Getting started

Platform Overview

Platform overview covering core capabilities, getting started in five steps, RBAC, and dashboard metric semantics.

CyfroSec continuously discovers assets, analyzes vulnerabilities, misconfigurations, secrets and provides AI-driven remediation guidance across your infrastructure.

Core Capabilities

1. Agents

Agents act as your infrastructure's "eyes and ears".

  1. Lightweight: Minimal resource usage.
  2. Secure: Outbound-only connections.

2. Scans

They are automated security checks performed by Agents.

  1. Network Discovery: Identifies open ports and services in your server, network, or infrastructure to drive vulnerability detection and analysis.
  2. Service Fingerprinting: Assesses security posture by signature matching of CVEs in installed packages and services, detecting common misconfigurations and scanning for exposed secrets.
  3. Asset Discovery: Does ARP sweeps, local process enumeration and MAC vendor lookup.

Dashboard Metric Semantics

MetricMeaning
Completed ScansScans currently in completed state (not a historical event count).
Active ScansScans currently running or pending.
Failed ScansScans currently in failed state.
Scan ProgressBased on terminal states: (completed + failed) / total scans.

3. CyfroAssistant

Your personal security analyst, available 24/7.

  1. Natural Language Queries: Ask queries like "Summarise the findings from yesterday's scan." or "List active agents" effectively querying your entire fleet in seconds.
  2. Accessibility: Helps to explain, understand, analyze and take action on your data, designed for not just Cybersecurity experts but also for non-Cybersecurity teams and Executives.

Getting Started Guide

Follow these steps to get your first Agent up and running in minutes.

Prerequisites

  1. An active CyfroSec user account.
  2. Admin access to the machine you wish to monitor.
  3. Docker.

Step 1: Sign Up and Create Organization

SaaS (Cloud-Hosted)

Go to the CyfroSec Portal and open the sign-up page.

  1. Enter your email and password.
  2. Fill in your Organization Details (Company Name, etc.) when prompted.
  3. Complete the email verification process.

Important: The first user in a new organization/account group must be an admin (Organization admin or Account group admin). Other users can use non-admin roles.

Step 2: Create an Account Group

Agents are organized into Account Groups (e.g., "DevOps", "AI Datacenter", "Production", "Staging"). You must have at least one group to register an agent.

  1. Go to Settings > Account Groups.
  2. Click Create Group.
  3. Name it logically (e.g., "Web App Production Server").

Step 3: Register an Agent

We use a secure One-Time Token to link your server to the cloud.

  1. Navigate to CyfroAgent in the sidebar.
  2. Ensure you are assigned an Account Group.
  3. Click Generate Registration Token. You'll need this token in the next step.
  4. Copy the token string immediately (it is only shown once).

Step 4: Install the Agent

Please follow the steps in the CyfroAgent and Setup guide.

Step 5: Verify

  1. Wait about 30 seconds for the Agent to initialize.
  2. Refresh the Agents page in the Portal.
  3. You should see your new Agent listed as Online.

Provisioning Consistency Note

When organizations, account groups, or users are created from the main admin console, provisioning behavior is aligned:

  1. Account group creation bootstraps a default Network Discovery scan.
  2. User creation triggers onboarding notification flows.
  3. Plan quotas are enforced consistently.