Evidence ingestion
Upload and organise Word, PDF, Excel, and text evidence into project or organisational libraries.
Features
From evidence to assurance
Explore CyConex capabilities — from evidence ingestion and SharePoint connection through to AI-assisted control assessment and audit-ready exports.
Sign up freeEarly access · Platform free · Pay only for AI usage
Extract and structure evidence
Parse document content and organise evidence into structured, reviewable formats.
Map evidence to CAF outcomes
Link extracted evidence to NCSC CAF contributing outcomes and IGPs within your target profile.
AI-assisted assessment
Support assessors with AI-driven evidence review, gap analysis, and finding suggestions.
Findings and reports
Produce structured assessment findings and exportable reports for stakeholders and auditors.
Dashboards and metrics
Track assessment progress, coverage, and compliance posture through visual dashboards.
NCSC CAF-first framework support
Assess evidence against the NCSC Cyber Assessment Framework, with NIST 800-53 and custom catalogues also supported.
Supplier assurance
Review third-party evidence and assess supplier compliance posture efficiently.
Audit preparation
Prepare structured evidence packs and findings ahead of external audits.
Cyber Essentials
Guided, questionnaire-driven Cyber Essentials with answer guidance and certification-ready output.
Continuous assurance & scheduling
Run recurring assessments on a schedule and track an assurance history across cycles.
Shareable dashboards & heatmaps
Publish public or permissioned CAF and NIST heatmaps that stay current from live assessments.
Custom report builder
Build custom Word report templates with a tag catalog, plus Excel, Word, and heatmap exports.
Risk appetite & AI remediation
Compare assurance to risk appetite and turn findings into downloadable remediation actions.
Teams, roles & collaboration
Organisations, projects, RBAC, and invitations with a shared, controlled evidence base.
Safe AI & data protection
Prompt-injection screening and sensitive-data sanitisation before evidence reaches the AI.
Features described on this page reflect the current early access product and may change as CyConex evolves.
Frequently asked questions
Which frameworks does CyConex support?
NCSC CAF is the primary framework — four objectives, fourteen principles, 41 contributing outcomes, and IGPs. CyConex also supports Cyber Essentials, NIST 800-53, NIST CSF 2.0, and custom control catalogues, with structured catalogues and reusable assessment context.
Can CyConex ingest SharePoint evidence?
Yes. You can connect Microsoft 365 and SharePoint sources to keep your evidence library aligned with the systems in scope, or upload documents directly. Evidence stays scoped to the right organisation and assessment programme.
Does CyConex support NCSC CAF IGPs?
Yes. CyConex works with the full CAF catalogue, including Indicators of Good Practice. It surfaces relevant evidence for each contributing outcome and helps teams record achieved, partially achieved, or not achieved judgements with traceable references — IGPs inform conclusions, they do not replace expert judgement.
Can CyConex export Word and Excel reports?
Yes. CyConex generates structured Excel and Word assessment exports, along with CAF heatmaps at objective and principle level — ready for GovAssure reviewers, competent authorities, and governance stakeholders.