Security, one step at a time
Security is a programme, not a product. We start with what matters most for your business and build from there.
Know where you stand
A penetration test, a cloud review or a compliance gap assessment shows what an attacker or an auditor would find today.
Close the biggest gaps
Strong sign-in and access control, fixes for the findings that matter, and the policies and controls your customers ask for.
Watch and respond
Our analysts watch for attacks, and our responders take over if something gets through, with evidence handled properly.
For managed security providers
CATEYE CyberSecurity is one multi-tenant platform where an MSP runs compliance, identity, detection and response, forensics, cloud security and penetration testing for all of its clients, each in its own isolated workspace.
Run a security practice? SignUp Here
The demo opens a sample MSP with four invented clients, read-only, with a narrated guided tour. No sign-up needed.
One partner workspace
Your staff and their roles, your clients and the work across all of them, from one console.
Modules per client
Switch on the services each client buys from you, with tiers and seats per client.
Clients see only their own
Each client signs in to its own workspace, kept apart by row-level security in the database.
Your brand
Your name, logo, colours and support details on the app, sign-in pages, PDF reports and emails.
Compliance and vCISO
SOC 2, ISO 27001, HIPAA, PCI DSS and NIST CSF readiness, run by a virtual CISO from our team, with controls, evidence, policies and audits in one place.
Frameworks
SOC 2, ISO 27001, HIPAA, NIST CSF 2.0 and PCI DSS with SAQ scoping, plus your own customers’ requirements, mapped to one set of controls.
Controls and evidence
Each control has an owner, a status and the evidence that proves it, so the next audit starts from what is already there.
Policies
Policy templates to start from, with reviews and approvals, and a record of who has read and accepted them.
Risks
A risk register with a risk library and simple FAIR-style scoring, which can take in findings from penetration tests.
Identity and access management
One sign-in to every app, MFA and passkeys, and accounts that follow people as they join, move and leave.
Single sign-on
One company sign-in to your business apps, so people stop juggling passwords and you control access in one place.
MFA and passkeys
Strong second factors including passkeys and authenticator apps, with rules for who must use what.
Joiners, movers and leavers
Accounts created, changed and removed as people join, change roles and leave, kept in step with your HR system.
Provisioning with SCIM
Users and groups kept in sync with connected apps and directories through SCIM 2.0.
Managed detection and response
Our analysts collect your security logs, detect threats, triage every alert and act with your approval.
Log collection
Security events from your cloud, email, identity and endpoint tools brought into one pipeline.
Detections
Detection rules written in the open Sigma format and mapped to MITRE ATT&CK, tuned to your environment.
Alert triage
Every alert reviewed by an analyst, with AI-assisted summaries to speed up triage. The AI advises, a person decides.
Response with approval
Containment steps such as disabling an account are proposed to you and run once you approve, including from an email link.
Incident response and forensics
When something goes wrong, our responders investigate, contain and report, with evidence hashed on collection and a full chain of custody.
Incident cases
Each incident is a case with its scope, tasks, timeline, decisions and people, so nothing is lost under pressure.
Chain of custody
Evidence is hashed when it is collected and every hand-over is recorded, including physical devices brought in.
Collection
Evidence gathered from computers, cloud services and email accounts, using established forensic tooling such as Velociraptor.
Timeline analysis
Events from many sources merged into one super-timeline, using tools such as Plaso, Timesketch and Hayabusa.
Cloud and network security
What you expose to the internet and what is misconfigured in your cloud, SaaS and firewalls, ranked and fixed.
Attack surface
Your internet-facing domains, IPs and services discovered and watched, so forgotten systems are found.
Cloud posture
Configuration checks for AWS, Microsoft Azure and Google Cloud, mapped to common security frameworks.
SaaS posture
Security settings checked in Microsoft 365 and Google Workspace, where many attacks start.
Firewall review
Configuration review for on-premises firewalls such as FortiGate and Palo Alto Networks.
Vulnerability assessment and penetration testing
Our testers try to break in before attackers do, and you follow findings, retests and reports in a live portal.
Scope and authorisation
Targets, rules of engagement and a signed authorisation agreed first. Testing cannot start without it.
Testing by our team
Web applications, APIs, mobile apps, networks and cloud environments tested by our penetration testers.
Live findings
Findings appear in your portal as they are confirmed, with evidence and a CVSS score, so you can start fixing early.
Retests
Ask for a retest when a fix is ready and see the result on the same finding.
All on one platform
The six services share our hosted security platform, so your systems, findings and reports live in one place.
Your data kept apart
Each client works in its own workspace, separated inside the database, with a tamper-evident audit log.
Services that work together
A cloud finding can become an incident case, and test results can feed your compliance risks, without copying.
Reports you can share
Branded reports for management, auditors and customers, from the same data our team works with.
How we work with you
Understand
We learn how your business runs, what you must protect and what your customers and regulators expect.
Assess
We find where you stand today with a test, a review or a gap assessment, and agree priorities with you.
Protect
We close the gaps and set up the services you need on our platform, with your people invited in.
Watch and improve
We monitor, respond and report, and plan the next step as your business and the threats change.
Start with what matters most
Try the platform yourself with sample data and a narrated guided tour, no sign-up needed.
Want to sign up for your company? SignUp Here