## Your posture
We list every asset you own, how each control stands against the NCSC Cyber Assessment Framework (CAF v4.0, released 6 August 2025) and what is watched right now.

**What to fix first** is worked out by a fixed procedure from how critical the asset is and which attacker techniques the gap leaves open (MITRE ATT&CK). Each fix says why.

**Agents.** Your posture agent only reads and drafts. You can pause it at any time; pausing revokes its access at once.