Help shape the next generation of practical cyber resilience tools

We’re building a connected suite of platforms to help organisations manage ISMS operations, supplier assurance, AI governance and cyber threat intelligence in a clearer, more practical way.

Each solution can stand alone, or work together as part of a broader cyber resilience operating model.

We’re inviting founding partners to explore the trial environments, provide feedback and help shape the tools before broader release.

Explore the trials
Become a founding partner

ISMS Cadence

Not just GRC. Governance in motion.

The ISMS Cadence Hub is built for the work that happens between audits — the activities, decisions, reviews, risks, controls and improvements that keep an ISMS alive.

Traditional GRC tools focus on storing compliance records. The Cadence Hub focuses on helping teams operate, manage and improve the ISMS throughout the year.

Because ISO 27001 should not be something you dust off before an audit. It should be part of how the organisation works.

Shared Supplier Assurance Portal (SSAP)

Not just supplier questionnaires. Shared assurance in motion.

Traditional supplier risk tools often ask, “Has the questionnaire been completed?”

The Shared Supplier Assurance Portal asks:

What do we actually know about this supplier, what assurance already exists, and what still needs to be reviewed?

Because supplier assurance should not be a repeated paperwork exercise. It should help both parties understand risk, reduce duplication and make better decisions.

Suppliers: build your assurance profile once, maintain it over time

Clients: Make supplier assurance more consistent, risk-based and easier to oversee

The Shared Supplier Assurance Portal helps clients manage supplier assurance in a more structured and practical way.

Rather than relying on scattered spreadsheets, email trails and one-off questionnaires, clients can use SSAP to assess suppliers based on service criticality, risk exposure, assurance evidence, responsibilities and ongoing review requirements.

The portal is designed to help organisations understand supplier risk more clearly, reduce duplicated effort and make better-informed decisions before onboarding, renewing or continuing supplier relationships.

AI Governance Platform

Not just an AI register. Responsible AI in motion.

Many AI governance tools start and stop with an inventory of AI systems, policies or acceptable use statements.

The AI Governance Platform is designed to help organisations manage the real decisions behind AI adoption: what is being proposed, what data is involved, what risks exist, who needs to approve it, and how it should be monitored over time.

It supports AI use case intake, AI impact assessments, risk evaluation, approval workflows, control selection, treatment planning and ongoing oversight — so AI governance becomes part of how the organisation adopts and manages technology.

Traditional AI governance tools often ask, “Have we recorded the AI system?”

The AI Governance Platform asks:

“Should this AI use case proceed, under what conditions, and how will we know it remains safe, appropriate and well-governed?”

Because AI governance should not be a static list of tools. It should guide confident, responsible and risk-aware adoption.

Cyber Threat Intelligence (CTI) Governance Platform

Not just threat feeds. Intelligence in motion.

Most threat intelligence tools focus on collecting more feeds, indicators, alerts and technical data.

The CTI Platform is built around a different question: what intelligence does the organisation actually need to make better decisions?

It helps teams define Priority Intelligence Requirements (PIRs), connect intelligence to assets, business processes, risks and exposures, and turn findings into actions and reports that matter to security leaders, executives and boards.

Traditional CTI tools often ask, “What threats are out there?”

The CTI Platform asks:

“Which threats matter to us, why do they matter, and what should we do about them?”

Because cyber threat intelligence should not create more noise. It should create focus.