Skip to main content
KeenSafe
Platform · Security & Trust

Built for enterprise security and trust

KeenSafe is engineered for the customers it tests for — with security practices, control alignment and vendor-risk documentation that meet enterprise procurement on day one.

  • MITRE ATT&CK aligned
  • Production-safe execution
  • Enterprise-ready architecture
  • CTEM-aligned methodology
Problem

The problem

A platform that finds weaknesses in your environment must hold itself to a higher bar. Enterprise procurement teams need control evidence, signed sub-processor lists and incident-response commitments — not a marketing page.

KeenSafe

The KeenSafe approach

KeenSafe is built around an evidence-first security program: documented controls, scoped access, signed audit trails and a published path to regulated certifications. Procurement-grade documentation is supplied under NDA on request.

Capabilities

Key capabilities

Encryption everywhere

TLS 1.3 in transit, AES-256 at rest, per-tenant key material with optional BYOK / HSM. Findings, evidence and exports are encrypted end-to-end.

Access control

Role-based access, SCIM provisioning, SAML/OIDC SSO and MFA. Scoped tokens and short-lived credentials for automation. Just-in-time access for operators.

Audit logging

Tamper-evident audit log of every operator and tenant action, retained per the customer's policy. Exportable to your SIEM in real time.

SOC 2 — designed for

Control structure aligned to the SOC 2 Trust Services Criteria. Type II audit in process; attestation letter shared with prospects under NDA.

ISO 27001 — alignment

Information-security management system aligned to ISO 27001 Annex A controls, with internal evidence collection driven by the platform itself.

GDPR awareness

Designed with data-minimization and purpose-limitation principles. Data Processing Agreement available; sub-processor list maintained and versioned.

Vendor-risk readiness

Standard responses for SIG-Lite, CAIQ and customer-specific questionnaires available to enterprise prospects under NDA.

Sub-processor transparency

A versioned sub-processor list with notification windows for material changes. See the Trust Center for the current list.

How It Works

Discover. Validate. Prioritize. Report. Remediate.

01

Discover

Continuous discovery of external, internal, cloud, identity and SaaS attack surface.

02

Validate

Autonomous pentesting validates exploitable chains across services, identities and data.

03

Prioritize

AI Risk Engine ranks findings by business impact, blast radius and exploitability.

04

Report

Executive narratives, technical remediation packages and evidence — all auto-generated.

05

Remediate

Fix recommendations push to ticketing, ITSM and CI/CD — and KeenSafe re-validates closure.

Attack Path

From external exposure to business impact

KeenSafe walks the chain — not the list. Every step is reproducible and evidence-backed.

01External Exposure
Internet-facing asset, exposed admin panel or leaked credential.
02Initial Access
Validated entry — exposed service, default cred, OAuth misuse.
03Privilege Escalation
Container escape, IAM trust abuse, AD object takeover.
04Lateral Movement
Identity hop, jump-host abuse, segmentation bypass.
05Data Exposure
Read access to sensitive store, secret, or production database.
06Business Impact
Crown-jewel reach: PII, source code, payments or operations.
Executive Dashboard

Continuous risk in CISO-ready terms

One pane: validated attack paths, business-impact-weighted risk, exposed crown-jewel assets, compliance gaps and remediation velocity — refreshed continuously.

  • Risk score weighted by exploitability + blast radius
  • Time-series trend across business units
  • Compliance gap mapping per framework
  • Remediation SLA tracking — opened, closed, regressed
Tenant: ACME Corp
Last validation: 4 min agolive
Risk Score
71
+4 from last week
Active Attack Paths
12
3 critical · 5 high · 4 med
Crown-Jewel Reach
2 / 9
Customer DB · Stripe Vault
Compliance Gaps
8
PCI · ISO · NIST
Remediation Velocity
Findings closed × 12 weeks · MTTR 6.4 days
Outcomes

Business outcomes

SOC 2
Type II — in process

Audit underway against Trust Services Criteria.

ISO 27001
Aligned

ISMS modeled against Annex A controls.

NDA
Documentation under NDA

Security review packs supplied to qualified prospects.

24h
Security disclosure SLA

[email protected] triaged within one business day.

Technical Proof

Built for security teams that verify everything

Reproducible exploitation

Every attack path includes the steps, payloads and artifacts needed to replay or harden against it.

Safe-by-default execution

Production-aware throttling, tenant isolation and rules-of-engagement enforcement built into the engine.

Continuous coverage

New attack surface — DNS, certs, cloud assets, identities — is validated automatically as it appears.

Open data model

Findings, paths and assets are accessible through APIs and exports for SIEM, SOAR and BI consumers.

Compliance Mapping

Audit-ready evidence by control

KeenSafe maps every validated finding to the frameworks your auditors and customers care about.

OWASP Top 10
Web, API and LLM application coverage with proof-of-exploitation evidence.
MITRE ATT&CK
Findings tagged by tactic and technique across initial access, execution, persistence, lateral movement.
NIST CSF / SP 800-53
Control alignment for Identify, Protect, Detect, Respond and Recover functions.
ISO 27001 Annex A
Operational evidence for A.5, A.8, A.12 and A.14 controls.
PCI DSS 4.0
Internal and external pentest, segmentation validation and continuous control monitoring.
GDPR
Data exposure paths, processor isolation and breach-readiness reporting.
TSE
Local control mapping for Türkiye-regulated industries and critical infrastructure.
FAQ

Frequently asked questions

Do you have a SOC 2 report?
Type II is in process. Bridge letters and the most recent control summary are shared with qualified prospects under NDA via [email protected].
Where is data stored?
Region-pinned per tenant. EU data is stored in EU regions; US data in US regions. On-premise and air-gapped deployments keep all data in the customer environment.
Can I get a DPA?
Yes. A standard Data Processing Agreement is available; legal can adapt it to the customer's template within reasonable scope.
How do you handle vulnerability disclosure?
A coordinated disclosure program is published. Reports go to [email protected] and are triaged within one business day.
Do you maintain a sub-processor list?
Yes. The current list is versioned and published in the Trust Center with notification windows for material changes.
Get Started

See your environment validated end-to-end

Request a guided walkthrough of an attack path validated against your real attack surface — external, identity, cloud and crown-jewel data.