[ PLATFORM // CAPABILITIES ]
Five capabilities.
One contract.
Procurement asks what you are buying — not which repositories power it. Each capability below has a dedicated page with outcomes, workflows, governance, and related service lines.
Customer-facing operating model · no technology stack inventory
Unified operator experience
One findings language from the board room to the SOC floor.
Executives, GRC, and SOC analysts work from connected consoles — same findings, same severity language, same authorization history.
Continuous cloud assessment
Read-only posture across six environments — normalized, scored, and comparable.
Read-only connectors keep posture current without write access to your control planes.
Authorized offensive testing
Pentest results beside CSPM — prioritized with signed scope every time.
Pentest results land beside CSPM findings so prioritization respects both exposure and exploitability.
Isolated customer data
Per-tenant boundaries, encryption, and retention you control in contract.
Each tenant receives dedicated encryption and storage boundaries agreed in contract.
Agentic SOC with governance
Playbooks propose; humans approve — noise drops without losing accountability.
Playbooks propose; humans approve — noise drops without losing accountability.
Capabilities ship together under your NNSEC retainer and NorthSec AI tenant. Tiers scale connector count, endpoint footprint, and operator co-management — see pricing for transparent monthly numbers.
Compare tiers →