Overview
If the organization uses a security tool not listed in the Cye Exposure Management Platform's default asset types, a custom technology asset can be created. This article shows how to define and assign custom technologies that contribute to maturity scoring.
When to Use Custom Technology
Use a custom technology asset when:
The tool is specific to the organization
It's not listed in the predefined options on the Assets page
It should still influence the maturity score of a NIST subcategory
How to Create a Custom Technology Asset
Option 1: From the Assets Page
Go to the Assets page
Click + to add a new asset:
Option 2: From the Maturity Screen
In the Linked Technologies section of a subcategory:
Click the + button to start the asset creation process:
Complete the Asset Form
Select Security Technology as the asset type
This defines it as a custom security technology
Enter a tool name (e.g., "Internal Threat Analytics")
Choose an engagement to associate the asset with
Assign the asset to a NIST subcategory under the primary framework:
Completing the NIST section for other frameworks is optional
Click Create:
Once created, the custom technology will appear as a linked technology on the maturity assessment screen for the selected subcategory.
Wrap-up / Next Steps
Custom technologies allow organizations to fully reflect their security posture — even when tools don't match standard labels. Map them to the correct subcategories so they contribute meaningfully to maturity scoring.
For the full list of technologies Cye supports out of the box and their NIST mappings, see the Appendix: Supported Mitigations and Their NIST Mapping.