Not a test once a year.
A cycle every month.
Five components run on a monthly rhythm and close with a single executive report — no new headcount, no infrastructure to build, no eleven quiet months between assessments.
An annual pentest report is filed away. The next month isn't.
A service opened after the test sits exposed until the next one — and the leak, if there is one, is usually heard about from a third party. A programme run every month closes that gap.
Same rhythm, every month
The surface is rescanned, the phishing campaign re-run, the score recalculated — on a fixed monthly cadence, not whenever budget allows a project.
Run for you, not by a new hire
Scanning, verification and reporting are handled by the team behind the platform — no analyst to recruit, no tool to learn.
One executive report closes the cycle
Every month ends the same way: a report a director can read, with the score, the trend and the next actions — not a raw export.
The same five services, run for you every month.
Each component draws on the Security Vault's services and feeds directly into the posture score.
Web surface scan
Everything you have published, seen the way an attacker sees it.
Vulnerability assessment
CVE-based detection, CVSS prioritisation, verification of closed findings.
Phishing simulation
Department-level scenarios that measure the human factor instead of guessing it.
24/7 threat intelligence
Dark web, forums and leak platforms watched for your domains and credentials.
Posture score
All of it in one number, one trend line and one report.
Four weeks, the same order, every month.
Nothing about the cycle changes as your posture improves — only what the report has to say does.
Scan
Surface and inventory refreshed.
Test
Phishing campaign run and measured.
Analyse
Findings verified, duplicates merged, score computed.
Report
Executive report delivered, next actions agreed.
Every cycle feeds the same score.
The programme is the operating rhythm; the Security Vault is where each component runs and the Posture Score is where the results land.
No new headcount
Scanning, phishing delivery and report writing are handled for you — your team reviews findings, not tool output.
Delta by design
Each month's report is built to compare against the last one, so a fixed finding stays visibly fixed.
One report to circulate
The same executive report goes to the board, the auditor and the insurer — no separate summary to write by hand.
Your first cycle starts with a free assessment.
We run week one of the programme at no cost and hand you your first posture score — before you commit to a monthly plan.