Search Results

Short answer: Threat analysis and response happen locally on the endpoint, not in the cloud. Cyber Crucible does not collect customer files, credentials, or keys, and it does not store customer content with a third-party public-cloud provider. The management a...

Short answer: Cyber Crucible's published Service Level Agreement commits to 99.9% monthly service availability (excluding scheduled maintenance and causes beyond its reasonable control), with a defined downtime-credit remedy. Support response times are tiered ...

Short answer: Cyber Crucible minimizes what it holds and retains data only as long as necessary to provide the service. It never collects customer content, credentials, or keys in the first place, so the highest-risk categories have nothing to retain. Behavior...

Short answer: Yes. Cyber Crucible has engaged a contracted Data Privacy Officer with cross-jurisdictional expertise spanning the EU/UK GDPR, California CCPA/CPRA, HIPAA, PCI-DSS, and global data-protection regimes including the Saudi Arabian PDPL. The DPO is r...

Short answer: Yes — Cyber Crucible's software is subject to the U.S. Department of Commerce Export Administration Regulations (EAR). It is not ITAR-controlled and is not administered by the Department of State. No special license is required to provide the sof...

Short answer: By removing the risk rather than only managing it. The three facts that answer the hardest vendor-risk questions are: Cyber Crucible collects no customer content, credentials, or keys; protection runs locally and survives any backend outage; and ...

Short answer: Request it from dpo@cybercrucible.com. Under a mutual NDA, Cyber Crucible provides a prepared vendor security package that answers the domains of the standard questionnaires (SIG, CAIQ) and stands in for a SOC 2 report where a reviewer would ordi...

Short answer: Cyber Crucible supports a covered entity's HIPAA obligations primarily by never collecting protected health information (PHI). Analysis happens locally on the endpoint, so PHI is not uploaded to a third-party cloud for security processing. Becaus...

Short answer: Cyber Crucible helps educational institutions two ways: it stops ransomware autonomously without a 24/7 security operations center, and — through FortressAI — it evaluates AI-tool data access on the device so student records and family data do no...

Short answer: No — Cyber Crucible does not currently hold a FedRAMP authorization, and it does not imply otherwise. FedRAMP authorizes cloud service offerings that hold agency data; Cyber Crucible's model is different. It runs locally on the endpoint and can b...

Short answer: Cyber Crucible is not CMMC-certified, and it says so plainly. It supports a defense contractor's obligations under DFARS 252.204-7012 and CMMC primarily by not collecting Controlled Unclassified Information (CUI) and by supporting on-premises or ...

Short answer: Cyber Crucible suits critical-infrastructure and utility environments because it protects endpoints autonomously and can run offline or air-gapped, with no cloud dependency in the protective path. That fits BES Cyber Systems and other environment...

Short answer: Cyber Crucible supports the IEC 62443 defense-in-depth model for industrial automation and control systems by adding autonomous, kernel-level endpoint protection that does not disrupt production. It runs locally, tolerates disconnected operation,...

Short answer: Cyber Crucible does not process, store, or transmit cardholder data, so it is out of scope as a card-data processor — while still supporting the merchant's PCI-DSS control objectives, particularly the requirement to protect systems against malwar...

Short answer: Cyber Crucible fits Criminal Justice Information Services (CJIS) environments because it processes data locally, never collects criminal justice information (CJI), and can run on-premises or air-gapped inside the agency boundary. US data is handl...

Short answer: Cyber Crucible strengthens an organization's cyber-insurance posture because it delivers the controls underwriters now require — autonomous ransomware prevention, endpoint protection, and MFA-backed access — while also reducing the loss surface b...

Short answer: Cyber Crucible protects privileged and confidential client material by keeping analysis on the endpoint and never collecting files, credentials, or keys — so client confidences are not exposed to a third-party cloud in the course of being protect...

Short answer: A growing patchwork of US state laws imposes obligations that flow down to a company's vendors — comprehensive privacy acts (California, Virginia, Colorado, Texas, and others), sector rules like New York DFS Part 500 for financial services, data-...