An initial assessment tool
A point-in-time security posture overview and decision-support application.
PRODUCT OVERVIEW
A security baseline you can understand.
CSAEC — A Windows desktop assessment application for organisations and professionals who need a clear view of endpoint security.
Designed for confident first steps.
Small organisations regularly face security questionnaires, professional reviews and decisions about which controls deserve attention first. CSAEC converts selected technical indicators into a readable posture overview.
It is suitable for SMEs, professionals, IT administrators, consultants, questionnaire preparation and management reviews.
Core capabilities
- Structured baseline across twelve controls
- Understandable findings and severity
- Local-first processing
- User-controlled report sharing
- Local AI-assisted explanations
What CSAEC is — and is not.
A security guarantee
Not antivirus, EDR, managed SOC, penetration testing, certification, continuous monitoring or automatic remediation.
LICENCE REQUIRED
The download alone does not activate CSAEC.
A valid commercial licence is required for the software to function. Contact CONNEXT EOOD to purchase the licence and receive activation instructions.
PRODUCT DEPTH
Built to make a complex subject approachable.
CSAEC is designed around the idea that useful cybersecurity information should be understandable without being oversimplified. The application separates the overall posture score from the underlying findings, allowing business users to see a concise summary while technical users examine the controls that produced it. Explanations, severity and general next actions are presented together so that the user does not have to interpret an unexplained colour or number.
The local-first model also supports data control. Core checks and scan-result processing are designed to take place on the workstation. Reports are not automatically transmitted to CSAEC or CONNEXT EOOD. The user decides whether to prepare information for external review and should inspect it before sharing. This makes the workflow suitable for organisations that want a preliminary assessment without automatically placing infrastructure information into an online portal.
The integrated AI assistant is intended to explain terminology and provide general guidance. It operates as an informational layer, not as an autonomous administrator. It does not change Windows settings, approve exceptions or guarantee that a recommendation is correct. Every significant technical change should be reviewed against business needs, vendor guidance, organisational policy and recovery plans.
WHERE CYBERSCAN ADDS VALUE
Use cases across the organisation.
Establish a baseline
Create an accessible first overview when no dedicated internal security team exists, then use the results to plan a deeper professional review.
Support routine checks
Repeat the assessment after approved changes, new deployments or configuration work to compare visible endpoint conditions.
Improve technical intake
Start client conversations from a consistent set of observations while preserving the need for independent validation and professional judgement.
Clarify priorities
Translate selected endpoint indicators into an overview that can be discussed alongside operational impact, budgets and responsibilities.
Prepare evidence
Gather preliminary information for cyber-risk or insurance questions without representing the scan as proof of compliance or acceptance.
Recheck the system
Run a new point-in-time assessment after approved remediation and examine whether the relevant finding has changed.
Technology designed around clear boundaries.
The application combines a Python backend, a desktop interface built with HTML, CSS and JavaScript through pywebview, network-oriented components such as Nmap where available, selected local web-service checks using Wapiti where available and a local explanatory language-model layer. Packaging and component availability may differ according to the authorised distribution.
These components expand visibility, but they do not remove technical limitations. Permissions, network filtering, stopped services, security software, local policies and target conditions can all change what a scan can observe. A result marked unavailable should never be silently interpreted as healthy.
Design principles
- Local-first handling of core results
- Stable, structured control outcomes
- Plain-language presentation
- User-controlled external sharing
- No autonomous remediation
- Clear disclosure of uncertainty
- Point-in-time rather than continuous monitoring
A product designed for decisions at different levels.
Operational users need to know what to click and how to read a finding. IT personnel need to understand visibility limits, permissions and technical context. Management needs to see how weaknesses can affect continuity, data and investment priorities. CSAEC connects these perspectives without claiming that one score can replace them.
The application can therefore sit at the beginning of a broader process: baseline assessment, professional validation, approved improvement, recheck and periodic governance review. Its value increases when responsibilities and follow-up actions are clearly assigned.
Clear boundaries build trust.
The product documentation repeatedly identifies what CSAEC does not do. It does not remove threats, monitor continuously, certify compliance or guarantee protection. Network discovery is incomplete by nature, vulnerability signatures require validation, backup configuration is not proof of recovery and AI output can contain errors.
These boundaries are not minor disclaimers. They are part of responsible product use and help customers decide when additional controls or specialist services are required.
COMMERCIAL IDENTIFIER
EAN / GTIN-13 0808375315084
CSAEC — Cyber Server Audit Engine Core is recorded for catalogue, procurement and logistics reference under EAN 0808375315084. Use the identifier together with the complete product name in quotations and purchasing systems.