Portal

Session

Admin Console

Admin control center

Manage MSPs, billing, platform access, and use drill-down views only when you need client-level detail.

Scope: loading…

Admin navigation

Management

Run the platform from here: MSPs, billing, reporting, and access.

Operational views

Use these after selecting a client when you need controls, evidence, asset, or integration detail.

Overview

Platform overview

Start at the platform level, then choose one MSP only when you want to drill in.

Management snapshot

Run the platform from one place

High-level counts first, then billing and access decisions.

Trend and signals

Operational posture at a glance

Grouped so the trend data reads separately from management actions.

Readiness trend

Current scoped readiness until per-client rollup is added.

Evidence coverage trend

Coverage by active evidence, any evidence, and gap count.

Vulnerabilities by severity

Uses current scoped vulnerability data.

Directory and drill-down

MSP directory

Row click opens the MSP drawer. Expand shows clients inline.

MSP list

Select one MSP to load its clients.

Client list

Click a client to open its overview.

MSPs

MSP directory and client drill-down

Manage MSPs first, then drill into one MSP and its clients.

MSP directory

Click a row to focus one MSP. All actions remain available from this page.

Focused MSP

Core metrics and management actions for the selected MSP.

Focused MSP clients

Client list for the selected MSP with one-click drill-down actions.

Clients

Client drill-down and package posture

Select an MSP to focus client operations.

Client directory

Use the selected MSP from the dashboard, then drill into the client.

Focused client

Package, endpoint, and billing snapshot.

Top issues

Fastest path to useful next actions.

Assets

Client-scoped asset posture and endpoint drill-down

Select a client to review endpoints, risk posture, and reporting state.

Endpoint inventory

Row click focuses the endpoint. Server and network inventory stay in the current assets workflow for now.

Focused asset

Status, location, risk, and telemetry context.

Asset actions

Refresh, then drill into controls or vulnerabilities from here.

Controls

Scoped control readiness and fix guidance

Select a client to unlock evidence-backed control detail.

Control list

Row click focuses a control. Status and requirement stay visible here; deeper editing stays in the current controls page.

Focused control

Requirement, evidence, and remediation summary.

Control actions

Use native drill-down for review, then hand off only when a detailed workflow is still legacy.

Evidence

Evidence quality, source coverage, and gap follow-up

Select a client to unlock evidence-backed review.

Evidence queue

Most recent evidence items in scope. Row click focuses the item.

Evidence gaps

Controls that still need better evidence or automation.

Focused evidence

Status, confidence, scope, and raw summary cues.

Evidence actions

Refresh, export, and safe handoff to the current upload/editor workflow.

Vulnerabilities

Client-scoped vulnerability posture and remediation

Select a client to review open findings and remediation guidance.

Top findings

Most urgent open items first. Row click focuses the finding.

Affected devices

Devices with open findings in the current client scope.

Focused finding

Vendor, package, device, age, and recommendation.

Remediation actions

Refresh, drill into assets, or hand off to the current deep workflow.

Integrations

Client-scoped integration health and benchmark impact

Select a client to review connected integrations and sync status.

Integration profiles

Health, last sync/test, and benchmark impact for the active client.

Focused profile

Provider, health, mapping, and latest diagnostics.

Integration actions

Run safe checks here; use the current page for full editing or advanced moves.

Billing

Invoice accuracy and billable endpoint posture

Uses the current invoice period and active MSP scope.

Billable client lines

Billable means seen in the last 30 days. Missing snapshots are highlighted.

Invoice period

Current month anchor and source assumptions.

Exceptions

What can distort invoice confidence or follow-up.

MSP totals

Rollup by MSP for the current invoice period.

Reports

Scheduled exports and executive snapshot history

Uses the active client scope for report scheduling and snapshot history.

Scheduled reports

Run a schedule now here, edit it in the current reports page.

Executive snapshots

Recent executive readiness history for the active client.

Export hub

Direct admin actions for snapshot files and retention hygiene.

Operational notes

What is missing and what to do next.

Settings

Platform access, invites, and operational oversight

Admin settings stay platform-wide, with safe handoff to the current detailed managers.

Accounts in scope

Row click focuses the account. Editing stays in the current accounts manager.

Invite queue

Pending and recent invites for manual copy-link delivery.

Focused account

Role, scope, MFA state, and login posture.

Platform ops

Security posture, runtime health, and safe admin actions.

Admin2 Stub

Not yet implemented

This section is intentionally staged.

Start here

Recommended route

Perspective & workspace (admin)

Use this when you want to see the portal as platform admin, an MSP, or a client. Admin permissions are still retained.

Role MSP Client

Pick the client you want first, then switch into the lens that best matches the audience.

Home

Current position

Last updated: —

Role: —

MSP

Client

Home

Start here

Start by choosing a client. This page should answer four things quickly: are devices live, how close is this client to Cyber Essentials, how strong is the proof, and what should happen next.

No client selected yet.

What this page does

Home is the short answer for one client. It is where you check live devices, current readiness, proof strength, and the best next move.

What proof strength means

Proof strength tells you how much of the score is backed by fresh evidence from devices or connected sources, not just unanswered assumptions.

How to use the portal

Use `Devices` to confirm reporting, `Readiness` to see blockers, `Checklist` to review exact answers, and `Reports` when the story is ready to share.

CE verdict

—

Plain-English view of whether this client looks unproven, improving, or ready for review.

What you are looking at

A short board-style summary of position, trust, and pressure.

What to do next

The shortest safe route to a cleaner, more shareable story.

Cyber Essentials readiness

—

How close the client is to a clean CE story.

Devices

—

Known and reporting devices.

Open issues

—

Control gaps and vulnerabilities.

Proof strength

—

How much of the score is backed by fresh proof.

Where things stand

—

The plain-English state of the active workspace.

Do next

—

The shortest useful step from here.

Getting started

—

Installer, check-in, and first proof.

What matters now

What to do next.

Getting real proof

How to get telemetry and source-of-truth flowing.

Follow-up queue

Ownership, due pressure, and nudges for the active workspace.

Who owes something

Who currently holds the open approvals and evidence follow-up.

Change client

Move between platform and client views without guessing.

MSP

Client

Quick route

Choose the right workspace

Use this as the quick route from live devices to a clean Cyber Essentials story when you already know where you want to go next.

No workspace selected yet.

Readiness

—

The benchmark state appears here once the workspace loads.

Proof strength

—

How well the score is backed by fresh proof.

Devices

—

Reporting state and key device names will appear here.

Security issues

—

Open critical and high pressure in the current workspace.

Best next move

—

The calmest useful next action will appear here.

Stage 1

Workspace locked

Pick the client scope you actually want to work in.

Stage 2

Devices proving

Make sure reporting devices tell a believable operational story.

Stage 3

Checklist closing

Turn missing or weak controls into cleaner proof paths.

Stage 4

Report ready

Use Reports & Sharing once the story is fit to hand over.

Quick routes

Go straight to the right page

Use these shortcuts when you already know the job: confirm reporting, fix blockers, review answers, or package the result for someone else.

Cyber Essentials workspace

Keep the benchmark, evidence stack, and handover story aligned

Select a client scope to see the current Cyber Essentials posture, proof strength, and assessor readiness in one place.

Selected benchmark

Cyber Essentials

Awaiting scope

Last verified: —

Readiness

—

Evidence-backed control readiness

Proof strength

—

Freshness, coverage, and corroboration

Trust Centre

—

Assessor-shareable governance output

Path to pass

Scope, evidence stack, controls, and handover readiness.

Onboarding Hub

Simple, fast onboarding for admin and MSP teams. Advanced tasks stay in Settings -> Onboarding / Provisioning.

Create MSP

Admin only

MSP name MSP ID (optional)

If left blank, an ID is generated automatically.

Create MSP admin login now

Create Client

Admin / MSP

Client name Client ID (optional)

MSP

Plan Create client admin login now

Deploy Agent Bundle

Admin / MSP

Client

Choose the client, then generate a token or download the full onboarding bundle.

Admin View Switching

Admin only

Switch the portal into MSP/client views for testing and demos without changing backend permissions.

Tip: Select MSP/client in the sidebar switcher, then click Apply view.

Quick jump

Controls Assets Security Findings Reports

Client launch

Onboarding and source selection

Launch the client quickly, then connect the minimum evidence stack for credible readiness scoring.

Treat onboarding as a guided launch plan: scope the client, prove one reporting endpoint, connect the right source-of-truth, then generate the first CE story.

First client journey

Move from empty tenant to assessor-ready operating view

Start with the smallest defensible evidence stack. We only need enough connected proof to tell an honest Cyber Essentials story, then we can expand depth later.

Stage 1

Create scope

Create the MSP/client record, switch into the right view, and lock the benchmark scope.

Stage 2

Prove a device

Deploy the installer bundle and confirm at least one endpoint is actively reporting.

Stage 3

Connect authority

Add the minimum source-of-truth integrations needed for this client’s environment shape.

Stage 4

Prepare review

Run readiness, close obvious gaps, and generate the first CE autofill draft for review.

Minimum launch outcome

One client in scope
One reporting endpoint
One trusted source-of-truth path
One CE review run completed

What this unlocks

Readiness that means something
Controls with evidence provenance
Manual queue with guided attestation
Assessor-style handover output

Create an MSP

Provision the top-level tenant.

Create a client

Attach a client under the MSP.

Generate installer bundle

Download the MSI + token bundle.

Enroll an endpoint

Install agent and see it appear.

Source-of-truth baseline

Essentials relies on integrations + manual evidence. Assurance layers telemetry on top for stronger proof and freshness.

Launch command

See whether this client can move from setup into Cyber Essentials review

This board keeps scope, device proof, source authority, and review readiness in one lane so the first-launch journey stays clear for operators and assessors.

Preparing launch workspace…

Launch state

—

The launch board fills once scope and client state are available.

Reporting proof

—

At least one live endpoint turns setup into a provable CE story.

Authority stack

—

Required integrations or truth sources connected for this client shape.

Review pack

—

Release stage, autofill coverage, and remaining manual proof.

What is happening in this first-launch path

The launch story appears once client state is loaded.

Signals worth trusting

Scope, endpoint proof, source authority, and review evidence in one place.

Recommended next moves

Jump straight into the next stage without losing the launch story.

First client launch checklist

Where this client is in the launch journey

Scope, reporting, authority, and review readiness in one place.

Awaiting client scope

Go to provisioning View assets

Executive summary

Evidence-backed readiness snapshot (not certification)

Overview command

See what deserves attention before you read the dashboard cards

This lane separates benchmark gaps, proof strength, raw exposure, reporting coverage, and review readiness so first-time operators know where to go next.

Preparing executive workspace…

Operating state

—

The overview command board fills once the dashboard state is loaded.

Proof strength

—

Coverage, freshness, and automation depth for the active benchmark.

Exposure pressure

—

Control gaps, raw findings, and device-level security pressure.

Coverage lane

—

Reporting devices, source authority, and the route into review.

What is happening in this client workspace

The overview story appears once benchmark and environment state are loaded.

Signals worth trusting

Confidence, source authority, exposure, and release posture in one place.

Recommended next moves

Take the shortest route to a cleaner readiness story.

Readiness indicator

—

— Trend: —

Freshness: —

Last verified: —

Environment overview

Devices monitored—

Devices not reporting—

Evidence coverage—

Integrations connected—

Frameworks active—

Browser compliance—

AV presence—

Integration status

Evidence trace

—

Active framework: —

Evidence recency: —

Top control gaps

—

Devices not reporting

—

Quick actions

Evidence & readiness detail Proof strength, coverage, risks, and source breakdowns

Telemetry posture

—

Evidence coverage

—

Controls with evidence: —

Evidence freshness

30d —

60d —

90d —

Proof strength

—

Proof trend

30d —

60d —

90d —

Client & plan

—

Plan: — · Tier: —

Endpoints: —

Benchmark focus

—

Active: —

—

Key gaps to close

—

Top risks

—

Risk heat map

Evidence sources in use

Next evidence actions

Recommendations

Executive snapshot history

Last 3 snapshots (local)

—

Environment overview

Scope: — Updated: —

Telemetry posture

—

Benchmark readiness

—

Compliance coverage

—

Benchmarks active

—

Devices monitored

—

Integrations connected

—

Telemetry posture uses alert rates. Benchmark readiness is evidence-backed. Evidence coverage shows how much of the benchmark has evidence. View evidence coverage

Trend strip

Trend data appears after a few snapshots. Use Refresh data to start.

Telemetry (7d)

—

Evidence (30d)

—

Endpoints (30d)

—

Latest activity

Operational signals

Inbox and team queue

Inbox & Team Queue

Keep fixes, approvals, acknowledgements, and missing proof in one calmer queue.

Tasks

Work the queue, not the whole platform

This page turns approvals, policy reading, and missing proof into a shorter operating list so directors and operators can both tell what still needs doing.

Choose a client to load the real task queue.

Personal view keeps only your work, proof, and next actions in front of you.

Assigned to you

—

Items currently waiting on you.

Needs attention

—

Overdue work, nudges due, or unowned follow-up.

Due soon

—

Work landing in the next week.

Proof & retest

—

Missing proof, review backlog, and retest follow-up.

Inbox

The requests and acknowledgements that currently need your attention.

Submit proof

Reply to an evidence request here instead of hunting through the wider portal.

Choose an evidence request from Inbox.

The selected request will show the proof ask, due date, and current response state here.

What good proof looks like

We will explain what the reviewer needs, what to attach, and what to avoid.

Response note Artifact name Proof link

Drop proof here or browse files

Best for screenshots, PDFs, exports, and signed documents.

My fixes

Assigned fixes, due dates, and the proof route for each control gap.

Retest & handover

Completed fixes that now need a clean re-check before reports and handover.

Best next moves

The shortest useful route through the queue.

Follow-up requests

Named requests with dates, owners, and nudge state.

Policy acknowledgements

Who still needs to read and accept policy items.

Evidence follow-up

Manual proof, submitted evidence, and evidence requests.

Queue health

A calmer read of ownership, people coverage, and closure pressure.

Delivery & reminders

Turn on follow-through delivery, test it, and see the most recent outcomes.

Send email reminders Shared recipients Also include the named assignee or target user Send webhook events Webhook URL

Test target email Test note

Recent delivery log

Owner lanes

Who currently holds the queue.

Requests

Acknowledgements

Readiness story

Readiness

What blocks Cyber Essentials, how believable the score is, and what to fix next.

Readiness indicator

—

Select a framework to calculate readiness.

Proof strength

—

Freshness and source quality drive proof strength.

Readiness is not certification

Scores indicate current evidence-backed posture only. They are not a compliance guarantee.

Evidence coverage

—

Controls with active evidence

Automation coverage

—

Automatable controls with active automation

Manual backlog

—

Manual-only controls still missing evidence

Source gaps

—

Missing or stale source-of-truth signals

Live validation

—

Profiles promoted and blocked

Last verified

—

Evidence and benchmark refresh timestamps

Checklist focus

Select a framework to review the biggest readiness blockers.

Checklist families, blocker counts, and where to open the gap next.

Pilot and live validation

What still blocks live testing and promotion for this client.

Fact quality

Keep exact, inferred, and missing facts obvious before assessor review.

Exact facts

—

Inferred facts

—

Missing facts

—

Use CE autofill and manual attestation to replace guesses with named proof.

Frameworks

—

Controls Search

Benchmark library (planned)

Ready for future control packs

NIST CSF PCI DSS Windows Baseline GDPR

What to fix next

Priority actions

Control review

Checklist

—

Use this view to understand exactly why a control is passing, failing, or waiting on better evidence.

Control workflow

Review the checklist story before you chase fixes

This section should tell us three things quickly: which controls are strong, which controls are blocked, and what kind of evidence would move the benchmark forward fastest.

Use Readiness to understand the benchmark position.

Use Checklist to understand why each item passes or fails.

Use Evidence when you need to prove, compare, or manually attest the detail.

Step 1

Find the blocker

Filter to the controls that are failing, missing proof, or still waiting for manual evidence.

Step 2

Check the evidence path

Decide whether the fix is telemetry, source-of-truth, or manual attestation.

Step 3

Close the gap cleanly

Use the next-step guidance so the control story improves, not just the raw count.

Cyber Essentials answer

Load a benchmark to see the answer.

This should show what passed automatically, what needs a human answer, and what instruction closes the gap.

Automated checks

Checks proven by connected device or cloud evidence.

Manual-only checks

Checklist items that need a named person, policy, screenshot, or attestation.

Remediation lane

Turn checklist gaps into a clean fix-and-proof plan

This is the decision layer for the benchmark: which controls are genuinely blocked, what kind of evidence closes them, and which route gets the biggest score movement next.

Remediation state

No scope

Load a benchmark to see what is genuinely blocking progress.

Automation lane

—

Automation coverage will appear once controls are loaded.

Integration blockers

—

Provider pressure shows which source-of-truth connection unlocks the most controls.

Manual proof

—

Structured attestations still needed for manual-only controls.

What is blocking progress right now

The control story appears once a benchmark is loaded.

Signals worth trusting

Scope, source mix, and freshness signals will land here.

Recommended next moves

The board will suggest the fastest clean route to close the benchmark gaps.

No benchmark selected.

Fix plan

Turn the top control gaps into owned work with proof at the end

The remediation plan appears once controls and governance follow-up are loaded.

Plan pressure

Open the shortest useful route next.

Remediation plan

Top benchmark gaps, owners, due dates, and proof routes.

Automation proof

Evidence coverage and quality by source.

Priority actions

Top gaps to close next

Control gaps —

Resilience

Know what you can prove.

Sign in

Accept invite

Session

Admin control center

Platform overview

Run the platform from one place

Operational posture at a glance

Readiness trend

Evidence coverage trend

Vulnerabilities by severity

Billable activity and invoice readiness

Selected MSP and immediate actions

MSP spotlight

Remediation status

Priority tasks

Evidence gaps

Control snapshot

MSP directory

MSP list

Client list

MSP directory and client drill-down

MSP directory

Focused MSP

Focused MSP clients

Client drill-down and package posture

Client directory

Focused client

Top issues

Client-scoped asset posture and endpoint drill-down

Endpoint inventory

Focused asset

Asset actions

Scoped control readiness and fix guidance

Control list

Focused control

Control actions

Evidence quality, source coverage, and gap follow-up

Evidence queue

Evidence gaps

Focused evidence

Evidence actions

Client-scoped vulnerability posture and remediation

Top findings

Affected devices

Focused finding

Remediation actions

Client-scoped integration health and benchmark impact

Integration profiles

Focused profile

Integration actions

Invoice accuracy and billable endpoint posture

Billable client lines

Invoice period

Exceptions

MSP totals

Scheduled exports and executive snapshot history

Scheduled reports

Executive snapshots

Export hub

Operational notes

Platform access, invites, and operational oversight

Accounts in scope

Invite queue

Focused account

Platform ops

Not yet implemented

Start here

What you are looking at

What to do next

What matters now

Getting real proof

Follow-up queue

Who owes something

Change client

Choose the right workspace

Go straight to the right page

Keep the benchmark, evidence stack, and handover story aligned

Path to pass