Solutions · Alineado con el Esquema Nacional de Seguridad (ENS), NIS2 y RGPD

Soluciones: For managed service providers

Delegated tenants, pooled licensing and partner billing. (Volúmenes personalizados, residencia de datos dedicada (UE-Fráncfort / UK-Londres), SSO/SCIM y gestión multi-tenant para partners.)

Open in Live Console (ws-superadmin) Solicitar demo

Soluciones: For managed service providers

Architecture & Capabilities

Para equipos que necesitan pruebas, no promesas

PostgreSQL 16 FORCE RLS

Every tenant table enforces database-level Row-Level Security bound to transaction-local current_tenant_id().

PII & secret redaction

Bearer tokens, API keys and personal data are scrubbed before any advisory call reaches ARYA SAI.

Human approval gate

No autonomous host isolation or credential revocation; every response action requires a named approver.

UK NCSC PQC roadmap

Cryptographic inventory tracking the 2028 discovery, 2031 priority and 2035 full Post-Quantum milestones.

Immutable audit trail

Append-only SHA-256 checksummed audit logs record every allowed and denied operation.

Regional data residency

Customer telemetry stays within the selected UK-LON, EU-FRA, MENA-RUH or APAC-TYO boundary.

Visual Architecture

Three-Tier Defense-in-Depth Architecture

Combines PostgreSQL 16 FORCE ROW LEVEL SECURITY, deterministic Sigma detection and human-governed containment in one auditable control plane.

Visual Architecture

Post-Quantum Cryptographic Lattice Vault

Tracks cryptographic assets and key rotation schedules against the UK NCSC 2028 discovery, 2031 priority and 2035 full migration milestones.

Verified Architecture Specifications · E-E-A-T Grounding Reference

Deterministic Technical Controls & Machine-Verifiable Evidence

OpenAPI 3.1 Contract Trust & PQC Center

1. Detection Engine (CSH Sentinel): Git-versioned Sigma rules (CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001, T1098.003, T1048, T1190) with idempotent dedupe_key ingestion and SHA-256 immutable event hashes.
2. AI & MCP Firewall (CSH AI Guard): Pre-inference DLP scrubbing ([REDACTED_SECRET], [REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking.
3. Database Isolation (PostgreSQL 16): Enforces ENABLE / FORCE ROW LEVEL SECURITY across all 20 tenant tables bound to transaction-local current_tenant_id(); cross-tenant queries fail closed with HTTP 403.
4. Human-Gated Containment: Zero autonomous destructive actions. Host isolation (isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail.
5. Verified Exposure & GRC (CSH Scan): Cryptographic DNS TXT or HTTP ownership token required before scanning. Continuous evidence aligned with Esquema Nacional de Seguridad (ENS), INCIBE, Directiva NIS2 España.
6. Post-Quantum Roadmap (CSH Quantum): Cryptographic inventory tracking RSA/ECDSA/TLS keys against UK NCSC 2028 discovery, 2031 priority migration (ML-KEM / ML-DSA), and 2035 full PQC completion.

Operated by ARYA AI TECHNOLOGY LTD (Registered in England & Wales, Company No. 17372232) · Canonical Domain: cybersecurityhouse.com Regional Data Residency: UK-LON · EU-FRA · MENA-RUH · APAC-TYO · RFC 9116: /.well-known/security.txt

Defense-in-Depth Isolation

Database-enforced tenant boundaries & UK NCSC PQC alignment.

PostgreSQL 16 FORCE ROW LEVEL SECURITY on all 20 tenant tables.
Pre-inference DLP secret and PII scrubbing before any advisory call reaches ARYA SAI.
Aligned with UK NCSC 2028 / 2031 / 2035 Post-Quantum Cryptography milestones.

Inspect OpenAPI 3.1 Spec

db/migrations/0001_initial_enterprise_schema.sqlPostgreSQL 16

ALTER TABLE security_events ENABLE ROW LEVEL SECURITY;
ALTER TABLE security_events FORCE ROW LEVEL SECURITY;

CREATE POLICY tenant_isolation_policy ON security_events
  FOR ALL TO csh_app_role
  USING (organization_id = current_tenant_id())
  WITH CHECK (organization_id = current_tenant_id());

Isolation: Enforced · Cross-tenant queries return HTTP 403

Preguntas frecuentes

¿La IA ejecuta acciones de contención por sí sola?

No. La detección se basa en reglas deterministas. ARYA SAI solo genera resúmenes consultivos sobre evidencia redactada y cada acción requiere aprobación humana.

¿Dónde se almacenan nuestros datos?

Puede elegir residencia en la UE (Fráncfort) o Reino Unido (Londres) durante el alta.

¿Ayudan con el cumplimiento de ENS, NIS2 e ISO 27001?

Sí, CSH Compliance vincula evidencia técnica continua con los controles de ENS, NIS2, ISO/IEC 27001 y RGPD.

¿Podemos escanear cualquier dominio o IP?

Solo activos cuya propiedad haya sido demostrada mediante token DNS TXT o HTTP.

¿Trabajan con proveedores de servicios gestionados (MSP)?

Sí, ofrecemos gestión delegada de clientes y licencias agrupadas.

Véalo funcionando en su propio entorno

30 minutos con un ingeniero de seguridad. Sin diapositivas.

Registrada en el Reino Unido (Nº 17372232)
Residencia de datos en UK y UE
Disponible en 15 idiomas