Offensive security · risk management
Offensive Intelligence. Executive Decisions.
GLAIM centralizes offensive security operations, services, technologies and vendors into a single priority criterion, keeping your corporate security posture up to date.
EU-based infrastructure
Each client in its own isolated instance
Periodic product audits
Threat landscapeIllustrative example
Prioritized by real risk: severity, asset criticality and affected compliance.
How it works
Find the real risk before they do.
Automates data capture, prioritizes by real risk with artificial intelligence, and makes decision-making easier.
01
Sources
Services, technologies and processes brought into GLAIM.
02
Unified findings
Same model and criteria, regardless of the source.
03
Prioritization
By real risk: severity, age and asset criticality.
04
Single dashboard
Technical teams and CISO/Board, each with their own view.
05
Linked compliance
Track regulatory compliance status starting from the vulnerability.
The real problem
This is what offensive security looks like at most companies today
Traditional approachWith GLAIM
Information scattered across too many sources, sometimes redundant
11 connectors that enrich assets and findings
Hundreds of vulnerabilities with no real prioritization criteria
Composite score by severity, age, asset criticality and affected compliance
Hard to know what threats a vulnerability actually enables
Threat landscape: vulnerabilities translated into real MITRE ATT&CK tactics
Tracking a service only through periodic status meetings
Chat, early alerts and a real-time client portal
The PDF, Word or Excel report is the only source, outdated the moment you open it
Exportable reports from a living platform, always up to date
No way to know what percentage of your real surface has been assessed
Per-asset assessment coverage, measured
Technical language never translates into a business decision
Single dashboard: same data, technical or business view depending on who's looking
No clear link between a finding and the regulation it affects
Every finding linked to the real regulatory control it compromises
Security of the product itself
A cybersecurity product, being its own first customer
Total security doesn't exist. That's why we obsess over our own.
Same audit rigor we require from our own clients: static analysis and dependency auditing on every code change.
Scoped access control. Granular permissions and clear authorization over who can see and touch what.
MFA with replay protection. TOTP with recovery codes.
SSO via SAML2. Direct integration with your organization's identity provider.
Real per-client isolation. Every tenant in its own database.
Unprivileged containers. GLAIM never runs as a system administrator, by design.
EU-based infrastructure. Network-level protection against denial-of-service attacks. Built with GDPR compliance in mind.
Pricing · Licensing
Three plans, each including everything below it
No limit on clients or projects on any plan.
GLAIM
The complete platform to run offensive security projects.
Projects, clients and assets in one place
Findings with severity, CVSS and evidence, with filters and labels
Native import from your vulnerability scanners
CSV and Excel import and export
Versioned reports with your own templates, exportable to Word and HTML
Finding templates, checklists and standard compliance frameworks
Calendar, planning and reminders
Client portal with two-factor auth and work requests
Up to 5 internal users
GLAIM Pro
Everything in GLAIM, plus the intelligence to prioritise risk and prove compliance.
Everything in GLAIM, plus
Unlimited internal users
Attack Chains: editable attack graph
Live vulnerability intelligence: public exploits and known active exploitation
Full risk graph per client
Decision Intelligence: indicators and metrics for management and the CISO
Custom compliance frameworks
Ticketing and ITSM connectors
Audit log
Access to the à la carte advanced modules: OSINT Recon and Pentesting AI
GLAIM Advanced
Everything in Pro, plus isolation and corporate control for MSSPs and large teams.
Everything in Pro, plus
Team isolation: each team only sees its own clients
Corporate SSO (SAML2)
Connector to your CRM
Integration with AI assistants and agents
Ideal for multi-client MSSPs
| Feature | GLAIM | GLAIM Pro | GLAIM Advanced |
|---|---|---|---|
| Management | |||
| Projects, clients and assets | |||
| Findings with severity, CVSS and evidence | |||
| Finding filters and labels | |||
| Calendar, planning and reminders | |||
| Work requests from the client portal | |||
| Internal users | Up to 5 | Unlimited | Unlimited |
| Import and integrations | |||
| Native import from vulnerability scanners | |||
| CSV and Excel import and export | |||
| Ticketing and ITSM connectors | — | ||
| Connector to your CRM | — | — | |
| Integration with AI assistants and agents | — | — | |
| Reporting and compliance | |||
| Versioned reports with your own templates, exportable to Word and HTML | |||
| Finding templates and checklists | |||
| Standard compliance frameworks linked to findings | |||
| Custom compliance frameworks | — | ||
| Intelligence and prioritisation | |||
| Attack Chains: editable attack graph | — | ||
| Live vulnerability intelligence | — | ||
| Full risk graph per client | — | ||
| Decision Intelligence: indicators for management and the CISO | — | ||
| À la carte advanced modules: OSINT Recon and Pentesting AI | — | À la carte | À la carte |
| Security and control | |||
| Client portal with two-factor auth | |||
| Scoped roles and permissions | |||
| Each client in its own database | |||
| Audit log | — | ||
| Team isolation | — | — | |
| Corporate SSO (SAML2) | — | — | |
Frequently asked questions
What people usually ask before getting started
Where is my organization's data hosted?
On EU-based infrastructure, built with GDPR compliance in mind.
Is my data mixed with other clients' data?
No. Every client has its own database and its own stack, even on the shared-cloud plan.
Does GLAIM replace my vulnerability scanners?
No. It complements them: it imports findings directly from your existing scanners instead of replacing them.
Can I give a client or an external auditor access without exposing my other projects?
Yes. Guest access is limited to the specific project that person is assigned to.
Which compliance standards does GLAIM support?
Certifications and regulations: ISO 27001, Cyber Essentials Plus and PCI DSS. Technical methodologies and standards: the full OWASP family, ASVS, MASVS, MSTG, PTES, MITRE ATT&CK, NIST Privacy Framework and SANS Top 20. All linked directly to your findings.
How is access to the portal protected?
MFA with replay protection, SSO via SAML2, roles differentiated per person, and every client in its own isolated database.
Centralize your security, prioritize what matters.
Demonstrate regulatory compliance without leaving the platform.