Essentials
£249/mo
or £199/mo billed annually
compliance, plus automation
Start free →Works with the tools you already have.
786 Cyber reads from your existing environment — identity, devices, threats — and brings it into a single, connected security picture. You keep your tools. We make sense of them.
See all integrations ↓Bring what you already have.
Whatever you already run comes in as evidence — validated, held in the Evidence Vault, and connected to the controls and assets it relates to. Then the platform keeps going: aggregating your assets from every connected source, validating against its own feeds, and prioritising by what your existing tools can't see.
V
Vulnerability scanner output
CSV or JSON export from the scanner you already run. Findings validated against NVD, EPSS and CISA KEV, attached to the assets and controls they relate to.
A
Accredited scan reports
Your ASV or accredited vendor's report, into the Evidence Vault, mapped to the controls it supports.
P
Pen test reports
A pen test report is evidence. Upload it and it lives in the Evidence Vault against the controls it proves.
S
Software inventories and SBOMs
Existing inventories imported and matched to CVEs; CycloneDX in, CycloneDX out.
S
Spreadsheets and exports
People, assets, GRC exports — CSV import with field mapping, validation before anything saves, and a 24-hour rollback.
Directory & Identity
M
Microsoft 365 / Entra ID
Syncs your user directory, device inventory, and MFA status automatically.
Environment & People G
Google Workspace
Imports users and managed devices from Google Admin. Keeps your directory current as your team changes.
Environment & People C
CSV Import
Upload your own people or asset spreadsheet — field mapping, validation before anything saves, automatic department fuzzy-matching so "IT" and "I.T." don't fork into two departments, and a 24-hour rollback if you need to undo it.
Environment & People + AssetsThreat Intelligence
H
HaveIBeenPwned
Monitors your domains for credential breaches. Surfaces compromised accounts before they are exploited.
Technology & Threats V
VirusTotal
Real-time domain, URL, and file reputation. Feeds your external exposure view.
Technology & Threats S
Shodan
Identifies open ports, exposed services, and CVEs on your IP ranges.
Technology & Threats D
DNSTwist
Detects typosquatting and lookalike domains targeting your brand.
Technology & Threats C
crt.sh
Discovers subdomains via certificate transparency logs. Surfaces shadow IT.
Technology & Threats O
OWASP ZAP
Scans your web applications for active vulnerabilities — injection, broken auth, misconfigured headers — while they are running, not just as written.
Technology & Threats P
Prowler
Audits your AWS environment against CIS benchmarks and cloud best practices — surfaces misconfigurations before they become breaches.
Technology & Threats C
CycloneDX
Exports a standards-compliant CycloneDX SBOM for every scanned asset — drops straight into your existing supply-chain and vulnerability tooling.
Technology & Threats M
MITRE ATT&CK
All 31 frameworks cross-mapped to ATT&CK Enterprise v18.1 — threat context alongside compliance scores.
Policy & Process N
NVD / CVE Database
Vulnerability scoring and patch prioritisation from the authoritative source.
Technology & Threats A
AbuseIPDB
IP reputation intelligence for malicious traffic identification.
Technology & ThreatsDon't see what you need?
No native connector for your tool yet? CSV import means you're never blocked in the meantime — bring your data in today. And if there's a specific integration or field-mapping template that would save your team real time, tell us. We build what organisations actually ask for.
Request an integration or templateYour environment. Our ecosystem.
Connect your first integration and start building a unified picture of your security posture.
Start free →