For Cybersecurity consultant / vCISO · 8 Grok Bots

A security back office that keeps every client's risk register current and audit-ready

8 Grok Bots for a fractional CISO: scope each engagement, map controls to your target framework, draft policy, answer vendor questionnaires, track remediation, and build each client's posture snapshot — all as drafts you review.

Hire the team See the bots
● Drafts only — nothing sends without your approval · Uses only your own data
After checkout
Your setup link arrives by email
We set up your fleet
After checkout, Workplace AI provisions your fleet on our Cursor Teams workspace and follows up soon. Watch for your Cursor invite and Grok Bot download link — then accept, install, and go.
8 bots·3 domain specialists·Success metric: Finding freshness and framework coverage·Category: Tech & digital
The problem it targets

Running several client security programs at once by hand — re-reading each engagement scope, chasing evidence, re-mapping the same controls to SOC 2 / NIST / CIS for every client, writing policies from a blank page, retyping the same answers into every vendor security questionnaire, and rebuilding each client's risk register and board snapshot before every review — so findings go stale, framework gaps hide, policies drift, questionnaires eat days, and no two clients are reported the same way.

What you get

From day one

1

A structured scope record per engagement and an evidence-to-control map against SOC 2 / NIST / CIS, each control marked met, partial, or gap with the evidence behind it.

2

Security policies drafted from the client's real environment, and vendor questionnaire answers drafted from your own sourced answer library — every mismatch and unanswerable item flagged for you.

3

A risk register kept current — rating, owner, source, and remediation status per finding — and a one-page posture snapshot and roadmap with every number traced to its rows.

Meet the team

8 bots, each with one job and clear approval points

Read-only bots watch and prepare; drafting bots write but never send. You approve everything that leaves.

1

Chief of Staff

coach
Drafts for your review — you approve before anything leaves
Your morning brief, meeting prep, fleet roundup, and after-meeting coaching.
Approves: none — nothing leaves without you
2

Engagement & Scope Intake

intake
read-only
Watches & prepares — never sends
A structured scope record per client — systems in scope, target framework, constraints, evidence needed
Approves: none (nothing leaves; scope is internal)
3

Control-Framework Gap Analyst

researcher
read-only
Watches & prepares — never sends
Evidence-to-control map against SOC 2 / NIST / CIS with met / partial / gap status per control
Approves: none (nothing leaves; the map is internal)
4

Security Policy & Procedure Drafter

drafter
specialist
Drafts for your review — you approve before anything leaves
Policies and procedures drafted from the real environment, mismatches flagged
Approves: every policy before it is issued
5

Vendor Questionnaire Drafter

coordinator
Drafts for your review — you approve before anything leaves
Drafted questionnaire answers from the sourced answer library, unanswerable items flagged
Approves: every response before it is returned
6

Remediation & Risk-Register Tracker

tracker
specialist
Drafts for your review — you approve before anything leaves
The risk register — rating, owner, source, status, due date per finding; proposed updates
Approves: every rating and status change
7

Security Posture Reporter

reporter
read-only
Watches & prepares — never sends
The one-page posture snapshot and remediation roadmap, every number traced to its register rows
Approves: none (nothing leaves; the consultant presents)
8

Social & Referrals

growth
Drafts for your review — you approve before anything leaves
Draft posts and outreach to your own audience, credited and approved by you.
Approves: sends
The handoff — one shared chat
Intake→Analyst→Drafter→Drafter→Tracker→Reporter
What the fleet does in week one

All read-and-prepare — you check its work before anything is trusted

What it does not do

The guardrails are the product

  • ×It drafts; it does not act. No policy is issued, no questionnaire returned, and no risk rating changed without your review.
  • ×It never runs a scan, exploits a system, or changes a live client control — that stays your hands-on work with your own tools.
  • ×It never signs an attestation, accepts a risk, or exposes a client's security posture, and it records no unsourced claim as evidence.
Finding
freshness and framework coverage
How you'll know it's working

One number, measured over time

Share of open risk-register findings that carry a current rating, a named owner, and a cited source, and the share of the target framework's controls that have mapped evidence on file

Before day one

What you fill in — the bots never guess these

engagement-scope
the scope contract every bot reads so work stays inside the agreed boundary.
control-map
the target-framework control list and the evidence-mapping columns; the assessment is built here.
answer-library
your own sourced answers, keyed to controls; questionnaire responses come only from here.
Pricing

Cancel anytime.

Workplace AI provisions and runs your CrokPot fleet on our Cursor Teams workspace. We invite you on your own email — you accept, install Grok Bot, and we handle the rest.
$200/mo
  • Your whole fleet provisioned and installed for you
  • Cursor Teams seat included — paid by Workplace AI, never billed by Cursor
  • Onboarding + ongoing training
Hire the team
Your Cursor Teams seat is included and paid by Workplace AI. Drafts only, using your own data. No earnings, time-saved, or outcome guarantees are made.
How access works

You buy a CrokPot fleet from Workplace AI — not a Cursor plan

CrokPot runs on Workplace AI, Inc.’s (WAI) Cursor Teams workspace. WAI keeps the unpaid admin seat and pays Cursor for your seat. You join as the invited user on your real email and work through the installed Grok Bot fleet.

Your card is charged by WAI via Stripe for the CrokPot fleet ($200/mo, auto-renewing monthly) only — never by Cursor. If you cancel your fleet subscription, the invite/seat ends with it and is not portable to your own Cursor account.

FAQ

What you get, who owns the seat, and what happens after you pay

From the team behind Ancestry — CrokPot is built by Paul Allen, a co-founder of Ancestry.com.

Drafts only — you approve everythingYour own data, never shared$200/mo · cancel anytimeProvisioned & supported by Workplace AI

What do I actually get?

A pre-built fleet of Grok Bots for your trade, provisioned and installed for you on Workplace AI’s Cursor Teams workspace, plus onboarding and ongoing training. Every bot drafts; you approve.

Who owns the seat?

Workplace AI, Inc. (WAI) owns the Cursor Teams account and pays Cursor for your seat. You’re invited as a paid user on your own email. The seat isn’t portable to a personal Cursor account.

Do the bots act on their own?

No. The fleet is drafts-only, working from your own data. Nothing sends, files, or is trusted until you review and approve it — that’s the whole design.

Can I cancel?

Yes, anytime. It’s an auto-renewing monthly subscription at $200/mo. If you cancel, your invite/seat ends with the subscription.

What happens after I pay?

We follow up soon: our team provisions your fleet and invites you on the email you used at checkout. Watch for your Cursor Teams invite and Grok Bot download link, then accept, install, and go.

Training

New to Grok Bots? Get your team trained.

Live sessions and replays to get you and your coworkers productive with your fleet fast.

Explore Grok Bot training