Compliance, visibility, remediation, and operations on one data model.
Four products share the same tenants, clients, assets, findings, tickets, and reports. Enable what a client needs by package; the connections between modules are already there.
Govern, discover, prioritize, remediate, verify, train, operate, report.
Every stage is handled inside the platform, and each hands its result to the next.
- 01 Govern Assess controls against a framework, collect responses, and calculate compliance. CSpace One
- 02 Discover Scan public websites and receive telemetry from authorized Windows agents. CSpace 360
- 03 Prioritize Rank work by severity, exposure, compliance impact, and age. CSpace Pro
- 04 Remediate Convert the finding into a ticket with an owner, guidance, and a deadline. CSpace Pro
- 05 Verify Request a retest and compare the new result before closing. CSpace Pro
- 06 Train Send unique quizzes and safe phishing simulations, then measure results. Awareness
- 07 Operate Run tickets and operations across analysts and clients from one queue. CSpace Elite
- 08 Report Show progress to management, customers, and auditors. Platform
Increasingly broad capability, the same platform.
- CSpace One GRC and framework compliance Build and monitor your cybersecurity governance program with frameworks, assessments, evidence, policies, and compliance reporting. Explore
- CSpace 360 Web, endpoint, network visibility, and CMDB See technical exposure across websites, endpoints, networks, software, devices, and assets. Explore
- CSpace Pro Guided remediation and patching Prioritize findings, guide corrective action, manage remediation, and verify results through retesting. Explore
- CSpace Elite Tickets, SOC, and operations Coordinate tickets, incidents, SOC workflows, SLAs, and managed cybersecurity services across clients. Explore
Multi-tenant by design.
One environment, four kinds of user, each restricted to what they own and what their package enables.
- 01
Platform administrator
Manages the CSpace 360 environment across all vendors.
- Vendor management
- Global user management
- Package and subscription administration
- Framework library management
- Platform analytics
- Audit visibility
- Billing administration
- Support access
- Audited vendor impersonation
- Platform-level configuration
- 02
Vendor or MSSP
Manages cybersecurity services for its own organization and client portfolio.
- Client management and package assignment
- Assessments and compliance monitoring
- Web and infrastructure scans
- Agent and network management
- Findings and remediation
- Reports
- Training campaigns and phishing simulations
- Policy documents
- Tickets and incidents
- Email configuration
- Invoices
- User and access management
- 03
Client organization
Sees only its own authorized information. Capabilities depend on the modules enabled in its package.
- View security posture
- Complete assessments
- Submit responses and evidence
- Review compliance gaps
- Review scan findings
- Access tickets and remediation work
- View authorized assets and devices
- Participate in awareness and phishing programs
- Download shared documents and reports
- 04
Public campaign participant
An authorized recipient using an individually tokenized page. No vendor administration or unrelated client data is exposed.
- Open an individually assigned training quiz
- Complete a 10-question assessment
- Receive a score
- Receive score-based study material by email
- Open a safe simulated phishing page
- Report a suspected phishing simulation
Training with unique quizzes, and phishing simulations that collect nothing.
- Available now
- Available with configuration
- In development
- Planned
- 01Available now
Training module library
A vendor-specific catalog of editable modules in English and Arabic.
- Built-in modules copied into each vendor catalog
- Custom training module creation
- Module title, description, duration, level, color, and icon
- Editable sections
- Exactly 10 complete questions per module
- Four answer options per question
- English and Arabic questions and options
- Correct-answer configuration
NoteModule topics can include NCA cybersecurity awareness, phishing and social engineering, password and MFA security, incident reporting, personal-data and privacy awareness, remote-work security, mobile-device security, and safe internet and email use.
- 02Available with configuration
Training campaigns
One unique quiz link per recipient, sent through the Platform/System Email profile.
- Select a training module
- Create a draft campaign
- Add individual employee email addresses
- Target internal employees or selected client organizations
- Create one unique quiz link per recipient
- Manually send the campaign
- Track delivery, completion, score, and pass status per recipient
- Copy a fallback quiz link
- Retry failed study-material delivery
- 03Available now
Campaign snapshot protection
A campaign keeps its own copy of the module, so later edits do not change quizzes already assigned.
- Selected module
- Its 10 questions and correct answers
- Module content
- All three study-material bands
- PDF attachment settings
- 04Available now
Quiz experience
A tokenized, single-submission quiz with automatic scoring.
- Individual tokenized link
- Module introduction and course sections
- Exactly 10 questions, one answer each
- Automatic scoring
- Pass result at 70% or above
- Completion recording
- Protection against repeat submission
- 05Available with configuration
Score-based study material
After submission, one of three study-material bands is selected and delivered automatically.
- 0–49%: foundational review material
- 50–69%: focused improvement material
- 70–100%: reinforcement and continued-awareness material
- Editable email content per band
- Optional PDF attachment in private storage
- Independent delivery status with manual retry
- 06Available with configuration
Safe phishing simulations
Campaigns that measure awareness without collecting passwords or credentials.
- Campaign name, sender name, sender presentation, and subject
- Custom HTML content, text signature, and inline signature image
- Recipient selection
- Delivery through a dedicated Phishing Email SMTP profile
- Recipient delivery and campaign event tracking
- Draft, active, suspended, completed, and deleted states
- 07Available now
Phishing safety controls
Safety principles enforced by the platform.
- No credential collection
- No password capture
- No login-form submission storage
- Pre-click reporting
- Safe simulation landing pages
- Campaign-specific tracking tokens
- Separation between phishing SMTP and platform SMTP
NotePhishing delivery never silently falls back to the Platform/System Email profile.
After each quiz
The score selects the study material that goes back to the employee.
- 0–49%Foundational review
- 50–69%Focused improvement
- 70–100%Reinforcement · pass
Your identity, your clients’ languages.
- Available now
- Available with configuration
- In development
- Planned
- 01Available now
Arabic and English
Designed for bilingual users rather than automatic translation.
- English
- Arabic
- Right-to-left layouts
- Bilingual assessment content
- Bilingual training content
- Language switching
- 02Available nowexpansion in development
White-label platform
Service-provider positioning with the vendor’s own identity.
- Vendor branding
- Vendor identity
- Branded client experience
- Branded documents and invoices
- Service-provider positioning
Direction
- Custom domains
- Expanded theme controls
- Email templates
- Branded report templates
What connects to the platform, and in what state.
- Available now
- Available with configuration
- In development
- Planned
- 01Available with configuration
AI integration
Assistance for selected workflows. Not required to use the platform.
- Remediation guidance
- Security-assistant conversations
- Assessment preparation
- Content structuring
- Security summaries
- 02Available with configuration
Application storage
Private object storage with authorized upload and download.
- Policy documents
- Study-material PDFs
- Campaign images
- Authorized file upload and download
- 03Available with configuration
Windows agent integration
How the endpoint agent communicates with CSpace 360.
- Agent identity and key
- Heartbeats
- Telemetry
- Scan targets
- Device results
- Security findings
- 04In development
External integrations
Only connectors confirmed in the production environment are listed as available.
- SIEM platforms
- Ticketing systems
- Threat-intelligence feeds
- Webhooks
- External APIs
- Notification providers
- Identity providers
What the platform can show today, and what is being added.
- Available now
- Available with configuration
- In development
- Planned
- 01Available nowin development for some modules
Current platform views
Operational and management data available in the platform today.
- Clients
- Assessments
- Compliance
- Findings
- Tickets
- Training campaigns
- Phishing simulations
- Assets
- Agent activity
- Network devices
- Billing
- 02In development
Report types
Reports being added across modules.
- Executive security posture
- Compliance framework report
- Assessment detail report
- Technical findings report
- Vulnerability report
- Asset and CMDB report
- Remediation progress report
- Training performance report
- Phishing-awareness report
- SOC operations report
- SLA report
- Client service report
- Portfolio comparison report
- 03In development
Analytics
Trends and comparisons across the portfolio.
- Security posture trends
- Compliance trends
- Finding age
- Remediation time
- Ticket performance
- Campaign completion
- Training scores
- Client comparison
- Asset trends
- Operational workload
See how the four products connect in one demonstration.
We will walk through the lifecycle with the modules that match your organization or service model.