ThreatAware has launched Dimension, a platform that allows enterprise security teams to build and operate their own applications while managing access permissions, approvals and audit records through a central workspace. The product is designed for organisations using AI coding assistants to develop security tools that need to connect to existing company systems and, in some cases, make changes to live infrastructure.
Security teams can create applications for tasks such as detecting unauthorised AI tools, tracking multifactor authentication coverage or monitoring compliance. These tools often draw information from several existing products, leaving developers to manage separate integrations and security controls. Dimension provides a common environment for hosting applications and determining which data sources and operational actions each application can use.
The platform has three components. Data connects to existing enterprise systems through application programming interfaces, establishing the information that individual applications can access. Studio provides the development workspace, while Actions manages changes to connected systems. ThreatAware says teams can describe a required application in natural language using its AI Composer, connect an existing coding agent such as Claude Code through the Model Context Protocol, or customise an application from its library.
Each application operates with defined access to data feeds and actions, rather than automatically inheriting access to every system connected to the workspace. ThreatAware has built in single sign-on, user provisioning, roles and permissions, approvals, audit records, backups, version control and isolated tenancy. The intention is to give security teams a consistent operational framework without requiring developers to build these controls separately for every internal tool.
Where an application needs to disable a user account, create a service ticket or change a cloud configuration, the action must be explicitly configured and approved. The resulting activity is recorded in an audit log. That distinction between displaying information and changing production systems is important for security operations, where an automated response can interrupt a legitimate user or alter a critical service as well as contain a threat.
The launch follows research commissioned by ThreatAware among 300 UK IT security decision-makers at businesses employing between 1,000 and 10,000 people. All participating organisations had dedicated in-house security staff and teams that built their own tools; public sector organisations were excluded. Censuswide conducted the fieldwork between 16 and 22 October 2026. The results therefore describe this defined group of enterprise security teams, rather than all UK employers.
Within the sample, 77% said their security teams had used AI coding assistants to build internal security tools during the preceding 12 months. Almost half, 45%, said internally built applications did not follow the same review and approval processes as other software. Another 41% reported having no formal policy for AI-built internal security applications or not enforcing an existing policy.
Governance requirements were also affecting delivery. Some 69% said security, compliance or governance concerns had caused internally built applications to be delayed or abandoned. Such projects may begin as quick solutions to a monitoring or reporting gap, but integrating them into everyday operations introduces obligations around access, maintenance, change control and recovery. Teams that create an application also need arrangements for supporting it after the original developer moves to another project.
Jon Abbott, ThreatAware’s chief executive and co-founder, said: “AI has made it easier for organisations to build applications on the fly. But what teams often overlook is that building an application is only the first step. They need to know what data those applications can access, who is responsible for them, and that they are fully governed.”
Dimension is available now as a separate addition to ThreatAware’s existing cyber asset management and cyber hygiene products. The company, founded in 2018 and backed by growth equity investor One Peak, says its existing services are used by more than 100 enterprise organisations across Europe and North America. Customers adopting Dimension will be able to build applications around their own data connections and operational approval requirements, with management of those applications consolidated in one workspace.
You must be logged in to post a comment.