The platform
One assessment, read by everyone who would have sent you a form.
Spartan Trust is the platform we built, at sparta.ms. A business answers one assessment about its own security, once, and publishes the result as a Spartan Business Cybersecurity Passport. Its customers, insurers and partners read the Passport instead of sending it a questionnaire.
It is one story told from both ends. The organisation that depends on suppliers stops being put at risk by one it could not see into. The supplier stops filling in twenty different forms for twenty customers, and proves to all of them at once that it takes security seriously.
What a reader sees was checked, not merely asserted, and the Passport says how much of it was. It shows standing in bands for each category, which answers the question a careful reader actually has: is the line cleared. A buyer also sees all of its suppliers at once, with their scores, alerts when one is suspended or drops, and the means to ask for the evidence behind any one of them.
Spartan Trust is designed for both sides and their communities: a buyer imports its suppliers and sets the standard it needs, and an MSP sets its own standard across its customers to raise their Passports together, and both bring their community along so that security improves for everybody.
Who Spartan Trust is for
Spartan Trust speaks to each of three kinds of business in its own terms. Each section below leads to the page on sparta.ms written for you. It is pre-launch: this describes what the platform is designed to do.
For buyers
Which of my suppliers can I trust, and how do I know?
You import your suppliers and set the standard you need from them. Each supplier answers one assessment and publishes a Spartan Business Cybersecurity Passport, so you read what was checked rather than what was asserted.
For suppliers
How do I prove we are secure — once, to everyone who asks?
You answer one assessment and share one Passport with every customer, insurer and partner who asks, instead of filling in a new form each time.
For MSPs
What is in it for me?
You set your own standard across your customers to raise their Passports together. Every lost point is given a cause, so your work is shown honestly, and the Passport stays your customer’s. Designed to open to selected partners.
Three levels, one Passport
Declared
Your answers about your own business.
Complete and publishable, not a demonstration. Nothing in your environment is touched.
Verified
What the platform read, beside what you said.
The platform reads your environment, read-only, and an Indominus MS assessor accepts the evidence a machine cannot read. The Passport says how much of it was confirmed.
Monitored
Watched, and kept current.
At Monitored, Indominus MS is designed to act as your Managed Trust operator: to deploy security best practices across your tenant and keep your score current, to monitor it around the clock (24 hours a day, every day), and to respond to attempts to intrude. Before anything is deployed across the tenant in bulk, we ask for your approval. This is where the platform and our managed security meet.
Three layers of evidence
Spartan Trust is designed to bring three layers of evidence into one Passport, so that what a reader sees is not only what the business says about itself. It is pre-launch: this describes the design, not something you can use today.
Internal
How the business is really set up.
The actual configuration of the business’s cloud and identity, read from the environment itself.
External
What an attacker can see from outside.
The business’s exposed attack surface and its known vulnerabilities, as somebody looking for a way in would find them.
Underground
What is said in criminal channels.
Leaked credentials and signs that the business is being targeted, seen in criminal channels.
Spartan Trust, on sparta.ms
The platform has its own site, where buyers, suppliers and MSPs are each spoken to in their own terms.
Early access
Spartan Trust is opening in stages. Early access is by waitlist, on sparta.ms.
This site does not sign you in to the platform, and it holds no account of yours.