FAST, the Friendly Assessment of Security and Threats, is our rule-based method for product security by design, built for product teams rather than security specialists. You describe the product in a questionnaire, and FAST does the rest: the threats, the risks, the security measures, the requirements of the standard that apply, the documentation the assessor needs and the self-assessment, all on screen in minutes.
Seven steps, one questionnaire
Describe the product once. Each step builds on the one before, and every change you make flows through all of them at once.
- Describe the product A questionnaire on the product, its ecosystem and its functions. No security knowledge needed.
- Decide on the security measures FAST computes the threats and selects the measures. You decide what is done, with a note on each.
- Review the risks The risks your threats create, rated by FAST, adjusted by you, and brought down by the measures you implement.
- See the requirements that apply The provisions of the standard, supported or not, from your decisions.
- Get the documentation pre-filled The IXITs of TS 103 701 the assessor needs, written from your answers.
- Self-assess Your self-assessment, and the assessor’s verdicts test case by test case.
- Know where you stand Figures, charts and a graph of the standard as it applies to your product.
Why FAST?
We built FAST to improve the security of products and simplify compliance without turning product teams into security specialists.
No security expertise needed
Deterministic, repeatable
From design to assessment
Simplify compliance with standards and regulations
Pricing for every manufacturer
Free. One product, from the questionnaire to the assessment, without an account. A free account saves it so you can come back to it.
Subscription. Several products with their history of versions, the dashboard across products, the Excel workbook with the ICS, the IXITs and the assessment ready for the assessor, every standard as it comes, and support from cetome.
Licence. The FAST engine on your own host, in two ways: FAST under your brand, your domain and your accounts, with cetome keeping the engine and the catalogues up to date, or your own tool built on the engine, with your questionnaires, your interface and your integrations.
Get your own FAST
Your product teams are not cyber security experts, but they know their product better than anyone else. We work with you to build FAST into your own process:
Initial workshop
We work together to design your own FAST with a bespoke questionnaire and risk model.
With this workshop, we understand how you work, how your products are used, and what risks apply.
Cyber security requirements
Identify appropriate cyber security requirements to address the applicable risks.
Your team can then decide on what to implement (or not) and provide evidence.
Verification on real products
We verify your own bespoke FAST on real products to validate its usability.
We work with your product teams so that they can use FAST in autonomy!
Compliance assessment
FAST automatically evaluates compliance with target standards and regulations.
You can even use FAST to speed up the evaluation of existing products!