Platform

Compliance, visibility, remediation, and operations on one data model.

Four products share the same tenants, clients, assets, findings, tickets, and reports. Enable what a client needs by package; the connections between modules are already there.

01 — Lifecycle

Govern, discover, prioritize, remediate, verify, train, operate, report.

Every stage is handled inside the platform, and each hands its result to the next.

  1. 01 Govern Assess controls against a framework, collect responses, and calculate compliance. CSpace One
  2. 02 Discover Scan public websites and receive telemetry from authorized Windows agents. CSpace 360
  3. 03 Prioritize Rank work by severity, exposure, compliance impact, and age. CSpace Pro
  4. 04 Remediate Convert the finding into a ticket with an owner, guidance, and a deadline. CSpace Pro
  5. 05 Verify Request a retest and compare the new result before closing. CSpace Pro
  6. 06 Train Send unique quizzes and safe phishing simulations, then measure results. Awareness
  7. 07 Operate Run tickets and operations across analysts and clients from one queue. CSpace Elite
  8. 08 Report Show progress to management, customers, and auditors. Platform
03 — Portals and roles

Multi-tenant by design.

One environment, four kinds of user, each restricted to what they own and what their package enables.

  • 01

    Platform administrator

    Manages the CSpace 360 environment across all vendors.

    • Vendor management
    • Global user management
    • Package and subscription administration
    • Framework library management
    • Platform analytics
    • Audit visibility
    • Billing administration
    • Support access
    • Audited vendor impersonation
    • Platform-level configuration
  • 02

    Vendor or MSSP

    Manages cybersecurity services for its own organization and client portfolio.

    • Client management and package assignment
    • Assessments and compliance monitoring
    • Web and infrastructure scans
    • Agent and network management
    • Findings and remediation
    • Reports
    • Training campaigns and phishing simulations
    • Policy documents
    • Tickets and incidents
    • Email configuration
    • Invoices
    • User and access management
  • 03

    Client organization

    Sees only its own authorized information. Capabilities depend on the modules enabled in its package.

    • View security posture
    • Complete assessments
    • Submit responses and evidence
    • Review compliance gaps
    • Review scan findings
    • Access tickets and remediation work
    • View authorized assets and devices
    • Participate in awareness and phishing programs
    • Download shared documents and reports
  • 04

    Public campaign participant

    An authorized recipient using an individually tokenized page. No vendor administration or unrelated client data is exposed.

    • Open an individually assigned training quiz
    • Complete a 10-question assessment
    • Receive a score
    • Receive score-based study material by email
    • Open a safe simulated phishing page
    • Report a suspected phishing simulation
04 — Security awareness

Training with unique quizzes, and phishing simulations that collect nothing.

  • Available now
  • Available with configuration
  • In development
  • Planned
  1. 01
    Available now

    Training module library

    A vendor-specific catalog of editable modules in English and Arabic.

    • Built-in modules copied into each vendor catalog
    • Custom training module creation
    • Module title, description, duration, level, color, and icon
    • Editable sections
    • Exactly 10 complete questions per module
    • Four answer options per question
    • English and Arabic questions and options
    • Correct-answer configuration

    NoteModule topics can include NCA cybersecurity awareness, phishing and social engineering, password and MFA security, incident reporting, personal-data and privacy awareness, remote-work security, mobile-device security, and safe internet and email use.

  2. 02
    Available with configuration

    Training campaigns

    One unique quiz link per recipient, sent through the Platform/System Email profile.

    • Select a training module
    • Create a draft campaign
    • Add individual employee email addresses
    • Target internal employees or selected client organizations
    • Create one unique quiz link per recipient
    • Manually send the campaign
    • Track delivery, completion, score, and pass status per recipient
    • Copy a fallback quiz link
    • Retry failed study-material delivery
  3. 03
    Available now

    Campaign snapshot protection

    A campaign keeps its own copy of the module, so later edits do not change quizzes already assigned.

    • Selected module
    • Its 10 questions and correct answers
    • Module content
    • All three study-material bands
    • PDF attachment settings
  4. 04
    Available now

    Quiz experience

    A tokenized, single-submission quiz with automatic scoring.

    • Individual tokenized link
    • Module introduction and course sections
    • Exactly 10 questions, one answer each
    • Automatic scoring
    • Pass result at 70% or above
    • Completion recording
    • Protection against repeat submission
  5. 05
    Available with configuration

    Score-based study material

    After submission, one of three study-material bands is selected and delivered automatically.

    • 0–49%: foundational review material
    • 50–69%: focused improvement material
    • 70–100%: reinforcement and continued-awareness material
    • Editable email content per band
    • Optional PDF attachment in private storage
    • Independent delivery status with manual retry
  6. 06
    Available with configuration

    Safe phishing simulations

    Campaigns that measure awareness without collecting passwords or credentials.

    • Campaign name, sender name, sender presentation, and subject
    • Custom HTML content, text signature, and inline signature image
    • Recipient selection
    • Delivery through a dedicated Phishing Email SMTP profile
    • Recipient delivery and campaign event tracking
    • Draft, active, suspended, completed, and deleted states
  7. 07
    Available now

    Phishing safety controls

    Safety principles enforced by the platform.

    • No credential collection
    • No password capture
    • No login-form submission storage
    • Pre-click reporting
    • Safe simulation landing pages
    • Campaign-specific tracking tokens
    • Separation between phishing SMTP and platform SMTP

    NotePhishing delivery never silently falls back to the Platform/System Email profile.

After each quiz

The score selects the study material that goes back to the employee.

  1. 0–49%Foundational review
  2. 50–69%Focused improvement
  3. 70–100%Reinforcement · pass
05 — White-label and localization

Your identity, your clients’ languages.

  • Available now
  • Available with configuration
  • In development
  • Planned
  1. 01
    Available now

    Arabic and English

    Designed for bilingual users rather than automatic translation.

    • English
    • Arabic
    • Right-to-left layouts
    • Bilingual assessment content
    • Bilingual training content
    • Language switching
  2. 02
    Available nowexpansion in development

    White-label platform

    Service-provider positioning with the vendor’s own identity.

    • Vendor branding
    • Vendor identity
    • Branded client experience
    • Branded documents and invoices
    • Service-provider positioning

    Direction

    • Custom domains
    • Expanded theme controls
    • Email templates
    • Branded report templates
06 — Integrations

What connects to the platform, and in what state.

  • Available now
  • Available with configuration
  • In development
  • Planned
  1. 01
    Available with configuration

    AI integration

    Assistance for selected workflows. Not required to use the platform.

    • Remediation guidance
    • Security-assistant conversations
    • Assessment preparation
    • Content structuring
    • Security summaries
  2. 02
    Available with configuration

    Application storage

    Private object storage with authorized upload and download.

    • Policy documents
    • Study-material PDFs
    • Campaign images
    • Authorized file upload and download
  3. 03
    Available with configuration

    Windows agent integration

    How the endpoint agent communicates with CSpace 360.

    • Agent identity and key
    • Heartbeats
    • Telemetry
    • Scan targets
    • Device results
    • Security findings
  4. 04
    In development

    External integrations

    Only connectors confirmed in the production environment are listed as available.

    • SIEM platforms
    • Ticketing systems
    • Threat-intelligence feeds
    • Webhooks
    • External APIs
    • Notification providers
    • Identity providers
07 — Reporting and analytics

What the platform can show today, and what is being added.

  • Available now
  • Available with configuration
  • In development
  • Planned
  1. 01
    Available nowin development for some modules

    Current platform views

    Operational and management data available in the platform today.

    • Clients
    • Assessments
    • Compliance
    • Findings
    • Tickets
    • Training campaigns
    • Phishing simulations
    • Assets
    • Agent activity
    • Network devices
    • Billing
  2. 02
    In development

    Report types

    Reports being added across modules.

    • Executive security posture
    • Compliance framework report
    • Assessment detail report
    • Technical findings report
    • Vulnerability report
    • Asset and CMDB report
    • Remediation progress report
    • Training performance report
    • Phishing-awareness report
    • SOC operations report
    • SLA report
    • Client service report
    • Portfolio comparison report
  3. 03
    In development

    Analytics

    Trends and comparisons across the portfolio.

    • Security posture trends
    • Compliance trends
    • Finding age
    • Remediation time
    • Ticket performance
    • Campaign completion
    • Training scores
    • Client comparison
    • Asset trends
    • Operational workload
Next step

See how the four products connect in one demonstration.

We will walk through the lifecycle with the modules that match your organization or service model.