CyberAssure is the cyber-risk and incident-command product in The One Stack. It gives an MSP a single portfolio view of every managed client's security posture, scored on the 0–1000 CyberAssurance Score, plus a per-client risk register, a discovery-driven posture assessment, and a live incident War Room for running a breach response with your client on a recorded call.
Availability: CyberAssure features, including discovery and posture scoring, may be limited or not yet available in your environment. Treat a score as a guide, not a complete assessment of a client. If what you see doesn't match this article, submit a ticket.
Who It Is For
CyberAssure is built for MSP staff who own the security relationship with their clients — vCISOs, account managers, and SOC leads. It is the place you go to answer "how secure is this client, where are their gaps, and what do we do when something goes wrong." It is org-agnostic: the same workflows apply to every client you manage.
What CyberAssure Does
- Portfolio — one table of every managed client with their CyberAssurance Score (0–1000), trend, and risk banding (Good ≥ 750, Fair 500–749, At Risk < 500).
- Posture assessment — a discovery questionnaire and findings collection that grades the client across eight 125-point pillars to produce the score.
- Risk register — a per-client list of threat/vulnerability pairs with an inherent-risk rating that feeds the posture grade.
- Incidents & War Room — declare an incident at a severity (P0–P3), then run the response in a live War Room with a decision log, runbook, THEO-drafted comms, and an evidence locker. Sessions can be put under litigation hold.
- Templates — a library of incident runbooks and compliance plans you can apply across clients.
- Branding — white-label the product surfaces your clients see.
The CyberAssurance Score
The score is on a 0–1000 scale, built from eight pillars worth 125 points each. A client's banding is shown alongside the number:
| Banding | Score range |
|---|---|
| Good | 750 – 1000 |
| Fair | 500 – 749 |
| At Risk | 0 – 499 |
A score only exists after you run discovery and recompute. A freshly-added client shows under "Awaiting First Assessment" until then.
How to Get Started
The Portfolio page shows a three-step Getting Started checklist for new MSPs:
- Add your first client — onboard a managed organization to the portfolio.
- Run discovery & compute a score — assess the client to produce their first CyberAssurance Score.
- Explore the runbook & plan library — browse ready-to-use incident runbooks and compliance plans under Templates.
The checklist auto-ticks from real portfolio state and can be dismissed.
Navigation
CyberAssure's left nav is grouped into:
- Overview — Portfolio, Incidents
- Operations — My Clients, Infrastructure, Security
- Settings — Templates, Branding
FAQ
Is CyberAssure a separate login?
No. You reach it at app.theonestack.com/cyberassure and it uses your Hub SSO session automatically.
What happened to the standalone Compliance product? Compliance (GRC) was consolidated into CyberAssure. Posture, risk, and compliance reporting now live here.
Do my clients log in to CyberAssure? CyberAssure is an MSP-facing console. Clients participate in incident War Rooms by invitation, and you can white-label what they see under Branding.