Your modules
A module is a part of the platform you turn on for one job: one of four content modules, GRC / compliance, Attack surface (CTEM), Identity exposure & dark-web monitoring or Cloud posture (CSPM), or Pentest as a Service.
You choose modules in the setup wizard; see Set up your organisation. Pentest is not in the wizard: open Pentest › Engagements to start one.
| Module | For you if | What it finds or produces |
|---|---|---|
| GRC / compliance | An audit, certification or customer questionnaire is coming | Framework scores, evidence, risks, policies and reports |
| Attack surface (CTEM) | You have a public domain | The assets and findings an outsider can see |
| Identity exposure & dark-web monitoring | Staff addresses on your domain may appear in breaches | Leaked and breached credentials for your domain |
| Cloud posture (CSPM) | Your organisation runs on cloud and identity services such as Microsoft 365 | Pass and fail results for their configuration |
| Pentest | You run penetration tests | Engagements, their findings and a client-ready report |
Names you will see
| On the pricing page | In the setup wizard | In the app |
|---|---|---|
| GRC / compliance | Governance & compliance | Compliance |
| Attack surface (CTEM) | Attack surface scan | Exposure |
| Identity exposure & dark-web monitoring | Identity exposure scan | Dark web |
| Cloud posture (CSPM) | Cloud security posture management | Cloud posture |
| Pentest as a Service | Not in the wizard | Pentest |
To add a module later, see Project settings. The number of modules depends on your plan; see pricing.
Shared across modules
Home
Your posture at a glance.
AI Sidekick
Questions, answers and proposals.
Tasks
Proposals, actions and scans.
Risk
Your register of scored risks.
Assurance
Evidence and reports.
- GRC / complianceThe GRC / compliance module shows where you stand against the frameworks you are held to, such as ISO 27001, NIST CSF, SOC 2 and Essential Eight, proves it with evidence, and reports it.
- Attack surface (CTEM)The Attack surface (CTEM) module scans your domain from outside to show what an outsider can see of your organisation, and which exposure findings to triage and fix first.
- Identity exposure & dark-web monitoringThe Identity exposure module finds leaked credentials, breached passwords and exposed account addresses tied to your domain, for you to resolve once the account is secured.
- Cloud posture (CSPM)The Cloud posture (CSPM) module shows pass and fail configuration results for the cloud and identity services you connect, such as Microsoft 365, mapped to framework controls, and tracks a fix or an exception for each failing check to a decision.
- PentestThe Pentest module records each penetration test as an engagement, from scope to findings to an approved report, and tracks its findings to a fix.
Did this answer your question?
Introduction
CISO360AI is a security and compliance platform that finds your exposure, tracks risk and keeps you audit-ready.
GRC / compliance
The GRC / compliance module shows where you stand against the frameworks you are held to, such as ISO 27001, NIST CSF, SOC 2 and Essential Eight, proves it with evidence, and reports it.