How is the security score calculated

How is our DNSSEC assessment performed

How is our SPF assessment performed

How is our DMARC assessment performed

How our SSL/TLS assessment is performed

How our Security Headers assessment is performed

How our Potential Vulnerability assessment is performed

How our Blocklist assessment is performed

How our Open Ports assessment is performed

How our Active Vulnerability scanner works

How do we uncover IP addresses in the digital footprint

How do we uncover Cloud  Storage in the digital footprint

How do we uncover Applications in the digital footprint

How do we uncover Software used in the digital footprint

How do we uncover Email Addresses in the digital footprint

How do we uncover Files in the digital footprint

How to add or delete primary domains from your digital footprint

How to add or delete users from your account

How to get the best results from our attack surface scans?

Establishing parent child relationships between questions

How to test a questionnaire

How to configure rating of a questionnaire

Adding suppliers to your supply chain on the Ceeyu platform

How can I impose 2FA on my company's users?

Setting up SSO authentication with your identity provider (IdP)

How to configure assessment workflows

How to configure supply chain risk scoring

Managing content in your Trust Center

Customizing Your Trust Portal Branding

Setting Up a Custom Domain for Your Trust Portal

Managing access to your Trust Portal content

Trust Center overview

Managing certifications in your Trust Center

Integrating Ceeyu with third-party applications

How do we uncover Similar Domains in the digital footprint

More info about our recurring attack surface scans.

Automated security scans

Digital footprint analysis

Account management

Answering assessments (suppliers)

Conducting assessments (clients)

Managing suppliers

Building questionnaires

Integrations

Your compliance hub that works alongside questionnaires to make assessments faster and more professional.

Trust Center

<p>At Ceeyu, our motto is “Supply Chain Risk Management Made Easy.” That's why we provide you with the tools to translate supplier risks into one number, the overall Risk Rating, a weighted average of risk scores by domain (e.g. Cybersecurity, Data Privacy, ESG, etc). The weight of risk scores by domain is adjustable by supplier type. Here's how it works, from the Risk Management page, accessible via Profile &amp; Preferences (configuration rights reserved for admins).</p><p><img class="image_resized" style="width:30.84%;" src="https://cdn-assets.productfruits.com/cd6b1c46-94bc-4256-ab84-2fe7b72cb708"></p><h3>Supplier and assessment types</h3><p>&nbsp;</p><p>You can organize your suppliers into groups by supplier type. By default, we offer a set of 5 types, but you can delete them and/or add your own categorization of suppliers.</p><p><img class="image_resized" style="width:79.17%;" src="https://cdn-assets.productfruits.com/14981a35-5d3b-470c-b6b8-9bee5f44eed5"></p><p>Similarly, you can organize questionnaires and assessments by type. Here too, we offer a set of 7 commonly used third-party risk management categories, to which you can add your own types. Unlike supplier types, you cannot delete our default assessment types, but you can decide not to use them. However, we strongly recommend that you use these types, as this will enable, for example, cross-industry comparisons to be made at a later stage.</p><p><img class="image_resized" style="width:79.43%;" src="https://cdn-assets.productfruits.com/db6071b1-09b4-4f5e-86e7-c3411ca802d8"></p><p>The use of assessment types makes it possible to visualize risk scores by domain.</p><p><img class="image_resized" style="width:79.84%;" src="https://cdn-assets.productfruits.com/644c898c-7a35-4a8f-98b1-eeadcbd9c976"></p><h3>Supplier risk rating</h3><p>&nbsp;</p><p>The supplier's overall risk rating may depend on the Assessment Type and Supplier Type. For example, the impact of cybersecurity assessments will be higher for a mission-critical SaaS provider than for an office supplies vendor. This can be done from the Risk scoring tab.</p><p>To begin, select the supplier type for which you wish to configure the risk rating. &nbsp;Then configure the impact of an assessment type using the three-point menu.<img class="image_resized" style="width:95.92%;" src="https://cdn-assets.productfruits.com/5f6855c7-e120-412b-a3b8-b31a9e923427"></p><p>From the edit menu, you'll be able to configure the weight of the Assessment type score in the calculation of the total supplier Risk rating. &nbsp; You'll also be able to set the impact of the Automated assessment (currently only the Ceeyu ASM score, but other automated assessments may be added in the future) on the Assessment type score.&nbsp;</p><p><img class="image_resized" style="width:88.67%;" src="https://cdn-assets.productfruits.com/e351d958-d3f8-47c9-a87c-a56bb8440667"></p><p>⚠️<strong> IMPORTANT</strong> ⚠️</p><p>Any change to the configuration will update the current risk score, as well as future risk scores. A change in configuration does NOT change historical scores.</p>

<p><span style="background-color:rgb(255,255,255);color:rgb(41,42,46);">The <strong>Trust Center</strong> module is Ceeyu's new solution that transforms how suppliers share compliance documentation with their clients. Instead of responding to repetitive questionnaires, suppliers can proactively upload and organize their certifications, policies, and compliance documents in a centralized, controlled environment. Clients can then access this information through a branded Trust Portal, reducing assessment overhead for both parties.</span></p><h2>What is the Trust Center?</h2><p>Your <strong>Trust Center</strong> is your internal workspace within Ceeyu where you:</p><ul><li>Upload and organize compliance documentation</li><li>Set access levels for each document</li><li>Manage access requests from clients and prospects</li><li>Configure your public-facing Trust Portal</li><li>Track who's viewing your content</li></ul><p><strong>Think of it as:</strong> Your compliance command center—where you control what you share and with whom.</p><p><strong>Location:</strong> Access it from the main Ceeyu menu under <strong>Trust Center</strong></p><h2>What is the Trust Portal?</h2><p>Your <strong>Trust Portal</strong> is the public-facing website where clients and prospects can:</p><ul><li>Browse your compliance documentation</li><li>View public certifications and policies</li><li>Request access to protected documents</li></ul><p><strong>Think of it as:</strong> Your compliance storefront—how the world sees your security and compliance posture.</p><p><strong>Location:</strong> Your portal is accessible at:</p><ul><li>Default: <code>yourcompanyname.trustceeyu.io</code></li><li>Custom domain: <code>trust.yourcompany.com</code> (configurable in settings)</li></ul><h2>How They Work Together</h2><p>The Trust Center and Trust Portal are two sides of the same system, serving different audiences:</p><figure class="table"><table><thead><tr><th>&nbsp;</th><th><strong>Trust Center</strong></th><th><strong>Trust Portal</strong></th></tr></thead><tbody><tr><td><strong>Who uses it</strong></td><td>You and your team</td><td>Clients and prospects</td></tr><tr><td><strong>Purpose</strong></td><td>Manage and control content</td><td>View and access content</td></tr><tr><td><strong>Access</strong></td><td>Requires Ceeyu login</td><td>Public URL (with access controls)</td></tr><tr><td><strong>Actions</strong></td><td>Upload, approve, configure</td><td>Browse, request, download</td></tr></tbody></table></figure><h3>The Content Flow</h3><pre><code class="language-plaintext">┌─────────────────────┐
│   Trust Center      │  You upload documents and
│   (Back Office)     │  set access levels
└──────────┬──────────┘
           │
           │ Content is published
           │
           ▼
┌─────────────────────┐
│   Trust Portal      │  Clients see what you've
│   (Public-Facing)   │  allowed them to see
└─────────────────────┘</code></pre><p><strong>Example workflow:</strong></p><ol><li><strong>In Trust Center:</strong> You upload your SOC 2 report and set access level to "ON REQUEST"</li><li><strong>On Trust Portal:</strong> A prospect sees "SOC 2 Type II Report" listed but cannot download it</li><li><strong>Prospect action:</strong> They click "Request Access" and fill out a form</li><li><strong>In Trust Center:</strong> You receive a notification and review their request</li><li><strong>You approve:</strong> They get an email with a secure link to view the report</li><li><strong>On Trust Portal:</strong> They can now view and download the SOC 2 report</li></ol>

<p>Ceeyu enables you to receive information about new risks identified by email and/or by webhook for third-party application integration. &nbsp;The event-based email alert can also serve to alert a NOC.&nbsp;</p><p>To set this up, visit the <a href="https://app.ceeyu.io/integrations">Integrations page</a>, which is accessible through the Profile &amp; Preferences menu (Admins only).&nbsp;</p><figure class="image image_resized" style="width:79.67%;"><img src="https://cdn-assets.productfruits.com/f0ec2db9-df7a-407c-96ff-d7bab73f193e"></figure><p>⚠️ <strong>IMPORTANT</strong> ⚠️</p><ul><li>We send one webhook call and one email per new risk identified (corresponding to the criticality you configured to be notified for).&nbsp;</li><li>Multiple email addresses can be added for the email notification, and these email addresses do not need to be associated with a Ceeyu user account)</li><li>Emails provide both a HTML version (for your email client) as a text version (for automated processing) of the risk information</li><li>Secret token for HMAC 256 signature is the secret token used to generate a HMAC-256 signature of the webhook payload, available in the <code>X-CU-Signature-256</code> HTTP header to, validate the message's content integrity.</li></ul><h3>Data provided</h3><p>For every new risk detected, the following data is provided:</p><figure class="table"><table><tbody><tr><th>Company Name</th><td>Name of the <strong>company</strong> for which the risk was detected</td></tr><tr><th>Name</th><td>Name of the <strong>asset</strong> for which the risk was detected.</td></tr><tr><th>Severity</th><td>The detected risk's <strong>severity level</strong>.</td></tr><tr><th>Description</th><td><strong>Description</strong> of the detected risk.</td></tr><tr><th>Domain</th><td><strong>Domain</strong> for which the risk was detected.</td></tr><tr><th>Host</th><td><strong>Hostname</strong> for which the risk was detected.</td></tr><tr><th>Source</th><td>Automated assessment.</td></tr><tr><th>Type</th><td>Attack surface scan.</td></tr><tr><th>Url</th><td>Url to the detected risk's detail page on the platform.</td></tr></tbody></table></figure><h3>Examples</h3><h4>&nbsp;</h4><h4>JSON payload for webhook</h4><pre><code class="language-javascript">{
  "company_name": "Demo Company",
  "name": "democompany.com",
  "severity": "MEDIUM",
  "description": "Permissions Policy is not configured for intranejsont.democompany.com. This makes the application vulnerable to MITM, XSS, clickjacking and other common web attacks. ",
  "domain": "democompany.com",
  "host": "intranet.democompany.com",
  "source": "Automated assessment",
  "type": "Attack surface scan",
  "url": "https://app.ceeyu.io/risk-management/risk-detection/0x127d9eb5"
}
</code></pre><h4>&nbsp;</h4><h4>Email Text</h4><pre><code class="language-plaintext">Risk identified

Hello there.

A risk with the following characteristics has been identified by Ceeyu:

- Company: Demo Company
- Domain: democompany.com
- Host: intranet.democompany.com
- Severity: MEDIUM
- Source: Automated assessment
- Risk type : Attack surface scan
- Description: Permissions Policy is not configured for intranejsont.democompany.com. This makes the application vulnerable to MITM, XSS, clickjacking and other common web attacks.
- URL: https://app.ceeyu.io/risk-management/risk-detection/0x127d9eb5

Questions?

Is something wrong? or do you have an idea? never hesitate to contact.

For commercial questions: sales@ceeyu.io

For technical issues: support@ceeyu.io

For feedback and ideas: product@ceeyu.io</code></pre><h4>&nbsp;</h4><h4>Email HTML</h4><figure class="image image_resized" style="width:75.53%;"><img src="https://cdn-assets.productfruits.com/a162a71a-bfaf-4b58-9a53-94e7475a95d1" alt=""></figure>

Go back to application

Was this article helpful?

You recently requested to reset your password for your account. Use the button below to reset it. This password reset is only valid for the next 24 hours.

If you’re having trouble with the button above, copy and paste the URL below into your web browser.

Please check your email for instructions to reset your password.

Check your email

Enter your email address and we will send you instructions to reset your password.

Please enter a new password below.

Set your password