Watcher Posture Score
Combines findings from nine separate services into one risk model and produces a measurable 0-100 security posture score.
- 9
- integrated security sources
- 7
- weighted risk categories
- 0-100
- measurable posture score
- executive report and trend
Abundant findings, no answer.
In most organizations, security data is not missing but scattered. Network scans on one screen, web vulnerability scans on another, certificate alerts by email, phishing test reports elsewhere, threat intelligence on yet another platform. Each is accurate; none answers "where do we stand today?" Scattered findings yield no unified decision. Watcher reads results from nine security services running in your organization, consolidates duplicates across different sources, and combines them into a single risk model. The result: a measurable posture score and prioritized actions translated to management language by AI.
- Nine separate dashboards with hundreds of findings — nobody decides what to fix first.
- No comparison to last period means progress cannot be measured or proved.
- A technical findings list does not translate to a sentence that matters at the budget table.
What it does.
Consolidates nine sources in one table
Network vulnerability scanning, web vulnerability scanning, phishing tests, threat intelligence (dark web + breach platforms), Active Directory health analysis, firewall configuration audit, SSL certificate validity, server and service monitoring, server agent inventory are evaluated in a unified risk model.
Weights seven risk categories
Technical vulnerabilities 30, human factors 20, data leakage 15, web vulnerabilities 10, firewall posture 10, identity/directory 10, continuity 5 - totalling 100. The weights are visible in the report and configurable to match organizational risk priorities.
Produces honest scores with blind-spot handling
Unmeasured categories do not penalize the score with a zero; their weight is redistributed to measured categories. Result: the score's validity is explicitly stated in the report.
Deterministic calculation, AI-powered narrative
The score is generated by a repeatable calculation based on open rules. AI does not decide; it explains: it writes the rationale, prioritized actions, and blind-spot warnings in Turkish.
Delta reporting — progress is measurable
Each assessment is compared to the previous one. New, closed, and persisting findings are listed separately; the team's effort is proved by trend curves. Tracking happens at asset and IP level.
A4 executive report on demand
One click turns posture score, category breakdown, delta summary, trend curve, AI narrative and recommendations into PDF. Charts are embedded in the document, full Turkish character support.
Your setup remains unchanged
Watcher does not alter services, only reads them. Each service's management screen stays in place, its own inventory is preserved, Watcher is added as a data layer.
Personal data security
Raw records do not reach the AI layer, only numerical summaries and ratios are transmitted. Personal data stays in the on-premises component; only the reporting copy is securely transferred.
From setup to report.
- 01
Connect your sources
Define your scanning servers, phishing campaign platform, threat intelligence service, Active Directory, firewall, SSL certificate monitoring and server agents, or select from your existing licensed services.
- 02
Configure weights
Assign weights to risk categories based on organizational priorities. If not customized, recommended values (technical vulnerabilities 30%, human factors 20%, etc.) are used.
- 03
First assessment
Watcher retrieves data from nine sources, consolidates duplicates, distributes to categories, and calculates the initial posture score. Unmeasured sources are flagged as blind spots.
- 04
Start reporting
Posture score, category breakdown, AI narrative, blind-spot warnings and recommendations appear on the screen. PDF reports are generated on demand.
- 05
Run a cycle
Schedule assessments weekly or monthly. Each result is compared to the previous one, delta (new/closed/persisting findings) is calculated, and a trend curve is drawn.
The specifics.
- Integrated sources
- Network vulnerability (OpenVAS), web vulnerability scanning, phishing tests (Campaign API), threat intelligence (dark web + breaches), AD health (authentication), firewall (API query), SSL monitoring, monitoring service (API), server agent inventory
- Risk categories
- 7 categories: technical vulnerabilities, human factors, data breach, web vulnerabilities, firewall posture, identity/directory, continuity
- Score scale
- 0-100. High scores indicate strong posture. 0-39 critical, 40-59 weak, 60-74 fair, 75-89 good, 90-100 very good.
- Blind-spot handling
- Unmeasured categories do not receive a zero; their weight is redistributed to measured ones. Reports clearly state how many categories were measured.
- Delta reporting
- New findings, closed findings, and persisting findings are listed separately. Tracking at asset and IP level. Trend curves are based on actual assessments.
- Reporting
- Screen: posture gauge, category breakdown, blind-spot badges, AI narrative. PDF: single-page A4, embedded charts, full Turkish, ready for board.
- Cycle
- Manual trigger or automatic weekly/monthly schedule. On-demand ad-hoc assessment.
- Data security
- Personal data does not reach the AI layer (only numeric summaries are sent). On-premises results stay in-house. Notifications contain no vulnerability details.
Frequently asked questions.
Does Watcher replace all my services?
No. Watcher only reads. Each service keeps its own management screen, inventories are preserved, tags are unchanged. Watcher is added as a data layer; your setup does not change.
Does AI assign a different score each time?
No. The score is mathematically calculated, based on open rules, and repeatable. The same data always yields the same score. AI only explains the score; it does not decide. If the AI service becomes unavailable, no fabricated score is shown — the status is clearly reported.
Does an unmeasured category lower my score?
No. An unmeasured category does not receive a zero and does not penalize the score. Its weight is redistributed to measured categories. Reports clearly state 'all 6 of 7 categories were measured', making the score's validity transparent.
Other CyCastle services.
Watcher Posture Score starts today.
Create a free account and run your first scan within minutes.