ClowdWork Security

Digital risk, with the evidence attached.

The module reviews what happens on the company's computers and returns findings: what it is, how many people it affects, since when, what it puts at risk and how to check it. All of it comes from data the agent already sends.

Illustrative
Exposure
Open findings
by severity
High Remote-control software installedSeen across several areas, on almost every day of the month 130 people
High A company system accessed over plain HTTPIf it asks for a username and password unencrypted, it is confirmed 115 people
Medium A document that appears to store passwordsSpotted from the file name, without opening it 1 person
Low A web AI tool in useInformational: what matters is what gets pasted into it 34 people
How it is delivered

A finding is not an alarm: it is something you can check.

Each finding arrives with context: the risk explained, how to check it, the supporting evidence, how many people it affects and how long it has been going on. Less noise, more context and better judgment before deciding what to do. A signal is a reason to review, never proof of wrongdoing.

1

Archiving is not deleting

Archived findings stay visible in their own section, with the reason and with who put them there. If they vanished, archiving would be deleting under another name, and the customer would lose the only proof that the finding was looked at and something was decided.

2

A muted finding comes back on its own

There is no «for good»: the server rejects a mute with no date, and when the term expires the finding goes back to open. Without that, a mute set one afternoon would leave the customer without that finding forever.

The part nobody shows

An empty list does not say «you are clean».

A blank screen can mean five very different things, and reassuring in writing someone nobody has looked at is the worst mistake a security module can make. So every kind of empty carries its own name, in plain language and with none of our jargon.

And the module also says how many people it could actually look at, and how many it could not. If coverage falls short, it says so at the very top instead of drawing a conclusion that will not hold.

The five ways of being empty

  • Not available for your company yet.
  • Switched off — your administrator turns it on.
  • It is missing on our side: our debt, not yours.
  • Switched on and watching, but nothing to report yet.
  • There is data and there is no news. This is the only green one.
What is switched on

What the agent collects in your company, and why what it does not collect, it does not.

Not a feature list: the real state of every capability in your installation, with its level and with who left it that way.

  • The capabilities that touch the person are requested with a signed document; they are not switched on on their own.
  • A ceiling limits how far each capability can be raised, and if the ceiling cuts what you asked for, the screen says so.
  • Every change is recorded with your name and the reason, and it cannot be erased.
  • Some capabilities do not collect information: they act on the machine. They are marked as such and are not mixed in with the rest.
Who sees what

The panel is not open to everyone.

Access is granted by role, not by default. And whoever gets in sees their own people, not the whole company.

Granted by role The panel requires a specific role. Whoever does not have it does not get in, and the screen tells them who to ask.
Only your own people An area administrator sees their area. The whole report is calculated within that scope; it is not trimmed in the browser.
Enrolled person by person Only people enrolled in the module are looked at. If nobody is enrolled, the module says so instead of showing an empty list.
Nobody is scored A finding describes a situation and its risk. There is no ranking of people and no behaviour score.

Start by knowing what happens in your own house.

The first delivery is not an alarm: it is a page with a handful of true statements about your own organization, each with its evidence next to it, and none of them accuses anyone.