Pre-launchSpartan Trust is not open yet: nothing here can be bought and there is nothing to sign in to. Early adopters will be invited first.

The supplier you cannot see into

Your operations can be stopped by a business you do not control. The Trust Center is where you will read what they published, instead of what they typed into your form. It is not open yet.

You already know how this goes. You send a questionnaire. It comes back weeks later, filled in from memory by whoever had time, against a framework nobody named, and you file it. Nothing in it was checked. Next year you send it again.

A Spartan Business Cybersecurity Passport is the same information, shared once by the supplier and read by everyone who would otherwise have sent a form. You will open a page instead of chasing a spreadsheet, and the page will carry the date it was issued and by whom.

What you will see for each of the ten categories is a band. A band answers the question you actually have, whether this supplier clears your floor, and a floor is written as a band — “no category below Established” — a sentence you can put in a contract. The Trust Center never shows a Spartan Score. As a buyer you receive it from the supplier, beside the bands, for sorting and tracking.

Where the supplier has let us read their own Microsoft 365 or Google Workspace tenant, the Passport will also carry how many points we confirmed by reading rather than by being told. That is the line between checked and asserted.

And the first level asks the supplier to connect nothing of theirs, which is the part that makes this work across a chain: the smallest business you buy from can be on the same footing as the largest.

Where this stands

  • There is no Trust Center to visit yet, and no supplier has published a Passport. Nothing on this site can open one.
  • When it opens, a supplier will send you their Passport by a private link. A public address will exist only for a supplier who chooses to publish. Early adopters will see it first.
  • Until then, the one thing to do is join the early adopter waitlist.

What a published Passport will show you

  • Ten categories, each carrying one of four bands.
  • How many points were confirmed by reading the supplier’s own environment, where they chose to be read.
  • When it was published, who issued it, and what it is valid until.
  • The same document in English and in French — one you pinned last quarter still matches in the other language.

Three views of a supplier

  • A Passport is designed to bring three views of a business together. None of them is live yet.
  • Internal: the actual configuration of its cloud and identity, rather than what somebody remembers of it.
  • External: what an attacker can see from outside — its exposed attack surface and its known vulnerabilities.
  • Underground: leaked credentials and signs that it is being targeted, as seen in criminal channels.

What it will deliberately not show you

  • No evidence, no recommendations and no risk ledger until you ask for them. The supplier releases those to you, or does not.
  • Nothing the supplier did not agree to publish. It is their document, and it is private until they say otherwise.
  • Nothing about which products they buy, from us or from anybody.

Spartan Score

Behind your Passport there is a Spartan Score, and the Trust Center never shows it. What it shows is a band for each of the ten categories — Strong, Established, Developing, Early — plus how many points were confirmed by reading your environment. A buyer you release your Passport to, and a Managed Trust operator working for you, receive the score as well, with nothing held back: they are accountable for what they do with it. The bands answer their actual question, do you clear their floor. The score lets them sort, filter and watch it move.

What to do next

One thing: tell us you want in. If you would rather talk to a person, that is here too.

Spartan Trust is not open yet. Early adopters are invited first. It is a request, not an account: nothing is created and nothing is bought.

Your privacy. Optional measurement tools load only if you say yes, and refusing changes nothing about this site. Read the privacy notice

Choose by category

Your region

QuebecRest of CanadaEurope and the UKElsewhere

You are asked under the GDPR (or the UK GDPR) and the ePrivacy rules. Each purpose is a separate yes or no, nothing is pre-selected, refusing is as easy as accepting, and you can withdraw at any time without giving a reason. Some of these tools belong to companies outside Europe, so your information may be transferred to Canada and the United States.

Your rights. You may ask to access, correct, erase or restrict what we hold about you, or to receive a copy, by writing to legal@indominus.ms. You may complain to your national data protection authority.

  • Which pages and actions people use, so we can improve the site. It never replays what you did and it is never joined to anything you typed into the contact form.

    Sent to
    Google Ireland Limited and Google LLC
    Stores in your browser
    _ga, _ga_7L52WWZ7X5
    Reaches
    https://analytics.google.com https://region1.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com
  • Records how the page behaved for you — where it was slow, where an interaction failed — and can replay a session for diagnosis. It stays off until you turn it on.

    Sent to
    Microsoft Corporation
    Stores in your browser
    _clck, _clsk, CLID, ANONCHK, MR, MUID, SM
    Reaches
    https://*.clarity.ms https://c.bing.com https://scripts.clarity.ms https://www.clarity.ms