MansioSec

For independent vCISOs and small security firms

Professional security work for small clients, without enterprise software prices.

MansioSec gives you the assessments, risk registers, insurance readiness, board reports, policies and incident playbooks a client expects, with your firm's name and colors on every document. Client data stays on your computer.

Become a founding memberSee what's inside
A mansio was a way station on a Roman road: a place to check in, resupply, and get back on the route.

Why we built it

MansioSec started inside a working vCISO practice. Software for professional client reports cost far more than a small practice or its clients could carry, so we built our own, and it has been used on real client engagements since.

Now it's ready for other practitioners: new vCISOs who need repeatable, professional deliverables from day one, and small firms that want to serve the businesses the big providers pass over.

What's inside

Each tool is built for one job in an engagement, and they share client records, so an assessment gap becomes a risk, a policy and a line in the board report without retyping.

Win the work

Readiness CheckA short self-assessment that scores a prospect and starts the conversation.
Agreement BuilderNDA, MSA and statements of work from one client record, priced from your catalog, on your own templates.

Assess

NIST CSF 2.0 AssessmentCurrent and target scores, risks and evidence, with the report and board deck.
CISA CPG BaselineA baseline against the Cybersecurity Performance Goals, with roadmap and report.
Insurance ReadinessThe questions cyber insurers ask, answered with dated evidence, a fix-before-applying plan and a summary for the broker.
Audit ReadinessMaps an assessment to SOC 2, ISO 27001, HIPAA and PCI DSS, and tracks the auditor's evidence requests.
Asset InventoryThe security view of a client's systems: criticality, data and exposure, from their existing inventory.

Deliver

Risk RegisterRated, owned, dated and decided. Imports assessment gaps and tracks scan and penetration test findings to a fix.
Board ReportTwo pages for owners or a board: status, top risks, trend and the decisions needed.
Vendor Risk ReviewVendors sorted into tiers, with questionnaires, findings and review dates.
Documentation GeneratorStarter policies, templates and evidence requests from a saved assessment, mapped to requirements.
Document RegisterEvery governed document in one place: owner, version, approval, next review and acknowledgments.
Client Portfolio and Engagement CalendarEvery client side by side, and what's due and delivered in each phase of the engagement.

Security playbooks

Enterprise Playbook BuilderAn incident response plan for business clients: who to call, what to isolate, who communicates.
Tabletop Exercise BuilderPlan and run a tabletop, then produce the after-action report.
Personal Playbook BuilderLarge-print security playbooks for individual and family clients, including the owners and staff of your business clients.

Your brand

Brand SetupYour firm's name, contact details, colors and logo, entered once and used on every report and deck.

MansioSec is not affiliated with or endorsed by NIST, CISA or any standards body. Assessments are self-checks to guide the work, not audits or certifications.

Also from JCady LLC

Family Security Playbook, for families and small organizations

Your clients' families, churches, nonprofits, HOA boards and small offices need a plan too, but not a NIST assessment. Family Security Playbook is JCady LLC's separate package built for them, and it works alongside MansioSec.

  • Family Security Playbook: a large-print plan for a household: who to call, what to do when a scam call comes, and how to report it
  • Small Office Security Playbook: who decides, who to call, the money rules everyone follows, and what to do about a fake invoice, a hacked email or locked files
  • Free tools to share: a scam quiz, a practice scam call, an office checkup and an office drill, all with your firm's name and phone

With a Family Security Playbook partner plan, you give the people you serve playbook codes from your organization page, branded with your firm. They build their own plan; you stay the one they call when something goes wrong.

For small organizationsFor families

How it works

Built by a security practitioner, the way a security practitioner would want it.

  1. Sign in with your own loginEvery person on your team has their own sign-in, with a required second step (an authenticator app, passkey or security key). No shared passwords.
  2. Client data stays with youThe tools run in your browser and save to files on your computer. Client assessments, risks and reports never come to us.
  3. Your brand on every pageReports, decks, policies and playbooks carry your firm's name, logo and colors, not ours.
  4. Add your teamOwners add and remove their own staff on the Team page, within the firm's seats.

Now open

Founding members

We're opening MansioSec to a small group of founding members: practitioners who want professional tools now and a say in what comes next.

  • Every tool, including new ones as they're added
  • A direct line to the people building it
  • Founding-member pricing

Tell us a little about your practice and we'll set up a walkthrough.

Email us(520) 223-9878 ext. 800