Loading AcefortAce Core connects security operations, external cyber risk and third-party cyber risk, so what one team discovers another can investigate, govern and report on without rebuilding context by hand.
Each module owns a distinct responsibility. All three exchange context and feed the Ace Core Dashboard for a unified management view.
Ace Automate combines enterprise security orchestration, investigation, asset intelligence, exposure and VAPT operations, threat operationalization, governed automation and reporting.
Explore Ace Automate
Fort Eye brings attack-surface visibility, dark-web exposure, mobile application assessment, threat intelligence and digital-risk response into one connected operating model.
Explore Fort Eye
Fort Bridge connects vendor criticality, assessments, evidence, external posture, dark-web exposure, remediation, supply-chain dependencies, incidents, contracts, renewal and offboarding in one auditable lifecycle.
Explore Fort BridgeConnected records keep their own meaning. A vulnerability, ransomware report, exposed credential and vendor observation remain distinct while their relationships become available to the responsible team.
Fort Surface → Exposure Intelligence → Investigation, remediation and verification
Fort Shadow → Response Center → Reset, session revocation or containment
Fort Intel → Threat Nexus → Assessment, asset context and response decision
Fort Surface → Ace Strike → Enforcement and verified closure
Fort Surface → Fort Bridge Vendor 360 → Assessment, assurance and monitoring
Fort Shadow → Fort Bridge → Risk review and remediation
Fort Bridge → Ace Automate → Investigation, response and updated risk context
Ace Automate → Fort Bridge → Risk review, remediation and governance
Leaders see posture, trends, ownership, management attention and priorities, then open the responsible module and source record to investigate, remediate and report.
Security status, incidents, investigations, vulnerability context and remediation progress.
Attack surface, potential dependencies, dark-web exposure, intelligence, mobile application risk and digital-risk cases.
Vendor and supply-chain risk, remediation progress and relationships needing attention.
From a vulnerability to every affected asset, and from an asset to its complete security history, Ace Automate keeps evidence, ownership, decisions and actions connected.
A tailored view of security activity, workload and priority across alerts, cases, incidents, vulnerabilities, intelligence and automation, with severity, trends and time filters.
Unified, alert, investigation and confirmed-incident queues keep source, category, record type, ownership, progression and resolution status clear.
Named owners, team members, source records, related evidence and history remain connected through a managed case lifecycle from open to resolved.
A central inventory connects hosts, IP addresses, domains, applications and managed entities with vulnerabilities, exposures, incidents, investigations, threats and response history.
An intelligence queue, threat assessments, archive and detection library turn Fort Intel, imported and analyst-created intelligence into organization-specific decisions.
Manual, imported and Fort Surface-originated assessments carry findings, status, ownership and history into remediation, investigation and reporting.
Automation, playbooks and actions are governed by policies and approvals, defining which actions run automatically and which require human approval.
Asset, vulnerability, incident and operational reports use selected datasets, reusable templates, PDF or Excel output and customer branding.
Fort Bridge keeps external cyber posture separate from inherent and residual relationship risk. Vendor assertions become assurance only when evidence is requested, validated and revalidated.
Filter large vendor estates by risk, trend, owner, lifecycle and monitoring state, then open posture, assessments, evidence, findings, dependencies, contracts, incidents and history.
Service, owner, criticality, data, access, APIs, cloud use, regulation and fourth parties set inherent risk, Tier 1 to 4, reviewer groups, assessment scope and onboarding gates.
Questions apply according to the relationship. Assertions progress through evidence request, submission, validation, expiry and revalidation; not-applicable answers require approval.
Findings carry severity, due dates, customer and vendor owners. Responses are validated before closure, with disputes, extensions and improvement plans in the same workflow.
Fort Surface, Fort Shadow and Fort Intel add attack-surface, credential, session, threat-relevance and posture-change context alongside assessment and assurance.
Invited vendor users see assigned information, answer assessments, upload evidence and respond to remediation without access to other vendors, internal comments, raw intelligence or Ace Automate notes.
Map fourth parties and concentration risk. Provider events open validation-led potential-exposure reviews, while confirmed incidents can link to Ace Automate response.
Renewal review leads to controlled access, account and key revocation, data return or deletion with evidence, a final risk snapshot and an explicit monitoring decision.
Accepted risk remains visible, owned, approved, time-bound, reviewable and auditable.
Ace Core preserves the relationships between specialist records and keeps ownership with the responsible module.
One platform can serve a single enterprise, a group of companies, public-sector entities or a service provider while records stay associated with the authorized organization and tenant.
Represent a customer, legal entity, group company, department or programme.
Maintain an operational context within the organization and license modules by scope.
Roles and permissions govern access to assets, cases, intelligence, exposures, reports, workflows and third-party records.
Single enterprises, subsidiaries and multiple business units.
Government entities, departments and multi-programme environments.
MSSPs, partner-managed customers and distributor-managed customers.
Reports use the same context teams work with each day. Executives see posture, trends, ownership and unresolved risk; operations see affected entities, evidence, remediation, validation and audit history.
Custom module and dataset reports; asset, vulnerability, incident and operational reports; PDF, Excel, reusable templates and customer branding.
Executive and detailed exposure reports, third-party exposure validation, dark-web exposure, mobile application reports, digital-risk cases and intelligence context.
Executive portfolio, Vendor 360, Cyber Scorecard, assurance, evidence expiry, remediation SLA, accepted risk, supply chain, incidents, renewal and offboarding.
Central administration covers organizations, tenants, users, access control, assets, investigations, workflows, automation, threat assessment, exposure intelligence, product settings and logs.
Ace Automate connects security tools for ingestion, enrichment, investigation and response. Fort Bridge is designed to work with ITSM, SIEM, BI and procurement systems. Available integrations depend on architecture and connected systems.
PDF, Excel and CSV outputs support reporting, with BI integration where supported.
Tickets record module, category, environment, severity, description, attachments, contact and status through resolution. Secrets and confidential personal data should never be uploaded.
Ace Core is developed by Acefort in Muscat and deployed according to infrastructure, data-residency and integration requirements. Architecture review confirms data separation, hosting, integrations and applicable obligations.
Customer-controlled infrastructure and integrations for organizations that require their own security boundary.
Platform data is hosted and retained in the Sultanate of Oman according to the agreed architecture.
Customer-controlled and hosted components combine through an approved architecture and integration plan.
Role-based access, tenant-aware context, governed automation, scoped vendor access, audit history and retained evidence keep activity controlled and traceable.
Ace Core gives leadership and specialist teams measurable operational records across the security lifecycle.
Detection, investigation, response and containment time; automated versus manual actions; incident lifecycle.
Affected assets per vulnerability, vulnerabilities per asset, exposure age, assessment progress and verified remediation.
Attack-surface change, external exposure, third-party services needing validation, impersonation, dark-web exposure, application risk, threat relevance and enforcement.
Assessment cycle time, evidence response, remediation time, overdue actions, residual risk and supply-chain exposure.
Management attention, trends, ownership, unresolved risk and consolidated reporting.
We’ll map the responsible module, connected context, deployment model and evidence required for verified closure through Ace Core.
