AirCyber · For aero suppliers
See which AirCyber requirements OwlyScan covers — with proof you can show.
Hosted in France · Audit-ready reports · Free company check
OwlyScan
OwlyScan is a deep and dark web monitoring platform. It indexes documents in every format and language, watches your company and your suppliers, and turns hits into alerts and audit-ready reports.
Gold is not only hygiene: it includes threat intelligence and detection of information leaks.
OwlyScan indexes underground sources and alerts when your assets or suppliers appear.
Reports and investigation outputs document external watch and post-incident scoping.
| Ref | Domain | What the framework asks | Coverage | How OwlyScan helps |
|---|---|---|---|---|
| Gold · 4.11 | Governance · threat intelligence | Professional or sector-customised security alerts for the company, its sector, and its stack (sectoral CERTs, threat intelligence services — including underground forum watch). | Covered | Continuous deep and dark web monitoring and alerts on your organisation and supply chain, with aerospace-relevant exposure. |
Professional or sector-customised security alerts for the company, its sector, and its stack (sectoral CERTs, threat intelligence services — including underground forum watch).
Continuous deep and dark web monitoring and alerts on your organisation and supply chain, with aerospace-relevant exposure.
| Ref | Domain | What the framework asks | Coverage | How OwlyScan helps |
|---|---|---|---|---|
| Gold · 6.5 | Data protection | Enterprise data-protection management including detection of confidential data leaks, roles, and responsibilities. | Supports | External detection of confidential data already circulating in underground sources, with audit-ready reports as evidence of continuous monitoring. |
| General · 8.4 | Supplier requirements | Cybersecurity requirements placed on your own suppliers. | Supports | Evidence for your supplier checks and contractual cyber requirements, with continuous watch on suppliers and subcontractors. |
| Gold · 7.14 | Security event management · investigation | After a security incident (including production/ICS context), investigate whether a malicious element is involved. | Supports | Investigation mode scopes dark web dumps, forums, and archives: what leaked, which assets, publication timeline. Not malware sandbox or OT forensics. |
| Silver · 4.9 | Incident management | Documented process for cyber incident management and escalation (who to call, immediate steps, crisis team). | Supports | Alerts when stolen material surfaces trigger and enrich the escalation path; not the procedure document itself. |
| Gold · 9.7.1 | Security problem management | Documented procedure so the organisation can react quickly and involve the right internal or external people. | Supports | Timestamped, sourced findings ready for IR and external responders; not the hotline organisation chart. |
| Bronze · 4.10 / Silver · 4.7 | Security awareness feeds | Subscribe to vulnerability and security news feeds; follow CERT and vendor alerts regularly. | Supports | Complements CERT/vendor feeds with external exposure intelligence from underground sources. |
| Gold · 4.8 / 2.9.1 | SOC / log analysis | Security operations centre and log analysis tooling for detection, supervision, and forensics. | Supports | External CTI input into SOC and IR workflows. OwlyScan is not a SIEM or SOC platform. |
Enterprise data-protection management including detection of confidential data leaks, roles, and responsibilities.
External detection of confidential data already circulating in underground sources, with audit-ready reports as evidence of continuous monitoring.
Cybersecurity requirements placed on your own suppliers.
Evidence for your supplier checks and contractual cyber requirements, with continuous watch on suppliers and subcontractors.
After a security incident (including production/ICS context), investigate whether a malicious element is involved.
Investigation mode scopes dark web dumps, forums, and archives: what leaked, which assets, publication timeline. Not malware sandbox or OT forensics.
Documented process for cyber incident management and escalation (who to call, immediate steps, crisis team).
Alerts when stolen material surfaces trigger and enrich the escalation path; not the procedure document itself.
Documented procedure so the organisation can react quickly and involve the right internal or external people.
Timestamped, sourced findings ready for IR and external responders; not the hotline organisation chart.
Subscribe to vulnerability and security news feeds; follow CERT and vendor alerts regularly.
Complements CERT/vendor feeds with external exposure intelligence from underground sources.
Security operations centre and log analysis tooling for detection, supervision, and forensics.
External CTI input into SOC and IR workflows. OwlyScan is not a SIEM or SOC platform.
Final qualification of any requirement rests with the assessor or auditor.
Mapping based on the AirCyber questionnaire v1.9 (2023).
AirCyber incident and investigation controls are where monitoring and OwlyScan for Investigation meet CSIRT work.
Gold 4.11 threat intelligence and leak-detection support (including 6.5-style external signals): sector-relevant watch on underground sources.
Alerts enrich Silver 4.9 escalation and Gold 9.7.1 security problem management when stolen material appears.
Gold 7.14 investigation: scope what leaked underground, which identities and assets show up, and the publication timeline — with sources. Complements, does not replace, malware sandbox or OT forensics.
OwlyScan does not deploy SIEM/SOC, isolate infected hosts, run PRA exercises, or harden Active Directory.
Evidence for maturity assessors, primes, and your own security team.
Hosted in France · Audit-ready reports · Free company check
