Incident in progress?Call +48 699 587 010
  1. FortCyber
  2. Platform

A shared platform for your team, our experts and your infrastructure A service you can see. The FortCyber team runs the platform, and you see the status, tasks and decisions.

  • web application with agents
  • Polish data centre
  • no hardware investment
Illustration · sample data

How it fits together

The FortCyber team works on the platform, the platform collects data from your organisation, and you see everything in one place.

Hover over or tap an element of the diagram to see the details.

Security status oversight
Cyber emergency response
Threat detection
Operational management (ISMS)
Secure cloud
FortCyber expert teamruns your security
  • Security managerYour dedicated contact
    • coordinates tasks and deadlines
    • runs reviews
    • reports to the board
  • ISMS officerRuns the ISMS
    • coordinates duties set by the board
    • keeps reviews and tasks on schedule
    • supports management decisions
  • ISMS auditorsAssessment and management system
    • review of documentation, procedures and policies
    • keeping the ISMS aligned with regulations
    • management reviews
  • Security analystsResults consulting
    • consult on automated analysis results
    • help prioritise fixes
    • support IT with harder events
  • LawyersIncident support
    • legal support
    • incident reporting to authorities
    • communication with customers and suppliers
  • TrainersPreparing people
    • training and knowledge tests
    • social engineering campaigns
    • simulator exercises
FortCyber platformweb application with agents
  • Management dashboardManagement dashboard
    • real-time view of security status and threats
    • level of formal compliance
    • the team's top tasks
  • ISMSProcesses, procedures, documentation
    • security management automation
    • responsibilities assigned to people and roles
    • task completion tracking
  • Console and agentsIT infrastructure 24/7
    • agents report status continuously
    • automated analysis and vulnerability matching
    • notifications to the right people
  • Incident handlingFast incident support
    • immediate response
    • ready-made document and action templates
    • complete incident documentation
  • Training and simulatorStaff skills
    • automated training and awareness tests
    • social engineering resilience testing
    • isolated practice simulator
  • Action historyAudit readiness
    • continuous record of actions
    • evidence of every step for the auditor
    • board reports
Secure cloudthe platform foundation
  • Browser accessNothing to install on your side
    • fast service start
    • easy to use
    • no investment in your own tools
  • Management and operational rolesEveryone sees their own
    • management — status and decisions
    • IT and ISMS officer — tasks and deadlines
    • staff — training
  • Data centre in PolandData security
    • certified data processing centre
    • data kept in Poland only
    • data and communication security
  • WorkstationsagentAgent on the device
    • reports the system, software and updates
    • checks security controls
    • results go to the platform
  • ServersagentAgent on the server
    • same scope as on workstations
    • vulnerabilities matched to software
    • alert when a patch is missing
  • NetworkIT network elements
    • scope agreed during rollout
    • per the scope: IT network elements
  • StaffPeople
    • training and knowledge tests
    • phishing campaigns
    • results in reports
  • Documentation and processesYour organisation's ISMS
    • policies and procedures
    • risk register
    • roles and responsibilities
  • ManagementDecisions
    • status and compliance
    • recommendations to approve
    • reports on the platform

↑ data from agents and your organisation↓ experts' actions and recommendations

Five pillars of the platform

You buy a service, not another tool. Each pillar is the work of experts and automations that you can see on the platform.

  • Security status oversight

    Security status, formal compliance and the key tasks in the management dashboard. This is a view for management, not 24/7 monitoring.

    ISMS management
  • Cyber emergency response

    In an incident, action starts immediately: a report to the competent CSIRT, legal support, communication and complete documentation of the event.

    Ongoing security
  • Threat detection

    Agents and platform automations detect vulnerabilities and policy deviations and notify the right people. A round-the-clock SOC team comes with Resilience 24/7, an add-on to Cyber Care.

    Console and agents
  • Operational management (ISMS)

    Risks, roles, procedures, tasks and deadlines in one place. Documentation is kept up to date rather than prepared before an inspection.

    ISMS management
  • Secure cloud

    Browser access, a Polish data centre, and management and operational roles. No hardware investment on your side.

    Data and security

What you get on the platform

Eight modules, a clear split of tasks. See what FortCyber handles and what stays on your side.

  • Management dashboard

    • security status and threats
    • formal compliance
    • the team's top tasks

    FortCyber: assessment and priorities
    You: visibility and decisions

  • ISMS

    • processes, procedures, documentation
    • roles and responsibilities
    • task completion tracking

    FortCyber: runs the system
    You: approve and complete tasks

    ISMS management
  • Vulnerability monitoring

    • automated vulnerability detection
    • workstations, servers, network
    • resilience gap alerts

    FortCyber: analysis and recommendations
    You: fixes in IT

    Vulnerabilities in the console
  • Console and agents

    • agents report device status
    • software, updates, security controls
    • technical controls

    FortCyber: configuration and oversight
    You: install the agent

    Console and agents
  • Incident response

    • immediate response
    • reporting to the relevant CSIRT
    • complete incident documentation

    FortCyber: runs incident handling
    You: management decisions

    Ongoing security
  • Legal support and communication

    • legal handling of the incident
    • communication with customers and suppliers
    • ready-made document templates

    FortCyber: lawyers and templates
    You: approve communications

  • Training and simulator

    • training paths and knowledge tests
    • social engineering campaigns
    • isolated threat simulator

    FortCyber: programmes and campaigns
    You: your team’s results

    Training platform
  • Secure cloud

    • browser access
    • Polish data centre
    • management and operational roles

    FortCyber: setup
    You: no investment in hardware

The platform keeps watch 24/7. The right people know straight away

Agents installed in your infrastructure continuously monitor its resilience, while platform automations analyse events and notify the right people on their own. FortCyber experts advise and support when needed, and every step stays in the history.

  1. Report · agent

    An agent reports a missing critical patch on a server

    Agents report device status continuously, around the clock.

  2. Analysis · automation

    The platform rates the severity

    Automations match the vulnerability to the device and set a priority — without waiting for a human.

  3. Entry · notification

    The right people get a task

    An entry goes into the register and a notification goes to IT, the asset owner or the ISMS officer — depending on the event.

  4. Visibility · IT admins, ISMS officer, management

    Status and proof of completion in one place

    A closed task goes into the history and the report. A FortCyber expert consults when a decision calls for it.

The same automations track management events: risk review deadlines, overdue tasks and unfinished training.

Ongoing security

Who sees what

This isn’t another tool someone on your side has to operate. The FortCyber team runs the platform, and each person sees what they need for their work.

An IT administrator and the person responsible for security discuss a task from the FortCyber platform
  • Management

    Security status, compliance and decisions to approve, with the team’s recommendation.

  • IT admins and IT

    Devices, vulnerabilities and tasks with priorities and deadlines.

  • ISMS officer

    The ISMS, review deadlines, overdue tasks and evidence of completion.

  • Staff

    Their own training, knowledge tests and exercise results.

  • FortCyber team

    Everything, in a supporting role: the security manager, the ISMS Office and analysts work on the same data as you.

Data and security

“And how are you protected?” comes up in every procurement. Here is the short answer.

Where the data is

  • Polish data centre
  • browser access, no server to install on your side

Who has access

  • management and operational roles
  • each person sees only what they need for their work

What we confirm formally

  • GDPR and data processing agreements
  • backups and service terms agreed in the offer

See the platform on sample data

In the presentation we’ll show:

  • the management dashboard and the view for management
  • how a task reaches IT and comes back as evidence in the history
  • the ISMS module, console and training, depending on your interests

The presentation takes about 45 minutes and is run by a FortCyber consultant.

Incident in progress? Call +48 699 587 010

Full consent wording and data protection information

I consent to the processing of my personal data by iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37, for the purpose of responding to my enquiry and conducting further correspondence related to it.

I also confirm that I have been informed of my right to request from the controller access to my personal data and its rectification or erasure (“right to be forgotten”), restriction of processing and data portability, my right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO) – and my right to object to the processing of data for the direct marketing of iTrust sp. z o.o. products and services, in accordance with Art. 15.1 GDPR (2016/679).

The controller of the personal data provided in this form is iTrust sp. z o.o., with its registered office in Warsaw (00-689), ul. Poznańska 37. To exercise data subject rights, contact iod@itrust.pl or write to the registered office address.

We’ll get back to you within one working day.