For MSSPs & Pentest Firms¶

Audience: Users at a managed security service provider (MSSP) or pentest firm that runs assessments for client organizations · Where: The whole portal, viewed from your firm account.

Overview¶

If you run assessments for client organizations, your Canima account is a firm. Each customer you serve is a client organization under that firm. Inside a client, the product works exactly as described in the rest of this documentation: you create assessments, triage findings, monitor the attack surface and publish reports through the same workflows. What a firm adds on top is a management layer for the clients themselves:

Clients

Create client organizations, open any client to work inside it, and rename them.

Managing clients
License allocation

Divide your firm's license pools across clients. A client with no allocation cannot run assessments.

Allocating licenses
Access & roles

Choose which of your staff can reach which clients, and invite the client's own users.

Access & roles
Portfolio

A cross-client roll-up, client comparison, trends, recurring issues, and a portfolio executive summary PDF.

Portfolio views

Firm and client organizations¶

	Firm organization	Client organization
What it is	Your company's account.	One customer you serve, created under your firm.
Holds data?	No. A firm holds no assessments, assets or findings of its own.	Yes. All assessments, assets, findings, reports and attack-surface data live here.
Licenses	Holds the license pools you bought.	Draws on the share of the pool you allocate to it.
Who works here	Your staff.	Your staff (through their firm role or a team grant) and, for MSSPs, the client's own users.

MSSP vs. pentest firm¶

Both firm types see the same portal. The only difference is who can be added to a client:

	MSSP	Pentest firm
Invite the client's own staff	Yes, up to the Manager role. A client user can never be made Owner.	No. Only members of your firm can be given access to a client.

See Access & roles for details.

What you see at firm level¶

When you are signed in and not inside a client, the sidebar shows the firm-level areas:

Item	What it is	Who sees it
Dashboard	A cross-client roll-up of every client you manage.	Firm owners and managers.
Portfolio	Client Comparison, Trends and Recurring across clients.	Firm owners and managers.
Clients	The client hub and, for owners and managers, License allocation.	Firm owners and managers, and any staff member granted access to at least one client.
Support	Your support tickets (when support is enabled for your account).	Everyone.
Settings	Your own profile, security and notifications.	Everyone.
Administration	Firm members, teams and client access, SSO, API keys, SLA targets.	Firm owners and managers.

Analytics, Assessments, Asset Library, Findings, Activity and Attack Surface are hidden at firm level, because that data belongs to individual clients. If you open one of those pages directly (for example from a bookmark), Canima shows "… lives inside a client" with a Choose a client button and an Or jump straight to this page for: list of clients, so you can land on the same page inside a client in one click. Opening Analytics at firm level takes you to Portfolio instead.

Switching between your firm and a client

The org switcher in the header has a Firm section and a Clients section. Pick a client to work inside it, or pick your firm to return to the roll-up. See Working inside a client.

A few firm-level settings flow down to clients¶

SLA targets. Targets you set at firm level apply to every client that hasn't set its own. A client's targets then show as Inherited from your firm. See SLA Targets.
Source code connections (GitHub and other SCM integrations) are configured per client, not at firm level. Open a client, then Administration → Integrations.
Reports for your clients show your firm's company name in place of Canima's. Canima sets your company name when your firm account is set up; contact your account manager to change it.

Next steps¶

Create your first client.
Allocate license capacity to it, so it can run assessments.
Give your team access, and invite the client's users if you are an MSSP.
Run an assessment inside the client.