# Cyber Security House (https://www.cybersecurityhouse.com)
> Connected World & Enterprise Cybersecurity SaaS Ecosystem (v5.0) operated by ARYA AI TECHNOLOGY LTD (Company No. 17372232, England and Wales, United Kingdom).

## Core Differentiators (Why Enterprises Choose Cyber Security House)
1. **Deterministic Detection First (CSH Sentinel):** Versioned Sigma rules mapped to MITRE ATT&CK with SHA-256 immutable raw log evidence and idempotent ingestion (`dedupe_key`). Zero black-box hallucinations.
2. **Autonomous AI & MCP Governance (CSH AI Guard):** Pre-inference DLP secret/PII scrubbing (`[REDACTED_SECRET]`), per-agent Model Context Protocol (MCP) tool allowlists, indirect prompt-injection blocking, and mandatory human approval for state-mutating actions.
3. **Cryptographically Verified Exposure Scanning (CSH Scan):** Passive-first vulnerability and CISA KEV checks strictly gated by DNS TXT or HTTP ownership verification tokens; active scanning prohibited on OT/medical networks.
4. **Connected World Security (CSH Home Shield, EV Shield, IoT Shield, Energy Shield, OT Shield):** Consent-verified passive household discovery (unsupported devices report `unknown`, never `secure`), read-only OCPP 1.6J/2.0.1 EV charger security posture with hard policy blocks against physical actuation, and passive IEC 62443 OT monitoring.
5. **Continuous Audit, Cyber Resilience & Post-Quantum Readiness (CSH Compliance, Resilience, Supply Chain, Quantum):** Automated evidence mapping for NIST CSF 2.0, ISO/IEC 27001:2022, NCSC CAF, UK Cyber Essentials, UK GDPR, NHS DSPT, PCI DSS, UK PSTI / ETSI EN 303 645 (readiness only, NOT certification), RTO/RPO backup restore verification, and UK NCSC 2028/2031/2035 PQC migration.
6. **Database-Enforced Multi-Tenancy:** PostgreSQL 16 `FORCE ROW LEVEL SECURITY` across all 44 tenant tables, ensuring cross-tenant isolation even under application-layer faults.
7. **15 Native Commercial Languages & Currencies:** Served across `en-GB`, `tr-TR`, `de-DE`, `fr-FR`, `es-ES`, `it-IT`, `pt-PT`, `nl-NL`, `pl-PL`, `ar-SA` (RTL), `ja-JP`, `ko-KR`, `zh-CN`, `hi-IN`, and `ru-RU`.

## Key Documentation & Machine-Readable Endpoints
- Full AI Knowledge Base: https://www.cybersecurityhouse.com/llms-full.txt
- OpenAPI 3.1 Specification: https://www.cybersecurityhouse.com/openapi.yaml
- 15-Product Catalogue JSON: https://www.cybersecurityhouse.com/api/v1/products
- 11-Sector Pack Catalogue JSON: https://www.cybersecurityhouse.com/api/v1/sectors
- Multilingual Sitemap (15 Locales): https://www.cybersecurityhouse.com/sitemap.xml
- RFC 9116 Security Policy: https://www.cybersecurityhouse.com/.well-known/security.txt
- Live 10-Role Enterprise Console: https://www.cybersecurityhouse.com/app

## 15 Sellable Product Modules & Canonical URLs
- [CSH Sentinel — Deterministic SIEM-Lite & Triage](https://www.cybersecurityhouse.com/en-GB/products/sentinel)
- [CSH AI Guard — Autonomous Agent & MCP Firewall](https://www.cybersecurityhouse.com/en-GB/products/ai-guard)
- [CSH Scan — Verified Exposure Management](https://www.cybersecurityhouse.com/en-GB/products/scan)
- [CSH Resilience — Business Impact Analysis & Restore Evidence](https://www.cybersecurityhouse.com/en-GB/products/resilience)
- [CSH Identity — Human, Machine & AI Identity Posture](https://www.cybersecurityhouse.com/en-GB/products/identity)
- [CSH Compliance — NIST CSF, ISO 27001, NCSC CAF & GDPR Readiness](https://www.cybersecurityhouse.com/en-GB/products/compliance)
- [CSH Home Shield — Smart Home & Consumer IoT Posture](https://www.cybersecurityhouse.com/en-GB/products/home-shield)
- [CSH IoT Shield — Commercial IoT & Smart Building Security](https://www.cybersecurityhouse.com/en-GB/products/iot-shield)
- [CSH EV Shield — EV Charging & Read-Only OCPP Posture](https://www.cybersecurityhouse.com/en-GB/products/ev-shield)
- [CSH Energy Shield — Solar Inverter, Battery & DER Posture](https://www.cybersecurityhouse.com/en-GB/products/energy-shield)
- [CSH OT Shield — Passive Industrial ICS/OT Visibility](https://www.cybersecurityhouse.com/en-GB/products/ot-shield)
- [CSH Supply Chain — SBOM Provenance & Supplier Risk](https://www.cybersecurityhouse.com/en-GB/products/supply-chain)
- [CSH Quantum — CBOM & UK NCSC PQC Readiness](https://www.cybersecurityhouse.com/en-GB/products/quantum)
- [CSH Cyber Range — Isolated Synthetic Simulations](https://www.cybersecurityhouse.com/en-GB/products/cyber-range)
- [CSH Services — Authorised Reviews & Managed Monitoring](https://www.cybersecurityhouse.com/en-GB/services)
- [Primary Research Bibliography & Standards Verification](https://www.cybersecurityhouse.com/en-GB/research)


## 15 Global Languages & Regional Regulatory Alignment
- **en-GB (English (UK) · GBP):** https://www.cybersecurityhouse.com/en-GB — Frameworks: UK NCSC Cyber Essentials Plus,UK GDPR & Data Protection Act 2018,ISO/IEC 27001:2022,FCA Operational Resilience,NCSC PQC 2028/2031/2035
- **tr-TR (Türkçe (TR) · TRY):** https://www.cybersecurityhouse.com/tr-TR — Frameworks: 6698 Sayılı KVKK,BDDK & TCMB Bilgi Sistemleri Yönetmeliği,ISO/IEC 27001:2022,Siber Güvenlik Başkanlığı Rehberleri,UK NCSC PQC
- **de-DE (Deutsch (DE) · EUR):** https://www.cybersecurityhouse.com/de-DE — Frameworks: BSI IT-Grundschutz,NIS2-Umsetzungsgesetz,DSGVO (GDPR),ISO/IEC 27001:2022,BAIT/VAIT,NCSC PQC
- **fr-FR (Français (FR) · EUR):** https://www.cybersecurityhouse.com/fr-FR — Frameworks: ANSSI Guides d'hygiène informatique,Directive NIS2 France,RGPD / CNIL,ISO/IEC 27001:2022,HDS
- **es-ES (Español (ES) · EUR):** https://www.cybersecurityhouse.com/es-ES — Frameworks: Esquema Nacional de Seguridad (ENS),INCIBE,Directiva NIS2 España,RGPD / LOPDGDD,ISO/IEC 27001:2022
- **it-IT (Italiano (IT) · EUR):** https://www.cybersecurityhouse.com/it-IT — Frameworks: Agenzia per la Cybersicurezza Nazionale (ACN),Direttiva NIS2 Italia,GDPR,ISO/IEC 27001:2022
- **pt-PT (Português (PT/BR) · EUR):** https://www.cybersecurityhouse.com/pt-PT — Frameworks: CNCS Quadro Nacional de Referência para a Cibersegurança,Diretiva NIS2,RGPD / LGPD,ISO/IEC 27001:2022
- **nl-NL (Nederlands (NL) · EUR):** https://www.cybersecurityhouse.com/nl-NL — Frameworks: NCSC-NL Richtlijnen,Cyberbeveiligingswet (NIS2),BIO,AVG (GDPR),ISO/IEC 27001:2022
- **pl-PL (Polski (PL) · PLN):** https://www.cybersecurityhouse.com/pl-PL — Frameworks: Krajowy System Cyberbezpieczeństwa (KSC),Dyrektywa NIS2 Polska,RODO,KNF,ISO/IEC 27001:2022
- **ar-SA (العربية (MENA) · SAR):** https://www.cybersecurityhouse.com/ar-SA — Frameworks: الهيئة الوطنية للأمن السيبراني (NCA ECC),إطار الأمن السيبراني للبنك المركزي السعودي (SAMA),نظام حماية البيانات الشخصية (PDPL),ISO 27001
- **ja-JP (日本語 (JP) · JPY):** https://www.cybersecurityhouse.com/ja-JP — Frameworks: 経済産業省 サイバーセキュリティ経営ガイドライン,ISMAP,個人情報保護法 (APPI),ISO/IEC 27001:2022,NCSC PQC
- **ko-KR (한국어 (KR) · KRW):** https://www.cybersecurityhouse.com/ko-KR — Frameworks: KISA 정보보호 및 개인정보보호 관리체계 (ISMS-P),개인정보보호법 (PIPA),국가정보원 양자내성암호 (KpqC),ISO/IEC 27001
- **zh-CN (简体中文 (CN/SG) · CNY):** https://www.cybersecurityhouse.com/zh-CN — Frameworks: 网络安全等级保护 2.0 (MLPS 2.0),数据安全法 (DSL),个人信息保护法 (PIPL),ISO/IEC 27001:2022
- **hi-IN (हिन्दी (IN) · INR):** https://www.cybersecurityhouse.com/hi-IN — Frameworks: CERT-In Directions,Digital Personal Data Protection (DPDP) Act 2023,RBI Cybersecurity Framework,ISO/IEC 27001:2022
- **ru-RU (Русский (CIS) · USD):** https://www.cybersecurityhouse.com/ru-RU — Frameworks: ISO/IEC 27001:2022,Защита персональных данных (GDPR / 152-ФЗ),ГОСТ Р 57580,MITRE ATT&CK,Постквантовая криптография

## Transparent Commercial Tiers (Base GBP, Auto-Localized in 15 Currencies)
- **Starter (£299 / month):** Up to 25 verified assets, 50 GB/month telemetry, 30-day immutable retention, CSH Sentinel core detections, 1 AI Guard agent, email support.
- **Business (£799 / month — Most Popular):** Up to 100 verified assets, 250 GB/month telemetry, 90-day retention, CSH Sentinel + CSH Scan + 5 AI Guard agents, Cyber Essentials & ISO 27001 readiness packs, business-hours analyst support.
- **Professional & MSP (£1,850 / month):** Up to 350 verified assets, 1 TB/month telemetry, 365-day retention, full platform including CSH Quantum NCSC PQC inventory, SAML/OIDC SSO, delegated MSP sub-tenants.

## Ten Role-Segregated Enterprise Workspaces (/app)
- **W1 · Platform Super Admin:** Tenant provisioning (`FORCE RLS`), regional residency (`UK-LON`, `EU-FRA`, `MENA-RUH`, `APAC-TYO`), append-only SHA-256 audit log.
- **W2 · Business Operations & CRM:** 15-locale consultation inbox, GDPR consent ledger, commercial plan catalog.
- **W3 · SOC Analyst Workbench:** Incident correlation timeline and human step-up response approval gate.
- **W4 · Customer Organisation Portal:** Authorized CSH Scan runner, GRC framework readiness bars, UK NCSC 2028/2031/2035 PQC cryptographic inventory.
- **W5 · CSH Sentinel:** Asset registration, ownership proof, idempotent Sigma ingestion, PII-redacted ARYA SAI triage.
- **W6 · CSH AI Guard:** Autonomous agent inventory, MCP tool allowlist enforcement, indirect prompt-injection blocking.
- **W7 · Connected World:** CSH Home Shield (passive LAN discovery, `unknown` for unsupported devices), CSH EV Shield (read-only OCPP 1.6J/2.0.1 posture, physical actuation blocked), CSH IoT Shield, CSH Energy Shield, and CSH OT Shield (passive IEC 62443 SPAN/TAP visibility).
- **W8 · Governance & Resilience:** Business Impact Analysis (BIA), RTO/RPO backup restore exercise attestation, and SPDX/CycloneDX SBOM supplier risk.
- **W9 · Partner / MSP Portal:** Delegated customer provisioning and recurring partner margin tracking.
- **W10 · Developer & Integrations:** Scoped SHA-256 collector keys, OpenAPI 3.1 explorer, TypeScript/Python SDKs, HMAC-SHA256 replay-protected webhooks.

## Primary Research Bibliography & Standards Verification
- NIST Consumer IoT Baseline & NISTIR 8259: https://www.nist.gov/itl/applied-cybersecurity/nist-cybersecurity-iot-program/nistir-8259-series
- UK PSTI Act & ETSI EN 303 645: https://www.gov.uk/guidance/regulations-consumer-connectable-product-security
- UK ICO IoT Personal Data Guidance: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/online-tracking/guidance-for-consumer-internet-of-things-products-and-services/
- UK VCA Vehicle Cyber Security (UNECE R155/R156) & ISO/SAE 21434: https://www.vehicle-certification-agency.gov.uk/connected-and-automated-vehicles/cyber-security-and-software-updating/
- Open Charge Alliance OCPP 1.6 Security Whitepaper (4th Ed) & OCPP 2.0.1: https://openchargealliance.org/ocpp-info-whitepapers/ocpp-1-6-security-whitepaper-4th-edition/
- Peer-Reviewed EV & Charging Threat Literature: DOI 10.1145/3801968 (2026), DOI 10.1145/3735662 (2025), Coventry University SeRCAS, University of Michigan IoT Security Lab.