Platform

From framework definition to signed deliverable.

CyberFrame gives IRAP assessors, consulting firms, and security teams a structured platform purpose-built for formal assessments, from control evaluation through to audit-ready reporting.

Architecture

Three applications. One data flow.

Framework definitions flow from the central library, through portfolio management, into isolated assessment workspaces, each with its own database, authentication, and storage.

Framework Manager

Define

Managed by Reckon Security

Frameworks versioned and maintained
Assessment methodologies codified
Test methods created per control
Asset groups defined across 9 categories

Provisions

Portfolio Manager

Orchestrate

Client and system management

Client organisations managed
Assessment teams assembled
Systems defined per client organisation

Deploys

Secure Assessment Workspace

Execute

Client 1: E8 assessment of corporate network

Client 1: IRAP assessment of Payroll system

Client 2: E8 assessment of corporate network

Isolated environment per assessment
Security boundary at each workspace
Single framework per assessment
Assessment team access and roles
Evidence collection and integrity
Findings and recommendations
Reporting and deliverables

Per-assessment isolation

Separate infrastructure per engagement. Assessment data never co-mingles.

Framework-as-data

Frameworks defined centrally, synced to each workspace at provisioning time.

Ephemeral by design

Environments decommissioned after delivery. Data exists only for the assessment lifecycle.

The Platform

Purpose-built for every stage of the assessment.

Each application addresses a distinct phase of assessment management, from framework governance through to isolated execution.

Framework Manager

Define

The centralised repository where frameworks are versioned, controls are structured, test methods are authored, and assessment templates are maintained, feeding every assessment consistently.

ISM (IRAP, CSP), Essential 8, NIST CSF, and more maintained and versioned
Assessment methodologies codified as reusable workflow templates
Test methods generated and linked to individual controls
Asset groups defined across operating systems, cloud, networking, and more
Framework-specific report templates with auto-population rules

Learn more

Portfolio Manager

Orchestrate

Your organisation's hub for managing clients, systems, teams, and the full assessment lifecycle, from scoping through to provisioning isolated assessment environments.

Client organisations and their systems managed in one place
Assessment teams assembled with role-based access
Isolated assessment environments provisioned on demand
Full assessment lifecycle tracked from scoping to delivery
Cross-client portfolio visibility and dashboard

Learn more

Assessment Workspace

Execute

The secure, isolated per-assessment environment where all evaluation work happens: structured workflows, control evaluation, evidence management, reporting, and client collaboration.

Isolated environment per assessment with its own database and auth
Structured control evaluation across asset groups with test methods
Evidence collection with SHA-256 integrity and chain of custody
Framework-specific report generation from templates
Dedicated client portal for RFIs and evidence submission

Learn more

Deep-dive feature pages

Assessment Workflows Control Evaluation Evidence Management Report Generation RFI Management & Collaboration

Assessment Lifecycle

Six phases. One structured methodology.

Every assessment follows the same rigorous process, from provisioning an isolated environment through to secure delivery of the final report.

Provision

Isolated environment with database, auth realm & storage

Scope

Select frameworks, asset groups & workflow configuration

Collect

Issue RFIs via client portal and gather evidence

Evaluate

Assess controls per asset group with test methods

Report

Generate audit-ready reports from templates

Deliver

Lock phases, verify integrity & produce deliverables

Provision

Isolated environment with database, auth realm & storage

Scope

Select frameworks, asset groups & workflow configuration

Collect

Issue RFIs via client portal and gather evidence

Evaluate

Assess controls per asset group with test methods

Report

Generate audit-ready reports from templates

Deliver

Lock phases, verify integrity & produce deliverables

See the platform in action.

See how three purpose-built applications transform the way your team executes formal security assessments.

Initializing CyberFrame

Securing your compliance journey...