Product modules
Each module is part of a living program: a named owner, adopted policies, ongoing checks, and a report you can share — tied to the checklist they named. The examples below show that work in your dedicated dashboard—not a 24/7 security team or outsourced IT shop.
Essentials Plan
Ongoing two-step sign-in, admin, and sharing checks that keep the program in force.
Connect with a secure read-only link to Google Workspace, Microsoft 365, Dropbox, or Amazon Web Services, and CyberSafe.Now checks two-step sign-in coverage, privileged roles, audit logging, and risky sharing against your written policies. Checks update daily; you fix issues in the admin console with guided tasks. Amazon uses access keys (not a sign-in connection).
Essentials Plan
Name an owner, adopt policies, and finish the plan a third party can check.
After subscribe, a short questionnaire builds your written program: policy documents to adopt, a named owner, the checklist you will cite, automated checks to pass, and guided sign-offs. Essentials Plan lists the three core policies as optional; Monitor Plan includes them (Information security program policy, Incident response policy, and Data handling and classification policy); Assure Plan includes the full set of 10 policy templates.
Essentials Plan
Disk encryption, updates, and screen lock across Windows and Mac laptops.
Enroll laptops with a small app on each device, approve them through the dashboard, and track the device checks on your plan—encryption, update age, and screen lock. Monitor Plan adds antivirus presence, unexpected open network services, who has administrator rights, Wi‑Fi, and known vulnerable or no-longer-supported software. Assure Plan adds a browsable installed-applications inventory.
Essentials Plan
Email authentication plus regular scans of your public website.
Check that your mail domain is set up so others can't fake your email, then—when you consent—run scheduled scans of your public website for open doors, HTTPS problems, and exposed admin logins. Monitor Plan adds deeper remote-desktop checks and public software version checks.
Essentials Plan
Document your backup approach—and optionally keep monthly platform evidence packs on disk.
Essentials Plan requires a tailored data backup policy (reviewed every 90 days). CyberSafe stores that policy as evidence a third party can review—we do not run or validate your backup product. Add the $49/mo compliance evidence archive (included on Assure Plan) for monthly packs of your account records and report snapshots on the disk that holds your dashboard, downloadable while entitled. It is not a full backup of Gmail, Shared Drives, or laptop disks.
Essentials Plan
Shareable reports with a checklist appendix and an optional signed risk assessment.
Generate snapshots of control status, exceptions, module evidence, and fix-it history, then download a permissions-locked PDF, email contacts, or create an expiring share link. Monthly and renewal reports include a control-to-question appendix (the program ask each subscribed control answers). Renewal reports also include a control-to-checklist appendix and, when you ask, a written risk assessment with a program-owner signature block. A public sample shows the evidence summary and the control list you can share on request. Essentials Plan and Monitor Plan retain records for 6 months by default; add 3-year retention (+$10/mo, included on Assure Plan) so you can show what changed across multiple years. Assure Plan also adds installed-app inventory to reports. Each customer gets their own dashboard — this is not a shared partner portal.
Enable either add-on on Essentials Plan or Monitor Plan—or get both included on Assure Plan. Each one answers a specific third-party ask without buying another security product.
+$49.00/mo on Essentials & Monitor plans · included on Assure Plan
Monthly evidence packs on the disk that holds your dashboard.
+$10.00/mo on Essentials & Monitor plans · included on Assure Plan
Keep the audit trail far past one questionnaire.
Every control we support for Google Workspace, Microsoft 365, Amazon Web Services (AWS), or Dropbox teams, by plan — including downloadable policy templates (Evidence & policies rows marked policy template ). Identity names are the Google Workspace suite; Microsoft 365, AWS, and Dropbox swap the equivalent checks. Rows marked if appropriate appear only when your environment answers say they apply. Numbered footnotes mark identity controls that are not available or not relevant on AWS and/or Dropbox.
| Control | Essentials Plan | Monitor Plan | Assure Plan |
|---|---|---|---|
| Identity & cloud apps | |||
| Multi-factor authentication (MFA) enforced for all users | Included | Included | Included |
| Super admin count within policy | Included | Included | Included |
| Audit logging enabled for tenant | Included | Included | Included |
| Google Workspace Open Authorization (OAuth)/app consent review | Included | Included | Included |
| Drive external sharing posture | Included | Included | Included |
| Security alert routing configured | Included | Included | Included |
| Shared Drives in use for team data 2 | Included | Included | Included |
| Legacy app access restricted (Open Authorization (OAuth) enforced) | Included | Included | Included |
| No shared user logins detected | Included | Included | Included |
| Dormant accounts reviewed or disabled | Included | Included | Included |
| Joiner/leaver process documented and followed | Included | Included | Included |
| Advanced spam and phishing protection configured 1 | Included | Included | Included |
| Laptops | |||
| Full-disk encryption on endpoints | Included | Included | Included |
| Operating system (OS) patch posture within policy | Included | Included | Included |
| Screen lock policy on endpoints | Included | Included | Included |
| All endpoints enrolled in device management | Included | Included | Included |
| No risky local admin states on endpoints | Not included | Available | Available |
| Secure Wi-Fi on endpoints | Not included | Available | Available |
| No risky services listening on endpoints | Not included | Available | Available |
| No known-vulnerable software on endpoints | Not included | Available | Available |
| SPF, DKIM, and DMARC configured | Included | Included | Included |
| Public exposure | |||
| Transport Layer Security (TLS) hygiene for public hostname | Included | Included | Included |
| No exposed admin services on public hostname | Included | Included | Included |
| Web application firewall (WAF) or content delivery network (CDN) in front of public application if appropriate | Not included | Available | Available |
| Public web surface documented if appropriate | Not included | Available | Available |
| Remote Desktop Protocol (RDP) not exposed on internet or endpoint listeners if appropriate | Not included | Available | Available |
| HTTP Strict Transport Security (HSTS) enabled on public Hypertext Transfer Protocol Secure (HTTPS) site if appropriate | Not included | Available | Available |
| No known-vulnerable public software versions if appropriate | Not included | Available | Available |
| File transfer | |||
| Legacy File Transfer Protocol (FTP) decommissioned or replaced if appropriate | Available | Available | Available |
| Evidence & policies Policy templates download from the dashboard. | |||
| Data backup policy documented policy template | Included | Included | Included |
| Incident response playbook documented | Included | Included | Included |
| Remote work security acknowledged if appropriate | Included | Included | Included |
| Dual control for payment changes policy template if appropriate | Not included | Available | Included |
| Acceptable use policy documented policy template | Not included | Available | Included |
| Data handling and classification policy documented policy template | Available | Included | Included |
| Password and access control policy documented policy template | Not included | Available | Included |
| Information security program policy documented policy template | Available | Included | Included |
| Incident response policy documented policy template | Available | Included | Included |
| Remote work security policy documented policy template if appropriate | Not included | Available | Included |
| Third-party and vendor risk policy documented policy template | Not included | Available | Included |
| Backup and business continuity policy documented policy template | Not included | Available | Included |
| Security awareness training policy documented policy template | Not included | Available | Included |
| Renewal evidence pack available | Not included | Not included | Included |
| Integrations | |||
| Endpoint detection and response (EDR) integration connected if appropriate | Not included | Available | Available |
1 Not available on AWS or Dropbox
2 Not available on AWS
Ready for a security dashboard built around a program you can prove?
Contact Us for Pre-Release