Service Providers
Cyprob for managed security service providers
A provider manages many customers from one console, and those customers remain unaware of each other. The boundary is enforced on the server side.
How the model is set up
The control plane is installed on the provider's own infrastructure in a highly available configuration. Only scan workers are placed in each customer environment. The worker scans the customer network from the inside and writes the result back to the provider's control plane. There is no management console on the customer side.
Where the isolation sits
Each customer is a separate organization. Assets, scans, findings and reports belong to an organization, and a user in one organization cannot reach another organization's data. The provider's operations team works by selecting one customer at a time, and each customer is reported separately.
What the provider gets from it
A single control plane removes the cost of a separate installation per customer. A new customer is opened with a new organization and the workers placed on site. With the white label option the console is presented under the provider's own brand.
Common questions
Can customers see each other?
No. Every customer is a separate organisation. Assets, scans, findings and reports belong to the organisation, and the boundary is enforced on the server side.
What sits in the customer environment?
Only scan workers. The worker scans the customer's network from inside and writes results back to the provider's control plane. There is no console on the customer side.
Can the console carry our own brand?
Yes. With the white-label option the console runs under the provider's own brand, and the service is packaged as the provider's own product.