Help Centre

The five invariants in plain words, the boundaries of the evidence, and the three roles that run an engagement.

Tenant, users, institution profile, estate domains and the benchmark scenario pack — before any evidence exists.

Discovery from Certificate Transparency and a TLS handshake — what it produces, what it never claims, and where it lands.

Import the internal certificate estate from an AD CS or CLM export, and read what each column becomes.

Score each estate domain against the rubric in the Assessment workspace, with the evidence open beside you.

What each 1-5 ordinal means on the four assessment dimensions, and which measured evidence corroborates it.

Turn benchmark magnitudes into this institution's own figures, and link certificates to the services they actually carry.

The board pack, the CBOM and the chain verification — what you hand over and how each one is defended.

Scheduled discovery cycles, the diff, the alert rules and the sealed digest — what runs after the engagement.