Compliance that wins business, not just ticks boxes.
The CyberGrape Platform maps every SMB1001 control to your current posture, collects evidence automatically from your connected tools, and tells you exactly what is missing. From assessment to certification-ready in weeks, not months.
All five SMB1001 tiers. One platform.
The platform tracks your progress across every tier simultaneously. Start wherever you are today and see what each step up requires.
How the platform handles compliance.
Control mapping across all SMB1001 tiers
Every one of the 39 SMB1001 controls mapped to your current posture. See which are fully implemented, which are partial, and which are missing: across Bronze, Silver, Gold, Platinum and Diamond simultaneously.
Automated evidence collection
Evidence pulled directly from your connected tools. When Qualys detects your patch status, it maps to the relevant control. When usecure logs a training completion, it contributes to your evidence pack. No manual uploads for the controls your tools already cover.
Gap analysis with prioritised remediation
Every gap ranked by the effort to close it and its impact on your certification target. Not a flat list: a prioritised roadmap that tells you what to fix first to reach your next tier in the shortest time.
Assessor-ready evidence pack
When you are ready to certify, the platform generates your evidence pack automatically. Every control, every piece of supporting evidence, compiled into the format your certifier needs. What used to take weeks of preparation takes minutes.
Continuous compliance monitoring
Certification is not a point-in-time achievement. The platform monitors your controls continuously so you know the moment a control drifts out of compliance: not in your annual renewal conversation.
NZISM framework support
For organisations operating in or supplying to New Zealand government, the platform supports the NZISM framework alongside SMB1001. Both managed from the same interface, with separate reporting where required.
Platform in action
Your certification progress: tracked in real time.
The platform maps every control to your current posture and shows you exactly what is outstanding at each tier. Evidence is collected automatically as your tools report in: no spreadsheets, no manual uploads.
- Tier progress bars updated live
- Evidence pulled from connected tools
- Outstanding controls highlighted with remediation guidance
Common questions.
Ready to see your compliance gaps?
Connect your tools and the platform maps your controls automatically. Know exactly where you stand against your target tier in minutes.

