Reviewed, not self-declared
An authorized assessor examines the safeguards, policies, procedures, tools, and documentation actually in place, within a clearly agreed scope. Never a self-graded questionnaire.
About the programA public register of cybersecurity readiness, verified one location at a time.
Cyber 360 is an evidence-based certification program for the organizations that make up the real economy. An authorized assessor reviews the safeguards actually in place at a specific location; the result is a register entry that anyone holding its codes can confirm in seconds.
Readiness made visible, verifiable and renewable.
4
certificate levels, Bronze to Platinum
1
location covered by each certificate
6
public certificate statuses
12
months of validity before renewal
The program
What can a register entry do for you?
Most businesses that take security seriously have no simple way to show it. A Cyber 360 certificate gives your location a credible, checkable answer to the question, “How do we know you take this seriously?”
One location, one certificate
Each certificate covers exactly one location, never a whole company. A verifier knows precisely what was recognized, the certified location, within its reviewed scope.
How the model worksVerifiable anywhere
Every certificate carries a QR code and a non-guessable verification code. Clients and partners confirm status in seconds, without any sensitive detail being exposed.
Verify a certificateCertificate levels
The certification catalogue
Four designations, one practical maturity path. Every level reflects safeguards actually reviewed at your location, start where you are and move up on the record.
-
C360-B:2026 Bronze
Foundational readiness
The essential building blocks, reviewed and documented: account security basics, endpoint protection, data backups, and plain-language user guidance.
Typical fit Small offices establishing their cybersecurity baseline. -
C360-S:2026 Silver
Core readiness
Core safeguards substantially in place: broad MFA, tested backups, awareness training, a patching cadence, and written security procedures.
Typical fit Established SMBs, medical and professional offices. -
C360-G:2026 Gold
Advanced readiness
Layered, monitored defenses: managed detection, incident response planning, vendor review, centralized logging, and network safeguards.
Typical fit Organizations handling sensitive or regulated data. -
C360-P:2026 Platinum
Comprehensive readiness
Mature governance: continuous monitoring, exercised response plans, layered controls, and a complete, current documentation suite.
Typical fit Locations with the highest readiness expectations.
Certificate levels
Bronze to Platinum. Start where you are.
Bronze
Foundational
- Password practices and MFA on email
- Endpoint protection on workstations
- Basic data backups
- Basic user security guidance
Silver
Core readiness
- MFA across email, remote access, key systems
- Backups with periodic restore testing
- Security awareness training program
- Patching cadence and written procedures
Gold
Advanced
- Endpoint detection and response coverage
- Documented, assigned incident response plan
- Centralized logging and alert review
- Vendor and third-party risk review
Platinum
Comprehensive
- Continuous monitoring and alerting
- Tabletop and response exercises
- Executive-level security governance
- Comprehensive documentation suite
Program insights
The realities behind the review
Compromise is a matter of when, not if.
No organization is too small or too unimportant to be targeted. Phishing, stolen passwords, ransomware, and fake invoices reach businesses of every size, preparation decides what they cost.
AI is an asset, and an adversary.
The same tools that draft your documents write better phishing. The program reviews AI usage rules and agent boundaries so productivity gains never become privacy or security losses.
Identity is the new front door.
Most modern attacks begin with a stolen credential, not a virus. MFA coverage, privileged-account controls, and offboarding are reviewed from the first level up.
The register looks for evidence, not promises, read how the program reviews multi-factor authentication, tested backups, employee awareness, vendor risk and incident response, or start with the frequently asked questions.
Public verification
Holding a certificate or a QR code? Check the register.
Enter the certificate number and verification code printed on the certificate, or scan its QR code to open the entry directly. Verification is an exact lookup, and the program publishes no directory of certified organizations.
- Both codes, exactly as printed. The number identifies the record; the code proves the certificate was handed to you.
- Status is always live. An expired, suspended, or revoked certificate can never read as valid.
- Public facts only. Location, level, and validity dates. Findings and evidence stay confidential.
Specimen entry
C360-SIL-2026-00125
Active
- Certified location
- Example Organization, Inc., Brooklyn Office
- City / state
- Brooklyn, NY
- Level
- Cyber 360 Silver
- Valid through
- January 15, 2027
What a verifier sees when an entry is confirmed. View the full specimen entry
Program disclaimer. Public verification confirms certificate status and basic certificate information only. It does not guarantee security, compliance, insurance approval, or protection from future incidents, and it never discloses confidential review findings, technical details, vulnerabilities, or private evidence. Read the full disclaimer.