Quick Start
This guide walks a new REAEGIS tenant through creating a program, connecting a repository, and running a first evaluation.
Create your account
Go to app.reaegis.com (opens in a new tab) and sign in with your organization email. If you do not have an account, request access from your REAEGIS administrator or use the demo request at reaegis.com (opens in a new tab).
Create your first program
From the dashboard, click New Program.
Select your authorization framework:
| Framework | Use when |
|---|---|
| FedRAMP Moderate | Your system will process federal data in a cloud environment |
| CMMC Level 2 | You handle CUI under a DoD contract |
| NIST 800-53 Rev 5 | You are building a general federal information system |
Enter your system name, description, and system boundary. This defines the scope of what REAEGIS will evaluate.
Connect your repository
Navigate to Settings → Integrations → Source Control.
REAEGIS supports GitHub, Azure DevOps, GitLab, and Bitbucket.
For GitHub:
- Click Connect GitHub
- Install the REAEGIS GitHub App on your organization
- Select the repositories in scope for this program
- REAEGIS begins listening for push events immediately
For other SCM providers, see the Integrations section.
Run your first evaluation
REAEGIS evaluates automatically on every push. To trigger a manual evaluation:
- Navigate to your program
- Click Evaluate now
- Select the branch to evaluate
- REAEGIS runs all 9 RAMPART gates against the selected commit
Evaluation typically completes in 3–8 minutes depending on repository size, scanner availability, and the number of findings requiring analysis.
Review your findings
After evaluation completes:
- Findings tab: Every gate failure with severity, NIST control mapping, and remediation status
- Gates tab: Pass/Fail/Warn status for each of the 9 RAMPART gates
- Evidence tab: Raw scanner output, signed by CHRONICLE
Findings with severity CRITICAL or HIGH require remediation before the program can reach a compliant posture.
Review your compliance posture
The Overview page shows:
- Posture score (0–100%)
- Control family coverage across all NIST control families
- ATO readiness ring (10-factor score)
- SPRS score if CMMC framework is selected
The first evaluation establishes your baseline. Subsequent evaluations track delta — only new or changed findings are highlighted. Your posture score updates in real time as findings are remediated.