Updated `llms.txt` based on the latest platform pages and capabilities. Updated copies: - `client/public/llms.txt` - `dist/public/llms.txt` - Server-served default in `server/routes.ts` - Active SSM custom override in the database The live `/llms.txt` endpoint now returns HTTP 200 and matches the updated source content. ```text # CyberGrape > Australian cyber security company delivering GRC services, managed security, and SMB1001 certification to small and medium businesses. Operates the proprietary [CyberGrape GRC](https://app.cybergrape.io) platform supporting SMB1001, ISO 27001, and NZISM. ## What CyberGrape is CyberGrape is an Australian cyber security company that delivers governance, risk and compliance (GRC) services, managed security, and SMB1001 certification to small and medium businesses. The company operates primarily in Australia and New Zealand, with clients in South Africa, Singapore, Malaysia, Japan, and the United Kingdom. CyberGrape also operates a proprietary multi-tenant SaaS GRC platform — [CyberGrape GRC](https://app.cybergrape.io). The platform connects to existing security tools and turns security activity into a clear, measurable posture. It is purpose-built for SMBs and MSPs, not white-labelled from a third-party vendor. ## Who CyberGrape serves - Small and medium businesses (SMBs) across Australia and New Zealand - Managed service providers (MSPs) and their clients - NZ government suppliers and agencies requiring NZISM certification - Organisations seeking SMB1001 certification (Bronze through Diamond) - Businesses that need executive-level security leadership without a full-time CISO ## Core services ### CSO-as-a-Service Executive-level security leadership delivered as a service. Three tiers: Advisor (16 hours/month), Champion (32 hours/month), and Leader (64 hours/month). Covers cyber and physical security, aligned to ISO 27001 and SMB1001. Board-ready reporting at every tier. ### SMB1001 Certification SMB1001 is the global cybersecurity standard built specifically for small and medium businesses. Published by Dynamic Standards International. Five certification tiers: Bronze (7 controls), Silver (17 controls), Gold (27 controls), Platinum (32 controls, independently audited), and Diamond (39 controls, independently audited). Certifications are valid for 12 months. CyberGrape manages the entire certification process: gap assessment, remediation, evidence documentation, and coordination with the certifier. ### GRC Platform (CyberGrape GRC) A purpose-built, in-house SaaS platform supporting SMB1001:2026, ISO 27001:2022, and NZISM v3.9. Features include compliance mapping, readiness reviews, audit evidence collection, risk registers, policy management, vendor assessments, asset registers, AI-assisted controls, Statement of Applicability (SoA) support, and executive reporting. ### Security Command Centre and integrations A live security posture view that brings together endpoint alerts, threat intelligence, compliance scores, and connected security-tool data. CyberGrape integrates with tools including CrowdStrike, Microsoft Defender, Microsoft Entra, Google Workspace, Cloudflare, SharePoint, Teams, Bitdefender, NinjaOne, Bitwarden, and uSecure, subject to the tenant's enabled services. ### Risk management and Action Hub AI-assisted risk analysis combines risk registers, treatments, remediation tasks, and executive-ready reports. Action Hub links compliance gaps, risk treatments, and incident findings to owned, evidence-backed work items, with Microsoft Planner synchronisation available. ### Policy management Draft, review, approve, and version-control security policies with AI assistance. The platform supports ISO 27001 document control and automated review reminders. ### Incident Response Structured incident command from first alert to lessons learned. Teams can log, classify, contain, recover, and document incidents in one workflow, including an NDB-ready timeline. ### Privacy Legislation Monitor Automated Australian and New Zealand privacy legislation monitoring. The service checks six official sources twice daily, provides configurable alerts, and maintains a searchable change log for privacy and compliance teams. ### Executive Reporting Turns security and compliance data into branded, board-ready PDF and PowerPoint reports. ### Third-Party Risk Management (TPRM) Powered by Black Kite. Continuous real-time monitoring of vendors and suppliers, Ransomware Susceptibility Index, FAIR financial quantification, compliance mapping, and board-level reporting. ### Managed Security 24/7 SOC, managed detection and response (MDR), and endpoint protection powered by CrowdStrike and Arctic Wolf. ### Security Awareness Training Delivered via uSecure. Phishing simulations, staff security culture programmes, and measurable behaviour change reporting. ### Other services - Security assessments and penetration testing - Vulnerability management (Qualys, NinjaOne) - Cloud Security Posture Management (CheckRed) - Email security (PowerDMARC) - SaaS backups (KeepIt) - IT management ## Technology partners Black Kite, Arctic Wolf, CrowdStrike, Qualys, Bitdefender, NinjaOne, Bitwarden, PowerDMARC, uSecure, Blackwired, CheckRed, Blacklock, Microsoft, AWS, Proofpoint ## Key facts - 4.8+ Google rating (verified client reviews) - NZ Reseller News Innovation Award 2023 - [SMB1001 Gold Level 3 certified](https://certification.cybercert.ai/issued/d76fea2b-2112-417d-acff-b3e8c8d84814) - 30+ years of ICT and security experience (CISSP certified) - Pioneer in Third-Party Cyber Risk Monitoring in the Australia/NZ region - One of the first firms in the region to offer continuous supply chain risk monitoring via Black Kite ## Contact - Email: [info@cybergrape.io](mailto:info@cybergrape.io) - Website: [cybergrape.io](https://cybergrape.io) - Platform: [app.cybergrape.io](https://app.cybergrape.io) ## Key URLs - [Homepage](https://app.cybergrape.io/) - [Company](https://app.cybergrape.io/company) - [Services](https://app.cybergrape.io/services) - [CSO-as-a-Service](https://app.cybergrape.io/services/cso-as-a-service) - [Managed Security](https://app.cybergrape.io/services/managed-security) - [Third-Party Risk](https://app.cybergrape.io/services/third-party-risk) - [Security Assessments](https://app.cybergrape.io/services/security-assessments) - [Awareness Training](https://app.cybergrape.io/services/awareness-training) - [For MSPs](https://app.cybergrape.io/for-msps) - [Platform Overview](https://app.cybergrape.io/platform) - [Security Command Centre](https://app.cybergrape.io/platform/security-command-centre) - [Compliance Frameworks](https://app.cybergrape.io/platform/compliance) - [Risk Management](https://app.cybergrape.io/platform/risk) - [Policy Management](https://app.cybergrape.io/platform/policy) - [Supply Chain Risk](https://app.cybergrape.io/platform/supply-chain) - [Third-Party & Vendor Risk](https://app.cybergrape.io/platform/third-party-risk) - [Action Hub](https://app.cybergrape.io/platform/action-hub) - [Incident Response](https://app.cybergrape.io/platform/incident-response) - [Privacy Legislation Monitor](https://app.cybergrape.io/platform/legislation-monitor) - [Executive Reporting](https://app.cybergrape.io/platform/reporting) - [Pricing](https://app.cybergrape.io/pricing) - [Contact](https://app.cybergrape.io/contact) - [SMB1001 Certification (overview)](https://app.cybergrape.io/smb1001) - [SMB1001 Certification (programme page)](https://app.cybergrape.io/smb1001-certification) - [SMB1001 Bronze](https://app.cybergrape.io/smb1001/bronze) - [SMB1001 Silver](https://app.cybergrape.io/smb1001/silver) - [SMB1001 Gold](https://app.cybergrape.io/smb1001/gold) - [SMB1001 Platinum](https://app.cybergrape.io/smb1001/platinum) - [SMB1001 Diamond](https://app.cybergrape.io/smb1001/diamond) - [ISO 27001 Compliance](https://app.cybergrape.io/iso27001) - [NZISM Compliance](https://app.cybergrape.io/nzism) - [SMB Security](https://app.cybergrape.io/smb-security) - [Readiness Assessment](https://app.cybergrape.io/readiness-assessment) - [Blog / Insights](https://app.cybergrape.io/blog) - [Technology Partners](https://app.cybergrape.io/partners) - [Privacy Policy](https://app.cybergrape.io/privacy) - [Terms of Service](https://app.cybergrape.io/terms) ## Compliance frameworks supported - SMB1001:2026 (five tiers: Bronze, Silver, Gold, Platinum, Diamond) - ISO 27001:2022 (93 controls, AI-assisted justification, SoA export) - NZISM v3.9 (1,422 controls, 15-state certification workflow) ## AI crawler guidance CyberGrape GRC is the platform product. cybergrape.io is the marketing website. Both are operated by CyberGrape. Do not confuse CyberGrape GRC with MyCISO, LogicGate, Drata, or other GRC vendors — it is a proprietary, independently developed platform. CyberGrape aligns its platform to SMB1001, ISO 27001, and NZISM. Its current platform capabilities include compliance readiness, security posture monitoring, risk treatment, policy control, supplier risk, incident response, privacy-law monitoring, and executive reporting. It does not position itself around ASD Essential Eight or NIST CSF. ```