Product
How each part of AutoCISO works, with step-by-step guides for the everyday tasks. Grouped the way the console sidebar is.
Dashboard & posture
- Security Operating SurfaceHelicopter-view CISO landing on the Dashboard — a 6-axis posture radar and a 20-tile surface map, with a time-machine slider for replaying past monthly snapshots.
- vCISO WorkspaceA guided security-programme home under Access & Risk — a roadmap of prioritised remediation items, current vs. target security state, tracked management decisions, and a monthly summary for Owners and Managers. Requires The Seed plan or higher.
Access audits
- Correct a misrecognised employee in an auditHow to reassign an access-audit row that was matched to the wrong employee, why it happens, and what changes when you fix it.
- Typed MCP ResultsEleven MCP tools now return structured results, and both SDKs give you typed values for them.
- Attach evidence to a manual access recordAdd a proof file (screenshot, PDF, CSV or spreadsheet) to an access record you entered by hand, download it later, replace it, or remove it.
AI access review
- AI Agents and ReviewsSee the AI agents and apps that have access in the sources AutoCISO collected, name an owner for each, and run a review campaign that records the decisions.
- Absence of Evidence Is Not RevocationWhy an access item missing from a later collection does not mean the access was removed, and the one rule that makes a comparison trustworthy.
Employee lifecycle
- Create Access Profiles and start an on-boarding caseDefine the access a new hire needs by department or job title, then start a joiner case and track whether each application is granted, pending or marked done.
- Off-boarding & Leaver ChecksStart a leaver case when someone leaves, work through the revoke tasks, and use the four item statuses to see which access is really gone and which is still detected.
ISO 27001
Suppliers
- Supplier AssessmentsSend a security & privacy questionnaire to a supplier, then read two clearly separated results — a Security & privacy score from their answers and an Overall risk rating that also weighs how critical the supplier is to your business.
- Author and approve supplier questionnairesBuild your own supplier questionnaire from scratch or clone the built-in one, edit and preview it, then take it from Submit for approval through Review and publish — or send it back for changes.
Partner Portal
- Partner Portal overviewWhat the Partner Portal is for, who gets access to which screen, and how a fractional CISO or advisory firm signs up and starts managing client organisations.
- Connect client organisationsGive your firm access to a client's AutoCISO organisation, from the client's access link to the Invite Center, and how the client revokes or disconnects you.
- Work across your clientsUse the Dashboard, Portfolio, Action Queue and Health Timeline to see which client organisations need attention, work through their open actions and step into a client's workspace.
- Board Packs and advisory templatesGenerate an AI-drafted board report for a client, edit it, export it as PDF or send it to the client; and build reusable advisory templates that add the same to-dos to several clients at once.
- Administer your partner firmSet your firm's name, logo and brand colour, choose who receives each client's reports, manage your team, check your plan and invoices, and track referral income.
Privacy
Single sign-on
- Single Sign-OnHow AutoCISO decides who may sign in to your organization — allowed providers, your own identity provider, email domains, and how to recover if you lock yourself out.
- Connect Google Workspace as your identity providerSet up AutoCISO so your team signs in with their Google Workspace accounts, using your own Google OAuth client rather than AutoCISO's.
- Connect Microsoft Entra ID as your identity providerRegister an app in Microsoft Entra ID and connect it to AutoCISO so your team signs in with their Microsoft work accounts.
- Connect Okta as your identity providerCreate an OIDC application in Okta and connect it to AutoCISO so your team signs in with their Okta accounts.
- Connect a SAML 2.0 identity providerConnect any SAML 2.0 identity provider to AutoCISO by pasting its metadata XML, then configuring the ACS URL and Entity ID on your side.
Administration
- AI Provider SelectionWhich AI providers AutoCISO uses, what each one receives from your data — especially images and personal data — and what to weigh when your organisation reviews its data-processing agreements.
- Audit Trail Integrity and Accepted Link BreaksHow the Audit Trail proves nothing was changed, why some older tenants show an accepted link break, and what evidence to ask for as an auditor.
- Reset a User's MFARemove all multi-factor authentication methods for a colleague who lost their phone or security key, so they can sign in and set up MFA again.