Administration

Multi-client setup

For vCISOs, MSSPs, and consultancies running Radius360 across multiple end clients. One practice, many tenants, clean isolation.

When you need multi-client

Single-client setups are the default. If you are using Radius360 for your own company's security program, you have one tenant and you are done.

Multi-client is for:

vCISOs running security programs for multiple companies
MSSPs bundling Radius360 with their managed security service
Consultancies running assessments across multiple engagements
Holding companies with multiple subsidiaries requiring separate compliance programs

Adding a client

On Starter you can have 3 clients, on Program 10, on Practice 25, and on Enterprise unlimited.

1
Click Manage Clients in the client bar at the top of the app to open Client Management. Click Onboard Client.
2
Run through the Risk Discovery Wizard (5 questions). The wizard creates a new tenant seeded with starter risks, policies, and framework assessments. See Onboarding a client for details.
3
Optionally apply an organization policy template if you have one. This copies your practice's standard policies into the new tenant as a starting point.

Switching between clients

The client bar at the top of the app shows the currently active client. Click it to open a switcher that lists every client you have access to. Pick one to switch. The entire interface (risks, policies, integrations, reports) scopes to that client immediately.

The URL updates to include the tenant ID, so you can share links that open directly to a specific client's view.

Cross-client operations

Some workflows need a cross-client view. Radius360 provides:

vCISO Dashboard. Portfolio-level view across every client with per-tenant posture scores, risk counts, framework completion, and integration health.
Bulk operations. Apply a policy template to every client at once. Assign a framework to multiple clients. Add a vendor to multiple third-party risk registers.
Cross-client reporting. Roll-up reports for your own practice: "What is the average SOC 2 completion across my clients?" "Which clients have the most open Critical risks?"

The vCISO Dashboard

Click Client Portfolio in the sidebar while your practice workspace is active. This is the vCISO Dashboard. You see:

A grid of all clients with per-client posture scores
Red indicators on clients with overdue risks or regressing framework scores
Integration health per client (which syncs have failed)
Upcoming policy review dates and audit milestones
Aggregate risk counts across the portfolio

Click any client tile to drill into that client's tenant directly.

Tenant isolation

Data never crosses tenants

Radius360 enforces row-level tenant isolation at the database level. Even if a user is granted cross-tenant access, every query they run is scoped to the specific tenant they are currently viewing. There is no physical way for one client's data to appear in another client's view.

This matters for two reasons. First, it is required by most of your clients' compliance programs (they do not want their data commingled with a competitor's). Second, it means that if one client revokes access, there is zero residual exposure in the other clients.

When you remove a client from your practice, their tenant can be exported (email support@radius360.co for a full data export) and deleted. Deleted tenants are purged from production after a 30-day grace period.

PreviousUsers & roles Next White-label branding