Built for assurance teams, not just individuals
Assurance is a team sport. CyConex is built around organisations, projects, roles, and invitations, so internal teams and external assessors can work from a shared, controlled evidence base.
Multi-tenant structure and role-based access mean you can scale assurance across the organisation without losing control of who can see and change what.
Early access · Free · No credit card required
CyConex structures work into organisations and projects, each with isolated evidence namespaces.
That keeps evidence, assessments, and review history scoped to the right workspace, so teams only access what they are authorised to use.
Role-based access control governs who can ingest evidence, run assessments, review outputs, and manage configuration.
Invite internal colleagues and external assessors to a shared evidence base, supporting the self-assessment and independent review dialogue that frameworks like CAF are designed to encourage.
Assessor status pinning lets reviewers set a per-obligation status that persists across reruns, so expert judgement is not overwritten when assessments are refreshed.
Combined with reviewer sign-off and audit logging, this keeps accountability with qualified people even as the team and the number of projects grow.
Give your assurance team a shared, controlled platform — sign up free for early access.
Early access · Free · No credit card required
CyConex is an AI-assisted cyber assurance platform built for UK NCSC CAF assessments. It ingests evidence, surfaces it against contributing outcomes and IGPs, and helps qualified assessors reach evidence-led judgements faster — turning days of assurance work into minutes.
No. AI agents accelerate evidence gathering and review, but accountability stays with qualified assessors. Reviewers validate scope, review IGP judgements, and approve every output that goes into a formal report, so conclusions remain defensible.
CyConex is hosted in UK Azure regions. Customer evidence, assessment outputs, and platform metadata are stored and processed within the United Kingdom, supporting organisations with UK data residency requirements.