Skip to main content
Cyber Health Score
Get started
External Trust Platform

See your external edge. Turn signals into evidence.

Cyber Health Score helps security, IT and governance teams turn external exposure into prioritised work with evidence-backed proof.

For leaders who need clarity, operators who need ordered work, and governance teams who need an evidence trail.

  1. 01

    Observe

    Map verified external assets and meaningful change.

  2. 02

    Prioritise

    Order findings by severity, exposure and context.

  3. 03

    Prove

    Keep remediation, evidence and reassessment connected.

01
Externally observable assessment
Based on publicly accessible information and completed assessments
02
Prioritised findings
Ordered by severity, exposure, and organisational context
03
Evidence-backed remediation
Record what changed, attach evidence, and verify improvement
04
Stakeholder-ready reporting
Technical and executive outputs for different audiences
05
Secure multi-tenant workspace
Tenant-isolated data, role-aware access, and audit history

Results are based on completed assessments of verified assets. CHS does not certify compliance. Trust Centre

Who it helps

One workspace for leaders, operators and governance

CHS serves the same organisation from multiple angles, not separate products for separate teams.

Business leaders

Understand what is exposed, track progress against priorities, and receive executive reporting without needing a technical background.

  • Executive summary reports
  • Score and trend visibility
  • Governance-ready evidence

IT and security teams

Investigate prioritised findings, manage remediation activity, attach evidence, and request reassessments to verify improvements.

  • Finding detail and remediation guidance
  • Evidence management
  • Domain and asset oversight

Governance and risk teams

Review findings mapped to your risk register, maintain remediation history, and prepare assurance material for audits and board reviews.

  • Findings mapped to risk register
  • Audit-ready history
  • Compliance evidence report output
The evidence gap

Security work fragments when the evidence trail disappears.

Cyber Health Score keeps observation, priority, action and proof connected, so teams can explain what they saw, what they changed and what a completed reassessment confirmed.

Follow the evidence trail

Where context is lost

01

Signals without context

Disconnected checks make it difficult to see which external exposures matter most.

02

Action without continuity

Findings, owners and remediation evidence often live in separate systems.

03

Progress without proof

Leadership needs more than a closed task to understand whether exposure changed.

One connected system

Observe. Prioritise. Prove.

01

Observe the external edge

Connect domains, exposed services and configuration signals to the verified assets they describe.

  • Domain and asset discovery
  • DNS health and email security posture
  • Transport and exposed service signals
02

Prioritise with context

Turn completed assessment observations into a clear order of work using severity, exposure and organisational context.

  • Severity-ordered findings
  • Score and category context
  • Ownership and overdue visibility
03

Prove what changed

Keep remediation, supporting evidence, completed reassessment and stakeholder reporting in one traceable sequence.

  • Evidence-backed remediation
  • Completed reassessment
  • Technical and executive reporting

Continuous exposure operations (change detection, authorised assessment cadence and remediation verification) are covered in the product loop below.

External Trust Observatory

Keep every signal in its proper authority class.

Cyber Health Score treats observation, verification, derivation and authorisation as separate states. The observatory is a public model of that discipline: what was seen, what was proved in scope, what was computed from records, and what was explicitly permitted.

Observed ≠ Derived ≠ Verified ≠ Authorised. These states remain separate in product behaviour and in this illustration.

  1. 01 · OBS

    Observed

    Publicly visible signals recorded with source and time.

  2. 02 · VER

    Verified

    Ownership or scope confirmed for a specific subject.

  3. 03 · DER

    Derived

    Meaning computed from recorded observations and decisions.

  4. 04 · AUT

    Authorised

    Explicit, time-bound permission for a named technique.

State register

  • OBS

    Observed

    Publicly visible signals recorded with source and time.

    An observation is what CHS recorded at the edge: DNS, certificates, services or configuration facts. Observation alone does not prove ownership or grant assessment rights.

  • VER

    Verified

    Ownership or scope confirmed for a specific subject.

    Verification ties a subject to your workspace through explicit ownership evidence. Verified scope is required before authorised assessment of that subject.

  • DER

    Derived

    Meaning computed from recorded observations and decisions.

    Derived views such as scores, trends or comparisons are built from durable records. They explain posture; they do not create new authority or certify outcomes.

  • AUT

    Authorised

    Explicit, time-bound permission for a named technique.

    Authorisation is a separate control plane. Continuous assessment consent and Authorised Validation grants are never inferred from observation, verification or derived views.

No certification claims. No guaranteed security outcomes. No automatic trust. Authority is never inferred from a score, a discovery edge or a completed observation alone.

Product demo

See the workspace in motion

A two-minute overview of how Cyber Health Score connects external signals, evidence and accountable next steps. Captions are available; playback starts only when you press play.

Demonstration notice. Northstar Systems is a fictional demonstration environment. Screens and findings are illustrative product footage from an isolated demo workspace, not a customer tenant or live Production data.

Duration about two minutes · WebM with MP4 fallback · English captions

Full walkthrough
Transcript(Cyber Health Score product overview)

Plain-text transcript. Also available as downloadable text.

Look outside your organisation and you can see the signals: domains, mail settings, certificates. Cyber Health Score brings those signals together, so there's a clear place to start.

First, add a domain you control and verify ownership. That sets the boundary. An authorised assessment can then check supported public signals and record what it actually found. Discovery alone doesn't grant permission.

Take email security. DNS carries the instructions. SPF names permitted senders; DKIM supports signed mail; DMARC sets a policy for failures. If a selector is missing, you get an explainable finding, with its limits.

Here, a completed assessment scores sixty-eight. Confidence is partial, and you can see when the evidence was captured. Some checks weren't available. A number on its own never tells you the whole risk story.

The inventory separates verified assets from discovery candidates. Sankofa, the history view, separates recorded observations from reconstructed ones. You can follow the evidence over time without pretending the gaps are filled.

Now look at this DKIM finding. The owner assigned it, recorded the next step, and ran a recheck. The issue was still detected, so it stays open. That's an honest remediation trail.

Atlas shows the fictional supplier inside a trust lens. Select it, and Missions carries that context into an investigation. The relationship helps you ask a better question; it doesn't authorise a supplier scan.

A declaration isn't a reviewed claim. A reviewed claim isn't a certificate. Here, the supplier review couldn't be created, so trust claims and Verifier stay empty. The product keeps that boundary visible.

Observe the signal. Understand the evidence. Decide what matters. Act, then check again. Cyber Health Score gives teams a more accountable way to share what they know.

Prefer a guided conversation? Contact sales.

Auctoritas product loop

Discover, understand, assess, prioritise, act, verify, assure.

One connected External Trust Platform keeps the verified subject, observed signal, priority, approved action, verification and assurance evidence in view. Choose a stage to inspect what changes and what remains bounded. No certification claims. No guaranteed security outcomes.

01Discover

Know what is exposed.

Build and maintain a structured view of your organisation's externally visible attack surface. Identify assets, detect surface changes and understand what is publicly observable.

  • Asset Inventory
  • Passive Discovery
  • Change Detection
  • Attack Surface Graph
  • Brand Protection
  • External Exposure Visibility

Illustrative sample data. Example organisations and assets are fictional.

Inside the workspace

Keep the subject in view as the work changes.

Move from posture to findings, governance, evidence and reporting without losing the verified asset or organisational context behind the decision.

Cyber Health Score

See your external security posture in one prioritised score.

Completed assessments produce a Cyber Health Score with category context so teams can see overall posture at a glance.

  • Overall Cyber Health Score with category breakdown
  • Score movement after completed assessments
  • Severity-ordered findings summarised alongside posture
Explore security scans

Posture overview. Illustrative Cyber Health Score for Northbridge Labs

Platform depth

Specialist capabilities, one evidence model.

Discovery, assurance, governance and reporting use the same verified asset, authority and evidence language across the workspace.

01

Alerts and Integrations

Alert rules, email and webhook destinations with delivery monitoring.

02

Governance and Evidence

Controls, Evidence Vault and compliance-evidence workflows.

03

Brand Protection

Candidate and similarity signals for brand observations within your attack surface.

04

Vulnerability Intelligence

Contextual CVE and KEV information where supported to help prioritise findings.

05

Privacy-Safe Benchmarking

Conservative percentile context within eligible CHS organisations.

06

Assessments and ASPE

Bounded external assessments plus the AI-Powered Social Engineering Evaluator for authorised campaigns.

07

CHS Agent

Authenticated, tenant-scoped, read-only assistant for supported workspace information.

Connected by design

Every capability returns to posture, action or proof.

Supplier Assurance
Available

Supplier inventory, assurance workflow and third-party risk context

Register suppliers, track reviews and evidence requests, and understand dependency concentration. A commercial relationship never automatically authorises active assessment of supplier infrastructure. Relationship metadata only by default. Active supplier scanning is not introduced in this release.

Illustrative sample capability. Not a complete vendor-risk assessment platform. Questionnaire responses are not independently verified unless supporting evidence has been reviewed.

Explore platform capabilities
  • Supplier register with ownership and criticality
  • Assurance reviews, evidence requests and questionnaires
  • Shared-provider concentration and service dependencies
ASPE

AI-Powered Social Engineering Evaluator (ASPE)

Run controlled, authorised email-based phishing simulations with recipient setup, preview, delivery tracking, education pages and reporting inside your workspace.

  • Authorised email campaign workflows
  • Controlled email delivery and scenario context
  • Delivery, Clicked and education reporting
  • Post-simulation education pages
Evidence & Reporting

Move beyond a list of findings

Record what changed, attach supporting evidence, reassess the exposure, and communicate the outcome. Evidence is the proof. Reporting communicates the result.

1
Finding
Observation from completed assessment
2
Remediation
Work recorded, ownership assigned
3
Evidence
Supporting document attached
4
Reassessment
Exposure verified by next assessment
5
Verified outcome
Confirmed improvement recorded
6
Report
Communicated to relevant audience

Evidence records

Attach supporting files, screenshots, or configuration exports directly to a finding's remediation record. Evidence is scoped to the finding and visible in generated reports.

  • Linked to specific finding
  • Verification state tracked
  • Visible in report output
  • Maintained as audit history

Attaching a document does not automatically prove compliance or resolution. Verification through reassessment is a separate step.

Reports

Generate technical and executive reports from within your workspace. Different report types suit different audiences, from detailed findings to high-level progress summaries.

  • Technical report with full finding detail
  • Executive summary with score and trend
  • Evidence package for audit preparation
  • Secure sharing where supported
Security & trust

Built with responsible data handling in mind

CHS is designed for organisations that take data responsibility seriously.

Tenant isolation

Each organisation operates within its own isolated workspace. Data is not shared between tenants.

Role-aware access

Access within your workspace is controlled by role. Invite team members with appropriate permissions.

MFA support

Multi-factor authentication is supported to protect access to your organisation workspace.

Audit history

Activity within your workspace is logged. Review history supports governance and accountability requirements.

Scoped support access

Support access to your workspace is scoped and controlled. You remain in control of your data.

Secure report sharing

Reports can be shared securely with stakeholders where the feature is supported by your workspace plan.

Plans

Plans for every stage

Start with domain posture assessment and grow as your requirements expand.

For organisations getting started

Free

£0 / month

Understand your current external posture.

  • 1 monitored root domain
  • 3 assessments per month
  • Current posture and supported security findings
  • Basic attack-surface visibility
  • Bounded Free history
  • Basic supplier register (directory only)
  • 1 lifetime ASPE evaluation up to 100 recipients
  • Self-service support
Start free
Most popular
For smaller organisations

Plus

£79 / month

£758 billed annually(same monthly entitlements)

Continuously manage your organisation's external security posture.

  • 3 monitored root domains
  • 15 assessments per month
  • Recursive Argus monitoring with provenance
  • Vulnerability intelligence, CISA KEV, and EPSS
  • Exposure Priority and in-app Alerts
  • Remediation workflow
  • 90-day history and change understanding
  • Bounded self-service reports
  • 1 ASPE campaign per month
  • 100 recipients per campaign
  • Evidence Vault
  • Basic supplier register (directory only; no assurance workflows)
  • Tenant Agent (rate limited)
  • Standard support
Create free workspace
For growing security programmes

Pro

£199 / month

£1,910 billed annually(same monthly entitlements)

Operate external security, assurance, evidence, supplier risk, decision intelligence, and governed workflows as an integrated programme.

  • 15 monitored root domains
  • 60 assessments per month
  • Full available Argus intelligence within Pro limits
  • Vulnerability intelligence, CISA KEV, and EPSS
  • Exposure Priority, Alerts, and full remediation workflow
  • 180-day history and change intelligence
  • Full self-service and configurable reports
  • 5 ASPE campaigns per month
  • 250 recipients per campaign
  • Evidence Vault with external evidence workflows
  • Supplier assurance (reviews, evidence requests, questionnaires)
  • Decision intelligence (risk register, objectives)
  • Governed automation, operational workflows, and trust claims
  • Developer platform, reasoning, and adapters where ready
  • Tenant Agent
  • Priority support positioning where operationally supported
Create free workspace
For contractual scale and assurance

Business

Contact sales

Operate CHS at greater organisational, contractual, portfolio, and enterprise scale.

  • Everything in Pro
  • Custom monitored root domain scale
  • Contract-configured assessment volume
  • Larger supplier programmes
  • Multi-organisation and portfolio views where saleable
  • Larger retention and storage
  • Contract-configured ASPE campaigns and recipients
  • Contractual controls and enterprise support
  • Custom usage ceilings
  • Advanced trust and federation capabilities where appropriate
Contact sales

Not sure which plan suits your organisation? Contact sales or view full pricing.

FAQ

Common questions

More detail is available in our documentation.

Get started today

Make your external cyber posture easier to understand and improve.

Understand your exposure. Prioritise what matters. Demonstrate progress.

Based on completed assessments of verified assets. Not real-time monitoring or penetration testing.

  • No intrusive testing
  • Verified assets only
  • Your data stays in your workspace