Assura - Cyber Risk Management Platform

Know exactly where your security stands.

One platform for your whole security programme: connect your stack for a live posture in seconds, assess against 20 frameworks, quantify the risk in pounds, dollars or euros, manage suppliers and staff, and share a trust page and audit evidence - the work you would normally buy as a consulting engagement, run continuously.

Leave your email and you're first in line when onboarding opens - no obligation.

20 frameworks supported today

NIST CSF 2.0 ISO 27001 SOC 2 Type II PCI DSS HIPAA GDPR CIS Controls NIST 800-171 Cyber Essentials Essential Eight ISO 22301 CSA CCM FFIEC CAT Cyber Basics DORA NIS2 ISO 27701 SOC 1 CMMC 2.0 ISO 42001

More on the way - or build your own framework from your internal controls, and request any standard from inside the app.

How it works

From first control to final report.

Three steps. No scoping calls, no statements of work, no waiting for a write-up.

01

Connect your stack

Link Microsoft 365, Google Workspace, AWS or GitHub and Assura checks your controls against your live environment in seconds - a real security score before you answer a single question.

02

Assess with evidence

Go deeper against 20 frameworks. Attach policies and exports, and Assura scores each control on the framework's own scale, using your live checks as evidence, with reasoning you can override.

03

Run the whole programme

Reports, a risk register, exposure in your currency, supplier and staff attestations, a public trust page and read-only auditor access - all from the same evidence, kept continuously up to date.

Why teams switch

The work of an engagement, without the engagement.

Assura does the measuring, tracking and reporting that consulting hours are usually spent on - so you only pay people for judgement.

With Assura
A typical consulting engagement
Getting started
Sign up and start assessing today
Scoping, proposal and onboarding first
Cost
One subscription, everything included
Fees set per engagement
Frameworks
All 20, on one subscription
Scoped one at a time
Reports
Generated the moment you finish
Written up after the engagement
Reassessment
Whenever anything changes
Usually a new engagement
Evidence
Uploaded once, reused across frameworks
Collected fresh each time

Consultants still matter for bespoke advice. Assura handles the measurement in between - and if you are a consultancy, it does the heavy lifting for your client work too.

Inside the platform

Everything a security programme needs to run.

Assura scoring, with reasoning

Every control is scored 0-4 with written reasoning based on your answers and evidence. Disagree? Override it - your call stands, and Assura learns from it.

How scoring works

Cross-framework mapping

Finish one framework and see how far it already carries you toward the others. Mapped controls pre-fill, so the second framework is never a blank page.

Explore assessments

A living risk register

Every gap becomes a trackable risk with severity, ownership, treatment and review dates - plus remediation tasks your team can actually work through.

Explore the risk module

Reports people actually read

Executive-ready PDF and slide exports, generated from your results in one click - with an inline studio to refine the narrative. Behind them sits the Boardroom: an agent that sweeps your posture overnight and briefs you each morning.

Explore the Boardroom

AskAssura

Ask questions about your own results in plain English and get grounded answers - scoped to your data, and only your data.

Built for teams and consultancies

Invite your team with role-based access - or run assessments for multiple client organisations from a single account.

Continuous monitoring

Connect Microsoft 365, Google Workspace, AWS or GitHub and Assura runs read-only checks against your live environment - MFA, admins, policies, branch protection - and feeds them straight into your scores.

Explore all 18 connectors

Risk in pounds, dollars or euros

Turn your posture into an estimated annual loss exposure, with the reduction a remediation programme would deliver - the number a board and an insurer understand.

See exposure modelling

Vendor and supplier risk

Send suppliers a security questionnaire they complete in the browser, and Assura assesses the answers into a clear third-party risk rating with specific concerns.

Explore vendor risk

Trust page and questionnaire answering

Publish a public trust page - with an AI assistant that answers buyers' security questions for you - and auto-answer the questionnaires your own customers send, drafted from your assessments.

Explore the trust page

People and auditor evidence

Track who has acknowledged your policies and completed training, then hand your auditor a single read-only link to the control-by-control evidence - no exports, no back-and-forth.

Explore People & Attestations

Policy Studio

Generate the security documents your programme needs - incident response, access control, data protection and more - drafted from a few answers, then refined and exported board-ready.

Explore Policy Studio
Get started

See where you stand.

Join the waitlist and you're first in line when onboarding opens - we'll walk you through the platform running for your organisation.

One email when your spot opens - nothing else.