Automated assessment intake
Use guided imports, connectors, collectors, and questionnaires to create a consistent starting point instead of a manually rebuilt spreadsheet for every customer.
Skip to content
Under 50 employees
50 to 499 employees
500 or more employees
MSSP, consultant, and reseller program
Turn customer complexity into an owned security program.
Manage several customer organizations from one portfolio while each customer keeps control of its evidence, encryption boundary, approvals, and access.
PortfolioSeveral customers, one operating view
BoundariesCustomer-approved, scoped, expiring access
DeliveryRepeatable discovery through remediation
EvidenceAudit-ready records and progress reporting
Risk-first managed delivery
Scale cybersecurity services without rebuilding every engagement by hand.
Project X IT gives service providers a repeatable way to onboard customers, collect evidence, explain risk in business terms, generate remediation roadmaps, and keep progress visible over time.
Business-facing risk register
Prioritize findings by the function, owner, MTD, exposure, data, vendor, and operating cost they affect, so executives see decisions instead of raw tool output.
Actionable remediation roadmap
Convert gaps into owner-assigned work, evidence requirements, retest expectations, due dates, risk decisions, and recurring service opportunities.
Framework mapping
Reuse the same evidence across NIST CSF, SOC 2 Type 2, ISO 27001, privacy, continuity, and customer-defined requirements without pretending one checklist proves security.
Third-party risk context
Map vendors to functions, systems, data, contracts, spend, assurance reports, exceptions, and accountable business owners.
AI with guardrails
Where approved, automation can accelerate summaries and remediation drafting, but customer evidence remains protected, server-authorized, and reviewable before decisions are accepted.
A repeatable service model
Give every customer the structure a mature security team would build.
Small businesses often lack complete inventories, role maps, system security plans, BIAs, and control evidence. The Workbench gives your team a guided way to reverse engineer that picture and keep it current.
Discover the environment
Collect accounts, groups, privileged access, jobs, software, services, ports, login sources, network flows, cloud resources, vulnerabilities, devices, applications, databases, and data hints.
Map the business
Connect people, positions, departments, executive ownership, business functions, allocations, systems, permissions, vendors, costs, dependencies, and sensitive data.
Build impact and risk
Document MTD, RTO, RPO, financial exposure, operational consequences, threat scenarios, control coverage, materiality, and accountable risk decisions.
Deliver remediation
Turn the observed baseline into an owner-approved target for least privilege, segmentation, secure configuration, recovery, staffing, and continuous monitoring.
Prove progress
Generate policies, procedures, reports, evidence packages, framework maturity views, and a defensible record of adherence and exceptions.
Protect customer control
Request exact customer access and let the customer approve the role, scope, and expiration. Platform and customer authorization are enforced by the server on every request.
Support counsel-led healthcare matters
Law firms and breach counsel can coordinate separately scoped client assessments for healthcare organizations following incidents, alleged HIPAA violations, or regulatory inquiries. Each client remains isolated and controls access. The platform supports evidence and risk assessment; it does not determine legal compliance, create privilege, or provide legal advice.
How it works
A portfolio above. A separate customer boundary below.
1. EnrollCreate your partner organization, owner account, MFA enrollment, and trial workspace.
2. RequestEnter the exact customer organization ID, requested role, duration, scopes, and business justification.
3. ApproveThe customer's direct owner or administrator approves or rejects the request. Project X IT operators cannot approve it for them.
4. DeliverUse the approved workspace to guide discovery, mapping, assessment, remediation, evidence, and reporting.
5. RevalidateCustomer access expires, can be revoked, and is checked again before each tenant operation.
Commercial fit
Serve small businesses without forcing them into enterprise economics.
The partner model is designed for portfolios of smaller customers while preserving direct enterprise pricing for larger organizations.
Small-business portfolio
Affordable flat customer-workspace basis intended for consultant and MSSP delivery.
Business band
Contracted employee-band pricing with partner eligibility and scoped service delivery.
Enterprise scope
Pricing uses the customer's total employee count and contracted scope, even when a consultant participates.
Final pricing, partner terms, and service scope require a written agreement. Customer evidence access is never created by payment or partner status alone.
Start a partner trial
Create your MSSP workspace.
After signup, continue to the authenticated Consultant Portal, open Account Settings, and verify a TOTP authenticator before future logins enforce MFA.
- One partner portfolio for your delivery team
- Customer-controlled delegation and expiration
- No customer evidence access until approval
- Server-side authentication and authorization
Production launch will also require verified email delivery, executed partner terms, billing enrollment, and the production controls documented in the assurance guide.