Observe the external edge
Connect domains, exposed services and configuration signals to the verified assets they describe.
- Domain and asset discovery
- DNS health and email security posture
- Transport and exposed service signals
Cyber Health Score helps security, IT and governance teams turn external exposure into prioritised work with evidence-backed proof.
For leaders who need clarity, operators who need ordered work, and governance teams who need an evidence trail.
Verified root
northbridge.example
Observe
12 signals
Attribute
6 assets
Prioritise
4 actions
Observe
Map verified external assets and meaningful change.
Prioritise
Order findings by severity, exposure and context.
Prove
Keep remediation, evidence and reassessment connected.
Results are based on completed assessments of verified assets. CHS does not certify compliance. Trust Centre
CHS serves the same organisation from multiple angles, not separate products for separate teams.
Understand what is exposed, track progress against priorities, and receive executive reporting without needing a technical background.
Investigate prioritised findings, manage remediation activity, attach evidence, and request reassessments to verify improvements.
Review findings mapped to your risk register, maintain remediation history, and prepare assurance material for audits and board reviews.
Cyber Health Score keeps observation, priority, action and proof connected, so teams can explain what they saw, what they changed and what a completed reassessment confirmed.
Follow the evidence trailWhere context is lost
Disconnected checks make it difficult to see which external exposures matter most.
Findings, owners and remediation evidence often live in separate systems.
Leadership needs more than a closed task to understand whether exposure changed.
Connect domains, exposed services and configuration signals to the verified assets they describe.
Turn completed assessment observations into a clear order of work using severity, exposure and organisational context.
Keep remediation, supporting evidence, completed reassessment and stakeholder reporting in one traceable sequence.
Continuous exposure operations (change detection, authorised assessment cadence and remediation verification) are covered in the product loop below.
Cyber Health Score treats observation, verification, derivation and authorisation as separate states. The observatory is a public model of that discipline: what was seen, what was proved in scope, what was computed from records, and what was explicitly permitted.
Observed ≠ Derived ≠ Verified ≠ Authorised. These states remain separate in product behaviour and in this illustration.
Illustrative state map. Stroke patterns and state codes remain readable without colour. Not live activity, certification or automatic trust.
01 · OBS
Publicly visible signals recorded with source and time.
02 · VER
Ownership or scope confirmed for a specific subject.
03 · DER
Meaning computed from recorded observations and decisions.
04 · AUT
Explicit, time-bound permission for a named technique.
State register
Publicly visible signals recorded with source and time.
An observation is what CHS recorded at the edge: DNS, certificates, services or configuration facts. Observation alone does not prove ownership or grant assessment rights.
Ownership or scope confirmed for a specific subject.
Verification ties a subject to your workspace through explicit ownership evidence. Verified scope is required before authorised assessment of that subject.
Meaning computed from recorded observations and decisions.
Derived views such as scores, trends or comparisons are built from durable records. They explain posture; they do not create new authority or certify outcomes.
Explicit, time-bound permission for a named technique.
Authorisation is a separate control plane. Continuous assessment consent and Authorised Validation grants are never inferred from observation, verification or derived views.
No certification claims. No guaranteed security outcomes. No automatic trust. Authority is never inferred from a score, a discovery edge or a completed observation alone.
A two-minute overview of how Cyber Health Score connects external signals, evidence and accountable next steps. Captions are available; playback starts only when you press play.
Demonstration notice. Northstar Systems is a fictional demonstration environment. Screens and findings are illustrative product footage from an isolated demo workspace, not a customer tenant or live Production data.
Duration about two minutes · WebM with MP4 fallback · English captions
Full walkthroughPlain-text transcript. Also available as downloadable text.
Look outside your organisation and you can see the signals: domains, mail settings, certificates. Cyber Health Score brings those signals together, so there's a clear place to start.
First, add a domain you control and verify ownership. That sets the boundary. An authorised assessment can then check supported public signals and record what it actually found. Discovery alone doesn't grant permission.
Take email security. DNS carries the instructions. SPF names permitted senders; DKIM supports signed mail; DMARC sets a policy for failures. If a selector is missing, you get an explainable finding, with its limits.
Here, a completed assessment scores sixty-eight. Confidence is partial, and you can see when the evidence was captured. Some checks weren't available. A number on its own never tells you the whole risk story.
The inventory separates verified assets from discovery candidates. Sankofa, the history view, separates recorded observations from reconstructed ones. You can follow the evidence over time without pretending the gaps are filled.
Now look at this DKIM finding. The owner assigned it, recorded the next step, and ran a recheck. The issue was still detected, so it stays open. That's an honest remediation trail.
Atlas shows the fictional supplier inside a trust lens. Select it, and Missions carries that context into an investigation. The relationship helps you ask a better question; it doesn't authorise a supplier scan.
A declaration isn't a reviewed claim. A reviewed claim isn't a certificate. Here, the supplier review couldn't be created, so trust claims and Verifier stay empty. The product keeps that boundary visible.
Observe the signal. Understand the evidence. Decide what matters. Act, then check again. Cyber Health Score gives teams a more accountable way to share what they know.
Prefer a guided conversation? Contact sales.
One connected External Trust Platform keeps the verified subject, observed signal, priority, approved action, verification and assurance evidence in view. Choose a stage to inspect what changes and what remains bounded. No certification claims. No guaranteed security outcomes.
Build and maintain a structured view of your organisation's externally visible attack surface. Identify assets, detect surface changes and understand what is publicly observable.
| Asset | Type | Status | Changes |
|---|---|---|---|
| example.com | Domain | Verified | - |
| vpn.example.com | Host | Review | New |
| api.example.com | Host | Verified | - |
| staging.example.com | Host | Candidate | New |
6 surface changes detected since last assessment · discovered is not authorised
Illustrative data shown in the actual Cyber Health Score interface.
Illustrative sample data. Example organisations and assets are fictional.
Move from posture to findings, governance, evidence and reporting without losing the verified asset or organisational context behind the decision.
Cyber Health Score
Completed assessments produce a Cyber Health Score with category context so teams can see overall posture at a glance.
Cyber Health Score
+3 pts since last scan
1
Critical
3
High
8
Medium
12
Low
Evidence as of
12 Sep 2026
Less than 24 hours old
Scan confidence
High
Completed module coverage
Assessment coverage
4 of 4 modules
Illustrative data shown in the actual Cyber Health Score interface.
Posture overview. Illustrative Cyber Health Score for Northbridge Labs
Discovery, assurance, governance and reporting use the same verified asset, authority and evidence language across the workspace.
Alert rules, email and webhook destinations with delivery monitoring.
Controls, Evidence Vault and compliance-evidence workflows.
Candidate and similarity signals for brand observations within your attack surface.
Contextual CVE and KEV information where supported to help prioritise findings.
Conservative percentile context within eligible CHS organisations.
Bounded external assessments plus the AI-Powered Social Engineering Evaluator for authorised campaigns.
Authenticated, tenant-scoped, read-only assistant for supported workspace information.
Connected by design
Every capability returns to posture, action or proof.
Register suppliers, track reviews and evidence requests, and understand dependency concentration. A commercial relationship never automatically authorises active assessment of supplier infrastructure. Relationship metadata only by default. Active supplier scanning is not introduced in this release.
Illustrative sample capability. Not a complete vendor-risk assessment platform. Questionnaire responses are not independently verified unless supporting evidence has been reviewed.
Explore platform capabilitiesRun controlled, authorised email-based phishing simulations with recipient setup, preview, delivery tracking, education pages and reporting inside your workspace.
Record what changed, attach supporting evidence, reassess the exposure, and communicate the outcome. Evidence is the proof. Reporting communicates the result.
Attach supporting files, screenshots, or configuration exports directly to a finding's remediation record. Evidence is scoped to the finding and visible in generated reports.
Attaching a document does not automatically prove compliance or resolution. Verification through reassessment is a separate step.
Generate technical and executive reports from within your workspace. Different report types suit different audiences, from detailed findings to high-level progress summaries.
CHS is designed for organisations that take data responsibility seriously.
Each organisation operates within its own isolated workspace. Data is not shared between tenants.
Access within your workspace is controlled by role. Invite team members with appropriate permissions.
Multi-factor authentication is supported to protect access to your organisation workspace.
Activity within your workspace is logged. Review history supports governance and accountability requirements.
Support access to your workspace is scoped and controlled. You remain in control of your data.
Reports can be shared securely with stakeholders where the feature is supported by your workspace plan.
Start with domain posture assessment and grow as your requirements expand.
£0 / month
Understand your current external posture.
£79 / month
£758 billed annually(same monthly entitlements)
Continuously manage your organisation's external security posture.
£199 / month
£1,910 billed annually(same monthly entitlements)
Operate external security, assurance, evidence, supplier risk, decision intelligence, and governed workflows as an integrated programme.
Contact sales
Operate CHS at greater organisational, contractual, portfolio, and enterprise scale.
Not sure which plan suits your organisation? Contact sales or view full pricing.
Understand your exposure. Prioritise what matters. Demonstrate progress.
Based on completed assessments of verified assets. Not real-time monitoring or penetration testing.