Soveryne documentation

How the products fit together, signing in, roles, people and domains. Read this before go-live.

Command is where you govern information security. You write and approve security controls, collect evidence, generate policies from your frameworks and publish them to your staff, track incidents and their reporting deadlines, and see who did what in the audit log.

Counsel is where your staff get answers and do their part. They ask security and compliance questions in a chat that cites its sources, read the policies published to them, and answer evidence requests from the people who run Command.

MESH is your organisation's shared asset register. It imports assets, people and groups from Microsoft Azure, Microsoft Entra, Amazon Web Services, Google Cloud, Google Workspace and ServiceNow, and keeps one record per real thing. Command, ATLAS and BAIT all read from it.

ATLAS maps what your organisation exposes to the internet, finds what is dangerous about it, and shows the routes that lead to the systems you cannot afford to lose. It looks only at what you have put in scope and proved you own, and it scans actively only with a signed mandate.

BAIT runs your phishing-awareness programme. You design simulated phishing campaigns, a second person approves each one, BAIT sends only to email domains you have proved you own, and results are reported per group, never per person.

SPECTER is Soveryne's threat and vulnerability intelligence. You look up adversaries, the techniques they use, malware families and vulnerabilities (CVEs), and see where each piece of intelligence comes from. ATLAS uses the same intelligence when it checks your systems.

SAGE is the shared compliance knowledge base, the standards and frameworks that Command and Counsel cite when they answer a question or draft a document.