What is Onyxia Cyber?

Onyxia is a preemptive cyber resilience platform for CISOs and security teams. It unifies telemetry from 40+ security tools, benchmarks programs against NIST CSF and MITRE ATT&CK, and helps CISOs quantify and demonstrate the business value of cybersecurity investments.

What security tools does Onyxia integrate with?

Onyxia integrates with 40+ leading security tools, including CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Tanium, Okta, Microsoft Entra ID, Cisco Duo, JumpCloud, Qualys, Tenable, Rapid7, Wiz, Orca, Microsoft Defender for Cloud, Checkmarx, Proofpoint, Mimecast, Abnormal, Cofense, Microsoft Sentinel, KnowBe4, Cloudflare, Cisco Umbrella, Checkpoint, Microsoft Intune, Jamf Pro, VMware Workspace One, Axonius, Armis, and Atlassian Jira.

Is Onyxia SOC 2 certified?

Yes. Onyxia is SOC 2 Type II certified (AICPA audited) and ISO 27001 certified.

What compliance frameworks does Onyxia support?

Onyxia aligns to the NIST Cybersecurity Framework (NIST CSF) and MITRE ATT&CK, and supports compliance demonstration across SOC 2 and ISO 27001.

Onyxia Expands Cross-Industry Benchmarks To Five Sectors

Starting today, industry benchmarks in Onyxia’s Operational Cyber Resilience Platform cover five sectors: IT & Tech, Financial Services, Healthcare, Critical Infrastructure, and Retail& eCommerce – expanded from IT and Finance. Every cyber KPI in your metrics library now reads against multiple sectors' real norms, continuously and automatically.

Why This Update, Why Now

As AI reshapes how security teams operate – compressing detection windows, automating triage, and changing what "fast enough" even means – legacy baselines no longer hold up. A patch SLA or MFA target that made sense before the AI era may not reflect what's achievable, or necessary, today. We've updated and expanded Onyxia's benchmarks so you can measure AI's real impact on your security program against current, sector-specific norms.

The Significance of Sector-Specific Context

Sector context matters because there is no single "industry standard" for cyber resilience. Our platform has always connected your security stack, surfaced your cyber KPIs, and answered the harder question that follows, usually from the board — is that number good? — by benchmarking your KPIs against real sector norms.

What's changing is the reach: benchmarking now spans five sectors instead of two, giving you and your team even more insight and transparency into exactly where your programs stand. A 3.8% non-compliant device rate means something different in a hospital network than on a trading floor. Without sector context, a metric is just a number on a dashboard. With it, the same metric becomes a decision: hold, invest, or accept.

What You Can Do With Expanded Benchmarking

Answer the board in their language. Boards don't want a raw metric — they want to know how it compares. Benchmarking is automatically included in performance reports, so you can contextualize performance without building the slides yourself.

Set targets with evidence. Generic SLAs are hard to defend. Expanded benchmarks let you replace them with thresholds based on what your sector's leaders are actually achieving — targets you can defend because you can point to where they came from.

Close the gaps that matter. A lagging benchmark is a starting point, not an endpoint. Drill down from the sector comparison to the specific off-SLA assets driving the gap, then track your progress as you close it.

How To Put It To Work

Benchmark — see where your program leads and lags
Decide — choose which gaps matter for your security program, and which sector norms aren't good enough for you
Measure continuously — let the platform track the delta so progress is provable, not anecdotal

Expanded benchmarks help you and your team move from generic SLAs toward real, defensible resilience.

Benchmarks are live now for all five industries. Log in to see where your program stands, or book a demo to see the Operational Resilience Platform in action.