The platform
See where you stand. Fix what matters first. Prove it.
The CyberGrape platform connects to the security tools you already use, shows you where you stand, tracks the fixes and keeps the proof your clients and insurers ask for.
The problem
Security is spread across too many places.
You cannot see it all
Devices, email, backup and sign-in are each managed in a different tool, and nobody sees them together.
Fixes are not tracked
Gaps are found, agreed and forgotten, because no one owns the list.
Proof is a scramble
When a client or insurer asks, evidence has to be gathered from scratch.
What changes
Three jobs, in one place.
See
Know where you stand. Your tools report into one picture, with gaps, risks and suppliers ranked.
Fix
Do what matters first. Every fix has an owner, policies stay current and incidents have a plan.
Prove
Show clients and insurers. Evidence is gathered as the work happens, so proof is ready when asked.
How it works
How it works.
Short answer first. The technical detail is underneath each step.
Connect the tools you already useYou keep your tools. The platform reads what they report.How this works underneath
Connections use the access each provider offers. The platform reads status and findings, shows anything it cannot read as not checked, and does not replace your tools.Work from one ranked listGaps, risks and supplier findings become tracked actions.How this works underneath
Findings from your tools and your own assessments become tasks in the Action Hub, each with an owner, a priority and a date.Keep proof as you goEvidence is dated and stored with the work.How this works underneath
Settings, policies, reports and completed tasks are kept as dated evidence. For SMB1001, CyberGrape prepares and submits the evidence, and CyberCert issues the certificate.
What it connects to
Works with the tools you already use.
Featured partners come first. The platform also connects to Microsoft 365, usecure, PowerDMARC and CheckRed.
A small example
What this can look like.
- See
- The command centre shows two devices without protection and one supplier whose rating has slipped.
- Fix
- Both become tasks with owners and dates. The supplier gets a scorecard.
- Prove
- By Friday the devices are fixed and the evidence is kept for the next proof pack.
- Report
- The owner exports a one-page summary for the board.
This is an invented example to show how the module works. The names and figures are not a real customer's.
The modules
The nine modules, by what they do for you.
See
Know where you stand
Third-party and vendor risk
See your suppliers' risk before it becomes yours
Spot risky suppliers before they cause you trouble
Privacy legislation monitor
Know when privacy rules change
Hear when Australian and New Zealand privacy law changes
Fix
Do what matters first
Incident response
Know exactly what to do when something goes wrong
A clear plan and record from first alert to lessons learned
Prove
Show clients and insurers
Compliance frameworks
Proof your clients and insurers will accept
Evidence gathered for you against the standards that matter
AI executive reporting
Reports for your board or owner, without the effort
Plain-language reports, ready to share
Questions
Common questions.
It connects to the security tools you already use, shows you where you stand, tracks the fixes and keeps the proof your clients and insurers ask for.
No. The platform reads what your existing tools report.
In minutes once your tools are connected. Anything the platform cannot read yet is shown as not checked.
SMB1001, ISO 27001:2022 and NZISM. NIST CSF 2.0 and ISO 42001 are coming soon.
Find out where you stand.
The free readiness assessment shows you where you stand and what to fix first. If we are not the right fit, we will tell you that too.