Cyber Posture Manager

Cyber Posture Manager

Cyber Posture Manager connects assets, vulnerabilities, controls, risks and remediation into a security posture you can explain: every score, priority and deadline shows its formula. Built for security leads, ISMS teams and IT managers. The app does not scan networks or systems itself – vulnerabilities come from scanner exports you choose or are entered by hand.

HIGHLIGHTS
• Posture score 0–100 from vulnerability exposure, SLA adherence, control strength, risks within appetite and exception hygiene – with weights and the biggest lever
• Import Nessus, OpenVAS and Qualys CSV, Trivy JSON and generic CSV/JSON with a preview: new, seen again, regression, duplicate
• CVSS v3.1 calculator following the FIRST specification, KEV and exploit flags
• Priority P1–P4 from CVSS, asset criticality, exposure and KEV – every component visible; SLA deadlines per severity with a shorter KEV deadline
• Finding workflow open → triaged → in remediation → remediated → verified; verification by a second person with evidence
• Time-limited exceptions with rationale, compensating controls, maximum duration per severity and four-eyes approval
• Controls mapped to ISO/IEC 27001, CIS v8, NIST CSF or BSI IT-Grundschutz with tests and effectiveness
• Risk register with 5×5 matrix, mitigation through controls and residual risk against your risk appetite
• Evidence with SHA-256 checksum, encrypted (AES-256-GCM), with valid-until date and manager review
• 7 report types (posture, case report, remediation plan, exception and risk registers, control status, asset inventory) as PDF, ZIP or text; 14 calculated metrics with RAG status and trend

ALSO INCLUDED
Global search across 9 object types, CSV export for 9 lists, multiple workspaces with their own SLA presets and score weights, roles with PIN and permission matrix, tamper-evident audit log with hash chain, encrypted backups and exchange packages without a server, local reminders with escalation.

PRIVACY
Your data stays on your device: no account, no tracking, no ads. The only network connection is to the store for the subscription.

SUBSCRIPTION
Free: 1 workspace with up to 10 active assets (sample data does not count); reading, exporting, backing up and deleting are always available. The monthly “Cyber Posture Manager Pro” subscription removes these limits. The subscription renews automatically each month unless cancelled at least 24 hours before the end of the current period; cancel anytime in Google Play under Subscriptions.

Privacy Policy: https://tonke.de/data-protection-en.html