SaaS Quickstart

This guide walks you from sign-up to your first signed-off evidence entry in the Ankos web app. For the free CLI-only path, see the CLI quickstart.

1. Sign up

Go to app.ankos.dev/auth/register and create an account. You'll land on the onboarding wizard immediately after sign-in.

2. Answer five questions

The onboarding wizard asks about your payment flow, where your infrastructure runs, your target assessment date, and two owner emails. Ankos uses your answers to scope the ledger for your specific company.

Expected time: about 2 minutes. You can skip any question and adjust later.

See The Onboarding Wizard for what each answer changes.

3. Review your cycle

After the wizard, you'll land on your completion screen showing:

• In-scope entries — the requirements you need to provide evidence for
• N/A entries — items automatically scoped out based on your answers, with a justification attached
• Assigned entries — ledger items pre-assigned to the owners you named
• Top 3 priorities — personalized starting points based on your urgency and infrastructure

From here, click through to the ledger.

4. Collect evidence

You have three sources of evidence:

• Automated scan — install the CLI and run ankos scan --upload to auto-populate evidence for ~48% of entries (IAM, KMS, CloudTrail, VPC, and more).
• Manual upload — open any entry and drag in a PDF, screenshot, or document. Every entry includes plain-English guidance on what the QSA expects.
• Carry-forward — if this isn't your first cycle, eligible evidence from the previous cycle can be carried forward with an attestation.

See Evidence sources for details.

5. Sign off

Once an entry has evidence attached, the assigned reviewer signs it off. Sign-off is the readiness gate — it's how the dashboard knows the entry is ready for QSA review. Evidence state describes where the evidence came from; sign-off describes whether someone has reviewed it.

See Sign-off.

6. Export for your QSA

When your dashboard shows enough entries signed off for your cycle, click Export Evidence Package from the cycle detail page. Ankos generates a ZIP with:

• A summary PDF
• Evidence files organized by the 31 DRL categories
• Standard QSA file naming
• Integrity manifest

Hand this to your QSA. The final compliance determination is made by them.

Next steps