ThreatAware Platform

The ThreatAware Platform is a multi-tenant SaaS service for Cyber Asset Attack Surface Management (CAASM), hosted on AWS and accessed via web browser.

The platform connects to a customer's existing security and IT management tools (MDM, EDR, identity providers, directories, and cloud infrastructure) through agentless, API-based integrations, and consolidates that telemetry into a single source of truth. Core capabilities include:

• Device, User & Software Inventory: a continuously updated view of every cyber asset
• Vitals: validation that each security control is deployed, healthy, and correctly configured per device
• Agentless Automation: automated workflows responding to non-compliance, from notifications to webhook-driven remediation
• Deep Query & Studio: fast querying across the estate and unlimited custom dashboards for teams and compliance reporting

The service processes asset, configuration, and security control telemetry together with user directory information (name, business email, group membership). Each customer operates in a logically segregated environment with dedicated per-tenant data stores and encryption keys. Customer access supports SSO (SAML/OIDC) with SCIM provisioning, and data is retrievable via API for portability.