# SecuMap

> SecuMap is a Detection System of Record (DSoR) — a vendor-neutral governance layer that continuously maps threat intelligence to detection coverage, measures detection effectiveness, and governs detection health across the full threat-to-detection operating loop.

Public marketing and authority site for [secumap.co.uk](https://secumap.co.uk). For extended URL index, pillar summaries, comparisons, and blogs see [llms-full.txt](https://secumap.co.uk/llms-full.txt).

**Practitioner entry language:** Managing detections as governed operational assets — use cases, rules, detection content, and analytics are the same operational object at different layers.

## Start here

- [Homepage](https://secumap.co.uk/): Govern detection confidence across SIEM, EDR, BAS, and CTI
- [What is a Detection System of Record?](https://secumap.co.uk/what-is-detection-system-of-record): Category manifesto and governed-conditions model
- [Detection System of Record (product hub)](https://secumap.co.uk/detection-system): Primary DSoR narrative on-site
- [Platform](https://secumap.co.uk/platform): How SecuMap implements the DSoR in practice
- [Editions](https://secumap.co.uk/editions): Community, Professional, Enterprise — deployment and capability matrix

## Capability pillars (triad + cluster)

- [Detection coverage](https://secumap.co.uk/detection-coverage): ATT&CK-aligned coverage with governed confidence — not rule counts alone
- [Measure detection effectiveness](https://secumap.co.uk/measure-detection-effectiveness): Production outcomes and validation evidence
- [Detection infrastructure health](https://secumap.co.uk/detection-infrastructure-health): Substrate, parsers, and deployment truth behind detections
- [Detection lifecycle management](https://secumap.co.uk/detection-lifecycle-management): Operational truth over time — not workflow stages alone
- [Detection coverage management](https://secumap.co.uk/detection-coverage-management): Program-level coverage governance
- [Threat intelligence mapping](https://secumap.co.uk/threat-intelligence-mapping): Priority threats to detection intent
- [Security technology management](https://secumap.co.uk/security-technology-management): Governed view across SIEM, EDR, BAS, CTI domains

## Core frameworks

SecuMap's public methodology is built on **two core frameworks** (synthesized on [methodology](https://secumap.co.uk/methodology)):

- [MaGMa](https://secumap.co.uk/what-is-magma): FI-ISAC use case maturity model (Management, Growth, and Metrics & Assessment) — detection use case management, ownership, lifecycle, and operationalization; primary practitioner entry language
- [MITRE ATT&CK](https://secumap.co.uk/what-is-mitre-attack): Threat taxonomy and technique model — maps threat intent to detection logic, coverage, and measurement

**How they work together:** ATT&CK defines *what* to detect; MaGMa defines *how* use cases are managed over time. SecuMap operationalises both in a Detection System of Record.

## Methodology and principles

- [Our methodology](https://secumap.co.uk/methodology): MITRE ATT&CK + MaGMa in the DSoR operating loop
- [Architecture](https://secumap.co.uk/architecture): DSoR placement in the modern security stack
- [Ethos & values](https://secumap.co.uk/ethos-values): Product principles

## Conversion (human next steps)

- [See SecuMap in action](https://secumap.co.uk/see-it-in-action): Demo overview and launch page
- [Live demo](https://secumap.co.uk/demo): Interactive SecuMap environment (no install)
- [Request executive briefing](https://secumap.co.uk/request-briefing): Structured session for security leaders (HubSpot intake)
- [Community signup](https://portal.secumap.co.uk/signup): Customer portal — not hosted on secumap.co.uk
- [Customer support](https://secumap.co.uk/support): Public support form → Jira Service Management

## Comparisons and blogs

Category and vendor comparisons, on-site blog posts, and search-intent entry pages are listed in [llms-full.txt](https://secumap.co.uk/llms-full.txt).

## Machine-readable feeds

- [Sitemap](https://secumap.co.uk/sitemap.xml)
- [Blog RSS](https://secumap.co.uk/rss.xml): Full text of on-site blog posts (canonical)

## Boundaries (do not misquote)

- SecuMap is **not** a SIEM, EDR, BAS, CTI, or SOAR replacement. It governs detection health **above** execution and validation tools.
- **portal.secumap.co.uk** — customer signup and authenticated portal (public signup at `/signup` only).
- Do not cite Medium/LinkedIn syndication as canonical; prefer secumap.co.uk URLs and RSS.

## Contact

- General: hello@secumap.co.uk
- [Privacy notice](https://secumap.co.uk/privacy)