One register
Risks, controls, obligations, findings, evidence, incidents, assets, policies and a decision ledger in one place.
ControlDesk
Cyber GRC that decides before the fact. The cyber GRC platform built by Deteqted.
Why we built it
We filled in registers for years. Then we built what comes before them.
ControlDesk is the cyber GRC platform Deteqted built, with native AI governance for mid-market security teams. Risk decisions get made before a vendor is chosen, a contract signed, a system built or an AI model deployed: purpose-built AI does the first pass, a person decides on the record, and every decision lands in one register.
For years our consulting work looked the same: a vendor already signed, a system already live, an AI model already in production — and a risk register to fill in after the fact.
ControlDesk is our answer. It is cyber GRC built for the security team rather than the enterprise risk office, with the decision at its centre. It comes straight out of the work we do for clients: CPS 234 programs, supplier assessment functions, controls registers and risk registers.
The platform
One register, one decision trail
AI assessment lenses
Third-party risk, privacy, maturity, business impact, agreements and AI governance — AI does the first pass, a person decides.
Built for Australian rules
Hosted in AWS Sydney, with APRA CPS 230 and CPS 234 obligation packs, the Australian Privacy Principles and Essential Eight.
Connects to your tools
Cloud posture, identity, endpoint, vulnerability, ticketing and SIEM integrations, plus a REST API and webhooks.
Consulting and platform, from one team
Deteqted’s GRC practice can stand up your program on ControlDesk — loading your obligations, controls and suppliers — or run it alongside the tools you already have.