Manage your own cybersecurity program from one environment.
Replace scattered spreadsheets, disconnected scanners, email threads, and manual reports with one place for controls, assets, findings, remediation, awareness, and reporting.
- GovernanceCSpace One
- VisibilityCSpace 360
- RemediationCSpace Pro
- AwarenessAwareness campaigns
Different teams, the same record of the work.
-
GRC teams
Structure assessments, organize controls, collect evidence, manage policies, and monitor compliance scores.
-
IT and infrastructure teams
Review technical findings, endpoint data, device inventories, patch recommendations, assigned tickets, and remediation deadlines.
-
Security operations teams
Manage incidents, operational tickets, escalation, response actions, and queues.
-
Executive leadership
Review high-level security posture, compliance progress, open risks, operational trends, and accountability.
What an internal program gets, module by module.
- Available now
- Available with configuration
- In development
- Planned
- 01Available now
Governance and compliance
Frameworks, assessments, and a compliance dashboard for your own program.
- Built-in and custom frameworks
- Assessments with deadlines and weighted questions
- Compliance scores and open control gaps
- Domain and control performance
- Policy documents in private storage (with configuration)
- Evidence management (in development)
- 02Available nowagents and network scans require configuration
Technical visibility
Websites, endpoints, and networks in one operational view.
- Website security checks with evidence and remediation
- Windows endpoint agent telemetry and software inventory
- Network discovery from an authorized endpoint
- Network security scans of authorized targets
- Asset inventory and CMDB (in development)
- Vulnerability management (in development)
- 03Available now
Remediation
Findings become tickets with owners, deadlines, and retests.
- Convert findings into tickets
- Severity-based deadlines
- Comments and recorded activity
- Guided remediation and AI-assisted text (with configuration)
- Retesting for supported scan workflows
- Prioritization and patch management (in development)
- 04Available with configuration
Awareness
Training and safe phishing for employees.
- Editable 10-question modules in English and Arabic
- Unique quiz per recipient
- Score-based study material
- Safe phishing simulations with no credential collection
- Purpose-separated email profiles
- 05Available nowincidents and SOC in development
Operations
Tickets today, incident and SOC workflows as they expand.
- Support ticketing with category, priority, and ownership
- Incident records and escalation (in development)
- SLA targets and breach warnings (in development)
- Recommended response actions with approval (in development)
- 06In development
Reporting
Views available now; expanded report types and analytics in development.
- Compliance, findings, tickets, campaigns, assets, and agent views
- Executive security posture report
- Remediation progress report
- Training and phishing-awareness reports
Governance, evidence, accountability, and framework alignment for audit preparation.
Organizations aligning their programs with Saudi and international frameworks can structure assessments against NCA ECC, SAMA CSF, NCA CCC, ISO/IEC 27001, NIST CSF, PCI DSS, or their own frameworks, keep responses and evidence organized, and show progress over time. CSpace 360 helps you assess and monitor alignment; certification decisions remain with the relevant authority or auditor.
Discuss your compliance program.
Tell us which frameworks you work with and what your team needs to see. We will show the workflows that apply.