Cybersecurity

What the Home says, checked against the app — 6 backed · 17 not verified · 5 new since the last check

• Not checked yetNEWRepair executes the fix (code fixed on a repair branch, security rules tightened, the Home's own words corrected) and records that it ran, rather than just filing a finding.
• Not checked yetwas partly backedKey rotation runs automatically every 30 days; AI and registrar keys escalate to a person.
• Not checked yetwas backedCyber Check reads every module's live Home and checks it against the code of the build serving it; a claim the app does not back becomes a finding.
• Not checked yetwas backedCRA rules: each division's GST/HST and PST are checked nightly against the Canada Revenue Agency's published rates, in Books and on issued invoices.
• Not checked yetNEWThe Sites and Devices inventory lists public sites and servers, refreshed nightly with read-only checks (DNS, response headers, hosting accounts); dedicated tenants are read and report only, never changed; reports whether each runs PHP.
• Not checked yetNEWThe Home shows a recorded (not live) replay of the platform's activity during the last fix on a world map, redacted to when, which module and how big, and shown at least 15 minutes after the fix ended.
• Not checked yetwas backedPlatform compliance percentages per framework (SOC 2, ISO 27001, HIPAA, GDPR, CCPA/CPRA, PIPEDA, IEAC) are shown with the checked build and collection dates.
• Backed by the appNEWScheduled scans run across the platform against a register, producing findings with a severity.Verified by hand — Built 2026-10-03 and SERVING (cybersecurity.appsite.ca build 7309338 contains webapp/components/ScanRegister.tsx; its dashboard mounts <ScanRegister />, verified on GitHub at the serving sha): lib/scan-register.ts names every scheduled scanner across the platform with its cadence — Cyber Check every 15 min + nightly over the module registry, CRA rules each tick, repo watch hourly, orphan branches
• Backed by the appwas backedDeal-readiness view assembles the security answers a buyer's questionnaire asks for.Verified by hand — Built 2026-10-03 — cybersecurity webapp 5879dfb (register, deal readiness, headers): /deal-readiness assembles the buyer’s security-questionnaire answers (scanning, verified apps, open findings by severity, patching, policies, incident plan, access reviews, vendors, MFA, encryption, insurance) from the live security record, each with its source and a copy-as-text export.
• Backed by the appwas backedInsurance evidence is produced from the same record.Verified by hand — Built 2026-10-03 — cybersecurity webapp 5879dfb (register, deal readiness, headers): the Insurance evidence section of /deal-readiness produces the underwriter checklist from the SAME record (scanners, access reviews, checks, policies, vendors); only backups — with no record in the programme yet — is shown as entered by hand.
• Not checked yetwas backedAccess reviews and vendor risk are tracked.
• Not checked yetwas backedRegulatory and policy mapping with compliance state is provided.
• Not checked yetwas backedPatch state is tracked across the estate.
• Not checked yetwas partly backedAgents (human, AI and hybrid) can be assigned to findings and patches.Repaired — the code was fixed and merged: Show agent type and assignments on Agents, Findings and Patches; add an Agent column to Patches. PR ↗ · diff ↗ Re-checked Nov 1, 12:34 p.m., after the fix: not checkable by a scan (content, not code).
• Not checked yetwas backedPlatform terms: each platform's liability cap is compared against your exposure, acknowledged and reviewed.
• Not checked yetwas backedTenants view lists every monitored tenant with its current risk score and open findings.
• Not checked yetwas backedA SOC 2 Roadmap guides the company step by step through preparing for a SOC 2 audit.
• Not checked yetwas backedAn Audit Log records the actions taken in the module.
• Backed by the appwas backedCybersecurity uses the same tenant identity, permissions and shared records as the rest of AppSite and can be introduced independently without a separate data silo.Verified by hand — Home CORRECTED 2026-10-03 fleet-wide — the sentence no longer promises automation events and reporting conventions no module could back. The new words are backed: shared tenant identity and permissions (lib/security.ts tenancy, platform rules), shared records (the platform register read by every shared tenant — api/platform-register).
• Backed by the appwas partly backedThe Cybersecurity programme runs for every tenant on every plan; Enterprise adds the dedicated register and its own keys.Verified by hand — Live data: shared tenants are served by AppSite’s programme (platform register, api/platform-register). Every dedicated (Enterprise-tier) tenant runs in its OWN Firebase project — environmentConfigs maps e.g. thirteen → studio-8849194767-f8721, trustlease → mystic-self-t1een, healinghorizons → healinghorizons — so it holds its own keys (its project’s service accounts and API keys) and its own regi
• Not checked yetwas partly backedThe Using AppSite Cybersecurity course (8 steps) and the AppSite Developer Certificate (3 levels, 30 courses) are included free in Training; the certificate is available only on Enterprise or Creator plans.Repaired — the code was fixed and merged: Align Training's Home and cert docs with the enforced 'Enterprise or Creator only' rule. PR ↗ · diff ↗ Re-checked Nov 1, 12:34 p.m., after the fix: not checkable by a scan (content, not code).
• Not checked yetNEWIndustry picker shows modules recommended for each industry (e.g., 12 modules for Auto Parts & Service).
• Backed by the appwas backedThe register page shows what is scanned, open findings and repairs that ran, on one page.Verified by hand — Built 2026-10-03 and SERVING (cybersecurity.appsite.ca build 7309338 contains webapp/components/ScanRegister.tsx; its dashboard mounts <ScanRegister />, verified on GitHub at the serving sha): the Security Dashboard is the one page — the register of what is scanned and how often, the open findings, and the patch/repair queue with the repairers that ran.