CyberFit - the platform

The work a security team does, running whether you have one or not.

Most organisations with fewer than 250 people end up with four or five security tools, nobody who owns them, and no honest answer when someone asks how exposed they are. CyberFit replaces that with one platform and a standing set of jobs that get done on a schedule.

Book a demoView pricing

Used by law firms, recruiters and accountancy practices.

WHAT YOU GETCYBERFIT
One contractSix functions, one renewal, one support line.
See results in minutesInstall the agent, enter your domain, hit scan - assets and exposure show up immediately, not after a week of onboarding.
Evidence by defaultEvery action logged in the form an auditor asks for.
THE SIX

What is included, in plain terms

01
Attack-surface monitoringRuns continuously
“We don't know what we've left open to the internet.”

We map what of yours is reachable from the internet - domains, subdomains, cloud storage, forgotten staging boxes, exposed admin panels - and keep watching as it changes. Findings arrive ranked by how quickly an attacker could actually use them, not by generic severity score.

External asset discoveryCertificate and DNS driftShadow IT detection
Also sold standalone as Exposure →
02
Endpoint protectionAlways on
“If one laptop gets infected, we won't know until it's too late.”

Detection and response on Windows, macOS and Linux, deployed with a single universal installer per platform and managed from one console. When something trips, you get the device, the user, what ran, and what we did about it - in one screen, without needing to read raw telemetry.

Windows, macOS, LinuxUniversal installerDevice isolationPlain-language alerts
03
Patching and remote managementWeekly cycle, emergency out-of-band
“Nobody actually patches anything.”

Operating systems and third-party applications updated on a cycle you set, with staged rollout so a bad vendor patch does not take out the whole fleet at once. What is outstanding, and why, is visible at all times - including the machines someone keeps postponing. Remote support sessions always ask the user, and every session is recorded.

Third-party app patchingStaged ringsException trackingRemote sessions (consented, recorded)Script librarySoftware deploymentPerformance monitoring
04
Ransomware rollbackOn-device, versioned
“If ransomware hits, we lose our files.”

Ransomware's first move is to delete your backups. CyberFit keeps versioned copies of your important files, encrypted on the device before they leave it, and protects them from being deleted. If something goes wrong, you restore the version you need and check it restored correctly.

Versioned filesDeletion-protectedEncrypted on the deviceRestore checks
Windows today; macOS and Linux to follow.
05
AI governancePowered by Nudger
“Staff are pasting client files into ChatGPT.”

Your staff started using AI tools before anyone wrote a policy. CyberFit inventories which assistants and models are actually in use, applies the rules you set about what data can go where, and shows you where day-to-day practice has drifted away from the policy on paper.

AI tool inventoryData-boundary rulesDrift reporting
06
Compliance evidenceCollected as you operate
“A client sent a security questionnaire and we don't know what to say.”

Controls are mapped to the frameworks your customers ask about, and the evidence is gathered while the work happens. When a security questionnaire or an audit lands, you export what already exists rather than spending three weeks reconstructing the last twelve months.

ISO 27001, SOC 2, Cyber EssentialsQuestionnaire exportControl owner tracking
Pass Cyber Essentials Plus without a consultant: CyberFit gathers the evidence; our partner SecQuest carries out the assessment.
RUNS ACROSS ALL SIX

A-Monk: the adviser layer, not a seventh function

A-Monk isn't a chatbot bolted onto the platform - it's the expert-assistance layer that operates across all six functions above. It can explain a finding, prioritise what to act on, support your policy and compliance work, and draft fixes and scripts that run only when an admin confirms them.

Security analystExplains what a finding actually means and how it was triaged, in language that doesn't require a security background to follow.
Patch engineerHelps prioritise what to patch first and can generate remediation and patch scripts, which run only when an admin confirms.
Compliance adviserMaps findings and evidence back to the frameworks you're tracking, and helps close the gaps it identifies.
AI governance adviserSurfaces where Nudger's policy and day-to-day AI use have drifted apart, and what to do about it.
Recovery adviserTalks you through the supported recovery workflow when something goes wrong, rather than leaving you to read a runbook alone.
FIRST FIVE DAYS

What onboarding actually looks like

DAY 1ConnectMicrosoft 365 linked, agent rolled out by installer or your device management.
DAY 2DiscoverAssets, endpoints and exposed services enumerated. Expect surprises here - everyone has some.
DAY 3-4Set the schedulePatch windows, backup targets, AI rules and control owners agreed with you, not assumed.
DAY 5First posture reportA written baseline: what is exposed, what is unprotected, what we are fixing first.
Runs alongside what you have

CyberFit connects to Microsoft 365 today, with Google Workspace and AWS available. Using something else? Ask about your stack.

Ask about your specific stack →
Want people, not just software?

Some teams want the platform run for them, an incident retainer, or a one-off assessment before they commit. That is what our services line is for.

See services →

Bring your worst assumption about your own estate

Thirty minutes, your environment, no slideware. We would rather show you the gaps than describe the product.

Book a demo