We had a scare
Had a scare? Work out what happened and what to fix first.
A clicked link, a supplier breach or an unusual login can leave you unsure what is exposed. Start with where you stand, then close the biggest gaps first.
What it feels like, and what is at risk
What is at risk if you only fix what you can see.
A clicked link, a supplier breach or an unusual login leaves you asking what else is exposed. The urgent problem might be sorted, but you are not sure about the rest.
Not knowing what else is exposed
Changing one password does not tell you whether the same gap exists on other accounts, devices or suppliers.
Fixing the visible problem only
The next incident often uses the gap that was never looked at.
No clear record
Clients, insurers and regulators may ask what happened and what you did about it. Memory is not a record.
If something is happening right now
CyberGrape is not an emergency response service. If you think an attack is under way, contact your IT provider first. Once things are steady, this page is about the next step: finding out what else is exposed and closing the gaps in order.
What changes with CyberGrape
See where you stand, fix what matters first, prove it.
See
See which accounts, devices and suppliers are exposed, once your tools are connected.
Fix
Turn what you find into a short list of fixes, each with an owner and a status.
Prove
Keep a clear record of what happened and what you did about it.
How it works
Find out what is exposed, then close the gaps in order.
Connect your tools so the platform can read your accounts, devices and suppliers. It ranks what it finds into a short fix list, and keeps a record of what you did.
Our people work on it with you, led by a senior security leader.
Your tools
The email, device and sign-in tools you already use.
The CyberGrape platform
Checks what it reads, ranks what matters, tracks every fix.
Proof you can hand over
Policies, reports and a proof pack for clients and insurers.
Connect the tools you already useWe read your sign-in, device and email settings. Nothing to rebuild.How this works underneath
We connect to tools such as Microsoft Entra ID, Google Workspace, NinjaOne and CrowdStrike. What they report is brought into one view, and anything we cannot read is shown as not checked.See what is exposedAccounts, devices and suppliers that carry the most risk come first.How this works underneath
The platform ranks risks together, including suppliers, so you can see where the same weakness may exist beyond the one you already know about. It shows what your tools report. It cannot confirm that nobody got in.Fix it and keep the recordEach fix has an owner and a status, and the record stays with the work.How this works underneath
The Action Hub tracks every fix to done. The incident response module keeps a clear record from first alert to lessons learned. For ongoing monitoring of your devices, see our Protection service.
What it connects to
Works with the tools you already use.
A small example
What this can look like.
- Starting point
- The business uses the supplier for a shared login. Nobody is sure which systems depend on it.
- What the tools show
- Which accounts connect to that supplier, and which of them have no extra sign-in protection.
- What happens next
- Credentials are reset, the unprotected accounts get multi-factor sign-in, and each step has an owner.
- What the owner can show
- A record of what happened, what was checked and what was changed.
Sample only. This is an invented scenario to show how the pages work, not a real customer. Your own picture comes from the tools you connect.
The first weeks
What the first weeks look like.
Minutes
Once your tools are connected
You can see which accounts, devices and suppliers carry the most risk.
Weeks
The biggest gaps are closed in priority order, and what you did is on record.
Ongoing
Monitoring and reviews so the same gap does not quietly reopen.
Go deeper
See how each part works.
Questions
Common questions.
No. CyberGrape is not an emergency response service. If you think an attack is happening now, contact your IT provider or an incident response specialist first. We help afterwards, and before the next one, by showing what is exposed and tracking the fixes.
We show what your connected tools report and where the gaps are. We cannot confirm that nobody got in. If you suspect a breach, involve your IT provider or an incident response specialist.
Reporting rules depend on your country, your industry and what was affected. The incident response module helps you keep a clear record, but it is not legal advice.
No. We connect to the tools you already use and read what they report. Anything we cannot read yet is shown as not checked, so a gap is never hidden.
Other situations we help with
Find out where you stand.
The free readiness assessment shows you where you stand and what to fix first. If we are not the right fit, we will tell you that too.