Overview
If the organization uses a security tool not listed in the Cye Exposure Management Platform's default asset types, a custom technology asset can be created. This article shows how to define and assign custom technologies that contribute to maturity scoring.
When to Use Custom Technology
Use a custom technology asset when:
The tool is specific to the organization
It's not listed in the predefined options on the Assets page
It should still influence the maturity score of a NIST subcategory
How to Create a Custom Technology Asset
Option 1: From the Assets Page
Go to the Assets page
Click + to add a new asset:
Option 2: From the Maturity Screen
In the Linked Technologies section of a subcategory:
Click the + button to start the asset creation process:
Complete the Asset Form
Select Security Technology as the asset type
This defines it as a custom security technology
Enter a tool name (e.g., "Internal Threat Analytics")
Choose an engagement to associate the asset with
Assign the asset to a NIST subcategory under the primary framework:
Completing the NIST section for other frameworks is optional
Click Create:
Once created, the custom technology will appear as a linked technology on the maturity assessment screen for the selected subcategory.
Wrap-up / Next Steps
Custom technologies allow organizations to fully reflect their security posture — even when tools don't match standard labels. Map them to the correct subcategories so they contribute meaningfully to maturity scoring.