Software that works inside the institution.
Custofaber builds IT management, cybersecurity and municipal service software for public institutions, municipalities and businesses. Each product is a stone in the same arch, and the same three promises hold them all together.
Operations and services
Software that makes the everyday work of institutions and municipalities easier.
-
Custofaber IT
Device inventory, software and asset assignments, help desk. The Lapis agent collects inventory and security settings from computers on its own.
Ready for a pilot installationIT website -
Custofaber Civitas
One roof for the services a municipality provides to its district. Urban intelligence, disaster and risk, service performance and citizen services such as libraries share the same address, neighbourhood and map layer.
Open to pilot partnershipsCivitas website
Security and compliance
Custofaber Guard: security and compliance for institutions without a large security team.
-
Guard Comply
Compliance tracking for Türkiye's Information and Communication Security Guide and ISO 27001. The other products produce most of the evidence automatically.
Ready for a pilot installationGuard website -
Vigil
An AI analyst that reads your security logs. It merges incidents, explains them in plain language and suggests what to do; your team approves.
Ready for a pilot installation -
Guard Access
Active Directory account and permission audit: unused accounts, excessive privileges and regular access reviews.
Ready for a pilot installation -
Guard Aware
Staff awareness training and controlled phishing exercises with the institution's own staff. Anyone who clicks lands on an explanation page and a short training.
Ready for a pilot installation
Three promises that hold the arch up.
Whatever the product, these three conditions do not change. If a feature would break one of them, we do not build it.
-
Institutional data stays in the institution.
IT and Guard products, AI model included, run on the institution's own server. Logs, personal data and analysis results are never sent to an outside cloud.
It keeps working even if the internet connection drops. -
A person has the final word.
The software finds, explains and suggests. Closing an account, removing a permission or changing a setting happens with your team's approval.
Vigil never touches a system on its own. -
Every action is on the record.
Every suggestion, approval and change is written to a chained audit log. If a record is altered later, the chain breaks and it shows on screen.
Who did what, when and why: one screen in an audit.
For institutions without a large IT team.
- Public institutions
- Institutions whose data cannot leave the premises and who must evidence their obligations under the Information and Communication Security Guide.
- Municipalities
- Seeing devices, accounts and data spread across departments in one place, and planning services around what each neighbourhood actually needs.
- Businesses
- SMEs that want to prioritise alerts, prepare for ISO 27001 and raise staff awareness without hiring a separate security team.
Work that starts in the field and stays inside the institution.
-
Understand
Together with your team we map the real need, the existing tools and the data.
-
Install
We install the software on your own server and connect it to your existing systems. No data is moved out.
-
Evaluate together
We review the first findings with your team and tune the setup to your institution. Success criteria are agreed from the start.
Let's start with a conversation.
A product demo, a pilot installation or just a question. A few sentences about your institution and the problem you want to solve are enough.
İstanbul, Türkiye