Cyber

Why it exists

Two halves of the same job. The public half watches what is being exploited right now; the private half is where each customer's controls, risks and evidence live, organised into a folder tree and per-year assessments.

Who gets in

Magic-link sign-in, but access is a request an operator approves; approval is re-read from the database on every request rather than trusted from the session, so revoking it takes effect on the next navigation