Resources · Architektura zgodna z wymogami KSC, NIS2, RODO oraz ISO 27001

Primary Research Bibliography & Standards Verification

Peer-reviewed literature and primary regulatory baselines across NISTIR 8259, UK PSTI, ETSI EN 303 645, ISO/SAE 21434, UNECE R155/R156, OCPP 2.0.1 and IEC 62443.

Open in Live Console (ws-superadmin) Umów demo

Primary Research Bibliography & Standards Verification

Architecture & Capabilities

Dla zespołów, które potrzebują dowodów

PostgreSQL 16 FORCE RLS

Every tenant table enforces database-level Row-Level Security bound to transaction-local current_tenant_id().

PII & secret redaction

Bearer tokens, API keys and personal data are scrubbed before any advisory call reaches ARYA SAI.

Human approval gate

No autonomous host isolation or credential revocation; every response action requires a named approver.

UK NCSC PQC roadmap

Cryptographic inventory tracking the 2028 discovery, 2031 priority and 2035 full Post-Quantum milestones.

Immutable audit trail

Append-only SHA-256 checksummed audit logs record every allowed and denied operation.

Regional data residency

Customer telemetry stays within the selected UK-LON, EU-FRA, MENA-RUH or APAC-TYO boundary.

Visual Architecture

Three-Tier Defense-in-Depth Architecture

Combines PostgreSQL 16 FORCE ROW LEVEL SECURITY, deterministic Sigma detection and human-governed containment in one auditable control plane.

Visual Architecture

Post-Quantum Cryptographic Lattice Vault

Tracks cryptographic assets and key rotation schedules against the UK NCSC 2028 discovery, 2031 priority and 2035 full migration milestones.

Verified Architecture Specifications · E-E-A-T Grounding Reference

Deterministic Technical Controls & Machine-Verifiable Evidence

OpenAPI 3.1 Contract Trust & PQC Center

1. Detection Engine (CSH Sentinel): Git-versioned Sigma rules (CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001, T1098.003, T1048, T1190) with idempotent dedupe_key ingestion and SHA-256 immutable event hashes.
2. AI & MCP Firewall (CSH AI Guard): Pre-inference DLP scrubbing ([REDACTED_SECRET], [REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking.
3. Database Isolation (PostgreSQL 16): Enforces ENABLE / FORCE ROW LEVEL SECURITY across all 20 tenant tables bound to transaction-local current_tenant_id(); cross-tenant queries fail closed with HTTP 403.
4. Human-Gated Containment: Zero autonomous destructive actions. Host isolation (isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail.
5. Verified Exposure & GRC (CSH Scan): Cryptographic DNS TXT or HTTP ownership token required before scanning. Continuous evidence aligned with Krajowy System Cyberbezpieczeństwa (KSC), Dyrektywa NIS2 Polska, RODO.
6. Post-Quantum Roadmap (CSH Quantum): Cryptographic inventory tracking RSA/ECDSA/TLS keys against UK NCSC 2028 discovery, 2031 priority migration (ML-KEM / ML-DSA), and 2035 full PQC completion.

Operated by ARYA AI TECHNOLOGY LTD (Registered in England & Wales, Company No. 17372232) · Canonical Domain: cybersecurityhouse.com Regional Data Residency: UK-LON · EU-FRA · MENA-RUH · APAC-TYO · RFC 9116: /.well-known/security.txt

Defense-in-Depth Isolation

Database-enforced tenant boundaries & UK NCSC PQC alignment.

PostgreSQL 16 FORCE ROW LEVEL SECURITY on all 20 tenant tables.
Pre-inference DLP secret and PII scrubbing before any advisory call reaches ARYA SAI.
Aligned with UK NCSC 2028 / 2031 / 2035 Post-Quantum Cryptography milestones.

Inspect OpenAPI 3.1 Spec

db/migrations/0001_initial_enterprise_schema.sqlPostgreSQL 16

ALTER TABLE security_events ENABLE ROW LEVEL SECURITY;
ALTER TABLE security_events FORCE ROW LEVEL SECURITY;

CREATE POLICY tenant_isolation_policy ON security_events
  FOR ALL TO csh_app_role
  USING (organization_id = current_tenant_id())
  WITH CHECK (organization_id = current_tenant_id());

Isolation: Enforced · Cross-tenant queries return HTTP 403

Najczęstsze pytania

Czy AI podejmuje działania izolujące samodzielnie?

Nie. Detekcja opiera się na regułach deterministycznych, a każda akcja wymaga zatwierdzenia przez człowieka.

Gdzie przechowywane są nasze dane?

Podczas wdrożenia wybierasz rezydencję danych w UE (Frankfurt) lub Wielkiej Brytanii (Londyn).

Czy wspieracie zgodność z NIS2, KSC i ISO 27001?

Tak, CSH Compliance automatycznie przypisuje dowody techniczne do wymagań ISO/IEC 27001, NIS2 i RODO.

Czy możemy przeskanować dowolną domenę?

Tylko zasoby, których własność została potwierdzona rekordem DNS TXT lub tokenem HTTP.

Czy współpracujecie z dostawcami MSP?

Tak, oferujemy delegowane zarządzanie klientami i wspólne pule licencji.

Zobacz ją we własnym środowisku

30 minut z inżynierem bezpieczeństwa. Bez slajdów.

Rejestracja w UK (Nr firmy 17372232)
Dane w UK i UE
Dostępna w 15 językach