How it works
See where you stand. Fix what matters first. Prove it.
CyberGrape connects to the tools you already use, shows you where you stand, helps you fix the biggest gaps first, and keeps the evidence that clients and insurers ask for.
See, fix, prove
People and platform, working together.
The platform does the reading, checking and tracking. Our people, led by a senior security leader, work through the results with you. Neither is much use alone.
Our people work on it with you, led by a senior security leader.
Your tools
The email, device and sign-in tools you already use.
The CyberGrape platform
Checks what it reads, ranks what matters, tracks every fix.
Proof you can hand over
Policies, reports and a proof pack for clients and insurers.
See where you standWe connect to the tools you already use and bring what they report into one picture of your gaps, risks and suppliers.How this works underneath
The platform reads your sign-in, device, email and backup settings, then checks them against the security measures that matter. Anything we cannot read yet is shown as not checked, so a gap is never hidden. Our people review the picture with you.
Fix what matters firstYou get a short, ranked list. Every item has a named owner, and our people help you finish it.How this works underneath
Fixes are tracked in the Action Hub from assigned to signed off. Policies are written, approved and kept current. Where you want extra help, our Protection service watches your devices and our senior security leaders advise on the plan.
Prove it to clients and insurersEvidence is gathered as the work happens, so you can hand over a proof pack when someone asks.How this works underneath
Settings, policies and reports are kept as dated evidence. For SMB1001, CyberGrape prepares and submits your evidence, and CyberCert issues the certificate. CyberGrape gives you evidence insurers ask for. It does not promise acceptance or a lower premium.
What to expect
Your first 30 days, and what comes after.
Timeframes depend on how many tools you connect and how much there is to fix.
Minutes
Once your tools are connected
You can see where you stand, with anything we could not read marked as not checked.
Weeks
The biggest gaps are fixed, each with a named owner, and your improvement plan is moving.
Months
Platinum and Diamond take months, because an outside assessor independently verifies your evidence.
What it connects to
What connects.
We start with the tools below, and bring what they report into your picture and your proof pack. You do not have to use all of them.
- CrowdStrike
Device protection status and detections.
- CyberCert
Your SMB1001 certification progress and certificate status.
- Keepit
Backup status and restore evidence.
- NinjaOne
Patch status and device inventory.
- Black Kite
Supplier risk ratings.
- Cloudflare
Website and network protection status.
- Proofpoint
Email threat statistics.
- Suped
Email protection data for your domains.
- Bitwarden
Password manager use and policy data.
Other tools we read from
- Microsoft Entra ID
- Microsoft 365
- Microsoft Defender
- Google Workspace
- uSecure
- Cisco Umbrella
Not every tool is connected for every business. What we cannot read is shown as not checked, never as passed.
Find out where you stand.
The free readiness assessment is the first step. If we are not the right fit, we will tell you that too.