Know Your Risk.
Protect What
Matters.

Real-time alerting across a vast range of data sources. Flags when monitored data contains staff email addresses so you can act fast. Raw alert data included.

Nightly scans to identify vulnerabilities and open ports across public-facing assets. Clear information to help you decide what needs addressing and when.

80+ controls across 3 levels and 7 categories — with practical guidance at every step. Set a target score for your organisation and build a roadmap to reach it.

Start from a curated library of 40 cyber risks or create your own. Assign owners, set due dates, receive reminders, and maintain a full audit trail.

Nightly monitoring of SPF, DKIM, DMARC and MTA-STS records across all your email domains. Stops spoofing and flags configuration gaps with plain-English guidance.

View key security metrics across every website you run — from SSL certificate health through to common misconfigurations that need addressing.

Practical guidance across all CE controls in plain English. Use AskIT to get tailored wording for gathering the evidence or answers you need from your IT team or provider.

AI-powered review of your existing policies. Downloadable templates. A full policy register to track what you have, who owns it, and when it's due for review.

Automated monthly PDF reports covering all key metrics. Add report-only users — trustees, board members, senior leadership — who receive reports without needing platform access.

Connect your M365 tenant and track your Secure Score over time. See your 90-day trend, compare against Microsoft's benchmark, and include it in your executive reports.

Compare your CMI, Secure Score and CE status against organisations in your sector, of a similar size, or across the whole platform. Fully anonymised.

Guidance and tracking for major compliance frameworks on a control-by-control basis — including DfE Digital Standards, NIS2 and CIS Controls.

Log key details for every supplier — certifications, DPA status, access levels, criticality and review dates. Know who has access to your data and when you last checked.

Record security incidents and keep a timestamped audit log of everything that happened and what was done about it.

A built-in library of 25 BC scenarios with expert guidance for running each one. Log tests, record outcomes, and track identified gaps through to resolution.

Record critical data about your assets including criticality, owner, version and review frequency. Track which applications are missing MFA at a glance.