العربية Request a demo
CSpace 360 Governance · Visibility · Remediation · Operations

Understand your security posture. Prioritize what matters. Prove your progress.

CSpace 360 connects governance requirements, technical findings, remediation, and operational workflows in one platform, for a single organization or a full client portfolio.

Request a demo Explore the platform
One finding, end to end Advances automatically · select a stage to pause

01 / 08

Govern

Assess controls against a framework, collect responses, and calculate compliance.

Handled by CSpace One

Assessment · NCA ECC

Control gap identified

An access-management control has no supporting response. The compliance score updates and the gap is queued for remediation.

Framework
NCA ECC
Weight
3
Status
Open
01 — Product family

Four products. One connected platform.

Each product broadens what the same platform can manage. Modules are enabled per client through packages.

  1. 01

    CSpace One

    GRC and framework compliance

    Build and monitor your cybersecurity governance program with frameworks, assessments, evidence, policies, and compliance reporting.

    Explore
  2. 02

    CSpace 360

    Web, endpoint, network visibility, and CMDB

    See technical exposure across websites, endpoints, networks, software, devices, and assets.

    Explore
  3. 03

    CSpace Pro

    Guided remediation and patching

    Prioritize findings, guide corrective action, manage remediation, and verify results through retesting.

    Explore
  4. 04

    CSpace Elite

    Tickets, SOC, and operations

    Coordinate tickets, incidents, SOC workflows, SLAs, and managed cybersecurity services across clients.

    Explore
02 — Connected platform

Security work should not stop at the finding.

Governance requirements, scan results, agent telemetry, and awareness campaigns all lead to the same place: a piece of work with an owner, a deadline, and a verified result. CSpace 360 keeps that chain intact across seven connected stages.

  1. 01 Assess governance and compliance
  2. 02 Discover technical risks
  3. 03 Assign remediation
  4. 04 Verify corrective action
  5. 05 Train employees
  6. 06 Manage incidents and operations
  7. 07 Report progress
How the products connect
03 — For service providers

Run cybersecurity services across your complete client portfolio.

Give each client an isolated experience while your team manages assessments, findings, campaigns, tickets, packages, and reporting from one vendor portal.

  • Client packages define limits, pricing, and the modules each client can use.
  • Cross-client findings and ticket queues for your analysts.
  • Vendor branding and white-label presentation for the client experience.
  • Saudi invoice details, 15% VAT, and ZATCA Phase 1 QR information on invoices.
  • Solutions for MSSPs
Vendor portal · Clients Demonstration data
ClientPackageEnabled modulesStatus
  • Client A · Holding company Governance ComplianceAssessmentsTraining Active
  • Client B · Healthcare group Governance + Visibility ComplianceAssessmentsNetwork inventoryNetwork scansPhishing Active
  • Client C · Logistics Managed operations ComplianceNetwork scansSOCAI assistance Suspended

Tenant isolation — each client sees only its own authorized data.

Also built for

Solutions for organizations

  • Cybersecurity consulting companies

    Framework assessments, evidence requests, findings, recommendations, remediation follow-up, and client reports.

  • Internal cybersecurity teams

    Compliance, assets, findings, awareness, vulnerabilities, policies, incidents, and remediation in one environment.

  • Governance, risk, and compliance teams

    Structure assessments, organize controls, collect evidence, manage policies, and monitor compliance scores.

  • IT and infrastructure teams

    Technical findings, endpoint data, device inventories, patch recommendations, assigned tickets, and deadlines.

  • Security operations teams

    Incidents, operational tickets, escalation, response actions, and cross-client queues.

  • Executive leadership

    High-level posture, compliance progress, open risks, operational trends, and accountability.

04 — Regional readiness

Built for Arabic and English cybersecurity operations.

Bilingual users, right-to-left interfaces, Saudi business information, regional framework structures, and organization-specific requirements are part of the platform, not an add-on.

  • Languages

    English and Arabic content for frameworks, assessments, and training modules, with language switching and right-to-left layouts.

  • Saudi business records

    Commercial registration, VAT, national address, and billing information on client records and invoices.

  • Framework structures

    Built-in and custom frameworks with domains, controls, weighted questions, and vendor-specific catalogs.

Assessment item · Identity and access · Q3 Weight 3

Is multi-factor authentication enforced for all remote access to the organization’s systems?

هل يتم فرض التحقق متعدد العوامل على جميع أشكال الوصول عن بُعد إلى أنظمة المنشأة؟

  • Implemented
  • Partially implemented
  • Not implemented
  • Not applicable

Framework structures you can manage

  • NCA Essential Cybersecurity Controls
  • SAMA Cybersecurity Framework
  • NCA Cloud Cybersecurity Controls
  • ISO/IEC 27001
  • NIST Cybersecurity Framework
  • PCI DSS
  • Organization-specific frameworks

Alignment, not certification. CSpace 360 helps organizations assess, organize, and monitor their alignment with selected cybersecurity and information-security frameworks. Certification and regulatory acceptance depend on the relevant authority, auditor, assessor, scope, evidence, and organizational implementation.

05 — Security and trust

Controls that are part of the platform today.

Security and trust
  • Available now Multi-factor authentication TOTP enrollment, verification, and login challenge
  • Available now Tenant isolation Vendor and client data separated across modules
  • Available now Role-based access Role, ownership, package, and module permissions
  • Available now Audit logging Actor, action, resource, IP, user agent, and time
  • Available now Session controls Expiry, idle timeout, short-lived tokens, revocation
  • Available now Encrypted SMTP credentials Purpose-separated email profiles with TLS requirements
  • Available now Audited impersonation Recorded, vendor-scoped support sessions
  • Available now Safe phishing simulations No credential collection or password capture
Next step

Bring your cybersecurity program into one connected platform.

Request a demonstration tailored to your organization, service model, and required frameworks.

Request your demo Talk to a cybersecurity specialist