Platform portfolio

Compliance and security platforms built for evidence.

Every one of these started as a gap we kept running into on our own engagements. Two of them, CyberNexus and ControlGraph, are now national scale platforms built around Pakistan's framework. Everything on this page is shown as it really looks, from our own software running with sample data.

Flagship Live demonstration on request

CyberNexus

PISF assessment, Authority review and certification on one audited record. Organisations assess every applicable control with evidence attached, the Authority reviews each one and decides, and an accredited organisation receives a certificate anyone can verify.

All 13 PISF domains and 238 controls built in
Separate portals for organisations, the Authority and the operator
Rules that stop a case moving on without its evidence

Explore CyberNexus

CyberNexus · OverviewDemo environment

The CyberNexus organisation overview with mandatory gate failures, risk and confidence shown as three separate counts, and corrective action oversight

Real product screen, sample data

AzbersInnovations

Flagship Live demonstration on request

ControlGraph

One governed map between the frameworks an organisation answers to. Official crosswalks come in exactly as published, AI proposes what is missing, and every relationship keeps its source and the person who approved it.

PISF, ISO 27001, NIST, CIS, PCI DSS and more in one registry
Nothing counts toward coverage until a person approves it
Finalised CyberNexus results carried across frameworks

Explore ControlGraph

ControlGraph · Relationship explorerDemo environment

The ControlGraph relationship explorer tracing one control to related controls in six frameworks

Real product screen, sample data

AzbersInnovations

Also in the portfolio

Focused tools that solve one problem well.

These came out of specific engagements. They are narrower than the flagship platforms by design, and we still use and maintain them.

ComplianceVault

Qatar NIA Policy 2.0 work in the order the policy expects. Your business impact analysis sets the security level, and the level sets how many controls each domain owes.

View platform

Threat Intelligence Mapper

Raw reporting in, mapped techniques and sector relevance out, with a short answer on whether anything needs to change for the reader.

View platform

PaperTrail

Open source print auditing for Windows. It reads the print log offline and produces an audit report you can hand over, and it is free.

View utility

Where to start

Find the one that matches your situation.

Most people recognise their own problem in one line of this list straight away, which is usually the faster route than comparing feature tables.

You oversee many organisations and cannot see across them

Submissions arrive in different shapes and comparing them takes a quarter. CyberNexus gives the Authority one method, one record and a national view, sector by sector.

You answer to several frameworks and keep repeating yourself

The same control described four times, in four documents, three of which are now out of date. ControlGraph holds it once and lets it count everywhere it is asked.

You are working through Qatar's NIA Policy

One framework, known properly rather than loosely, carried from the first impact analysis to the pack you hand over on audit day.

More threat reporting arrives than anyone can read

The bottleneck was never collection. Threat Intelligence Mapper does the translation step, and ends at the one check worth running this week.

You have no idea what leaves the building on paper

Almost nothing watches that channel, and investigations notice the gap late. PaperTrail is small, open source and free.

Questions we get asked

Before you get in touch

The questions that come up most often, answered the way we would answer them on a call.

Which of these can we see working today?

All of them. CyberNexus and ControlGraph run in a demonstration environment and we demonstrate them live on request, on your premises if you prefer. ComplianceVault and Threat Intelligence Mapper are used in our own delivery work, and PaperTrail is open source and free to download.

Do we have to choose one?

No, and most organisations do not. They solve different parts of the same problem, and the connections between them are deliberate. Start where the pain is and the rest can follow.

Can they run inside our own environment?

Private cloud, on premises and air gapped paths can be supported. For the kind of organisation these are built for, that tends to be a condition rather than a preference.

Where does AI fit in all of this?

In the reading, and nowhere near the deciding. It reads long documents, proposes mappings and flags what looks thin. Every acceptance stays with a named person and a date.

See any of them running.

We demonstrate on the real software with sample data, on your premises if you prefer. Tell us the problem first and we will show you the part of the product that answers it.

Start the conversation