keylight 4.1 as a hybrid connector for automating data collection. It was designed to connect on-premises applications, custom applications, systems without APIs, and sources containing ad hoc data, extending the platform’s ability to gather information used in governance, risk, compliance, and security workflows.

• 2019

  Acquisition by NAVEX GlobalM&A

  Background

  Lockpath had developed a portfolio spanning governance, risk, compliance, and information security software.

  Action taken

  NAVEX Global purchased Lockpath.

  Aftermath

  Lockpath’s technology became part of NAVEX Global’s portfolio, while available references do not establish the subsequent standalone status of the Lockpath brand.

  Source

• 2018

  Launch of BlacklightProduct launch

  Background

  Lockpath broadened its security offering beyond enterprise risk and compliance workflows to address continuous configuration assessment.

  Action taken

  The company launched Blacklight, using agents to assess servers and corporate devices against standard and custom configuration benchmarks.

  Aftermath

  Blacklight complemented the broader Keylight portfolio by focusing on technical configuration weaknesses associated with security and compliance risk.

  Source

• 2010

  Launch of the Keylight product familyProduct launch

  Background

  Lockpath entered the governance, risk, and compliance software market with a platform intended to unify regulatory content, controls, workflows, and reporting.

  Action taken

  The company launched Keylight and Compliance Manager in October 2010, then expanded the platform through additional specialized applications.

  Aftermath

  Keylight became Lockpath’s central product family and was subsequently extended into security, vendor, incident, risk, continuity, audit, and analytics use cases.

  Source

• 2019

  NAVEX Global acquires Lockpath[1]Lockpathen.wikipedia.org

  M&A

  NAVEX Global purchased Lockpath, bringing its governance, risk, compliance, and security software into the NAVEX portfolio.

• 2018

  Lockpath launches Blacklight[1]Lockpathen.wikipedia.org

  Product launch

  Lockpath introduced Blacklight to automate configuration assessment of servers and corporate devices against standard and custom benchmarks.

• 2014

  Lockpath receives a United States patent for the Dynamic Content Framework[1]Lockpathen.wikipedia.org

  Other

  The company received U.S. Patent No. 8,874,621 covering technology associated with its Dynamic Content Framework.

• 2010

  Lockpath launches the Keylight Platform and Compliance Manager[1]Lockpathen.wikipedia.org

  Product launch

  Lockpath introduced Keylight and its first application, Compliance Manager, combining compliance content, controls, workflows, and reporting.

1. 1Lockpathen.wikipedia.org