Cywift · Turn Chaos into Clarity

01 · Platform

CTEM‑first. CRQM and TPRM share the same exposure ledger.

Put a number on cyber risk · and a dollar on every decision.

FAIR + Monte Carlo engine50k‑iteration scenarios with tunable LEF/LM distributions and confidence intervals.

Control ROI modelingSimulate the dollar impact of a new SIEM, MFA rollout, or EDR before you buy it.

Board‑ready reportingExport audit‑grade PDFs mapped to NIST CSF 2.0, ISO 27005, and SEC disclosure rules.

Explore CRQM →

crqm / scenario‑modeler

● LIVE

Annualized Loss Exposure

$12.8M/yr

▼ 6.4% MoM

Top loss scenarios

Ransomware · HQ$4.2M+12%

Vendor breach · Tier‑1$3.1M−4%

Insider data loss$1.9M−9%

Cloud misconfig.$1.4M−18%

Control ROI preview

Deploy EDR across east region

−$2.1M/yr

Payback in 7 mo

Every finding, ranked by real‑world exploitability.

CISA KEV + EPSS + CVSS, fusedFindings re‑scored every hour against KEV catalog, EPSS probabilities, and CVSS base — no single signal wins.

Threat‑confidence overlayAdversary telemetry, dark‑web chatter, and PoC velocity collapse into a HIGH/MED/LOW confidence band per CVE.

Mobilization workflowsTop‑ranked findings auto‑route to owners in Jira, ServiceNow, or Slack with SLA‑aware escalation.

Explore CTEM →

ctem / prioritisation‑engine

● SCORING

Findings

1,847

+38 critical

In KEV

147

+9 today

EPSS > 0.9

avg 0.94

MTTR

3.2d

−1.4d

Findings · prioritised

CISA KEV EPSS CVSS THREAT CONF.

Finding

KEV

EPSS

CVSS

Threat

Score

CVE‑2024‑38077RDL · Win Server

YES

0.974

9.8

HIGH

CVE‑2024‑21887Ivanti Connect

YES

0.962

9.1

HIGH

CVE‑2024‑3400PAN‑OS GlobalProtect

YES

0.946

10.0

MED

CVE‑2023‑46805Ivanti Policy Secure

0.918

8.2

MED

CVE‑2024‑27198JetBrains TeamCity

YES

0.862

9.8

LOW

CVE‑2023‑34362MOVEit Transfer

0.741

9.8

LOW

Re‑scoring continuously 1,847 findings · top 6 shown

Your vendors' risk is your risk. Monitor it like you'd monitor your own.

Continuous outside‑in scoringPassive attack surface monitoring plus dark web, breach, and certificate telemetry.

AI‑accelerated questionnairesSIG, CAIQ, and custom assessments · drafted, chased, and validated automatically.

Fourth‑party visibilityDiscover sub‑processors and concentration risk you didn't know you were exposed to.

Explore TPRM →

tprm / vendor‑registry

● MONITORING · 412

Vendor	Tier	Score	Exposure	Assessment	Δ 30d
Orbital Cloud	T1	86	$2.1M	Current	+4
Halix Payments	T1	64	$3.8M	Due 12d	−8
Saintly HR SaaS	T2	78	$0.6M	Current	+2
Meridian Logistics	T1	42	$4.9M	Breach flag	−19
Praetor Analytics	T2	81	$0.4M	Current	+1
Nordane Labs	T3	58	$0.2M	Due 4d	·

02 · Sovereign AI

AI that never leaves your perimeter.

The guarantee

Your exposures, incidents, vendor contracts, board memos and breach history are read by a model you own · and nothing egresses.

01

Deploys in your VPC, on‑prem, or fully air‑gapped

AWS, Azure, GCP, OpenShift, bare‑metal. Same control plane, same UX, zero outbound dependency.
02

Open‑weight models, fine‑tuned for risk

Llama‑class reasoning core plus Cywift's CRQM‑tuned adapters. No OpenAI, Anthropic, or Google round‑trips.
03

Customer‑managed keys, end to end

BYOK via AWS KMS, Azure Key Vault, HashiCorp Vault, or HSM. Cywift cannot decrypt your tenant.
04

Regional residency, by law

EU, UK, DACH, GCC, APAC and US‑Gov regions. DORA‑, NIS2‑, and GDPR‑aligned out of the box.
05

Cryptographic audit trail

Every prompt, retrieval, and model output is signed, hashed, and anchored · so auditors can replay any decision.

YOUR ENVIRONMENT · eu‑west‑1 · tenant‑0a41 isolated · customer‑managed keys

cywift‑core

Risk‑LM · 34B

218 t/s ctx 32K int8

· on‑device · TEE · BYOK

CTEM telemetry

CRQM ledger

TPRM contracts

SIEM · EDR

customer‑controlled boundary

EXTERNAL · denied by default egress=∅

OpenAI API Anthropic API Google Vertex Azure OpenAI Third‑party embeddings

05 · FAQ

Questions we hear from CISOs, answered.

A traditional risk register is a static spreadsheet of qualitative heatmap colors. CRQM ingests live telemetry from your controls and CTEM module and runs 50,000‑iteration Monte Carlo simulations grounded in the Open FAIR model, so every risk has a probability distribution and a dollar value that updates continuously. You can defend it in front of an auditor, a regulator, or a board.

No. CTEM is layer‑agnostic. We integrate with Tenable, Qualys, Rapid7, Wiz, CrowdStrike, Microsoft Defender, and 40+ other tools as sources. Cywift does the correlation, validation, and prioritization on top.

We continuously map your vendors' sub‑processors using a combination of disclosed data, DNS and certificate telemetry, and AI extraction from trust center content. You'll see concentration risk (e.g. 38% of your Tier‑1s depend on the same IaaS region) and can model outage scenarios from it.

NIST CSF 2.0, ISO 27001/27005, SOC 2, PCI DSS 4.0, HIPAA, DORA, NIS2, the SEC cyber disclosure rule, and 20+ industry frameworks. Mappings are bi‑directional and customizable.

First quantified risk model in 2 weeks. Full deployment across CRQM, CTEM, and TPRM in 6–10 weeks depending on integration count. We include a named implementation engineer for every deployment.

Single‑tenant by default with regional data residency in US, EU, and APAC. We are SOC 2 Type II, ISO 27001 certified, and undergo annual third‑party penetration tests. BYOK with AWS KMS and Azure Key Vault is standard.

Security Tools creates Signals. Singularity creates Clarity.

Every Threat Exposure Prioritised.

Price Risk in Dollars, not Colours.

Assess Vendors as if they were you.