ThreatAware, a provider of cyber asset management and cyber hygiene solutions, has introduced Dimension, a governed workspace designed to help organisations build, deploy and manage customised security applications while maintaining oversight of security, data access and compliance requirements.
Dimension enables security teams to create applications tailored to their operational needs, including shadow AI detectors, MFA dashboards and compliance trackers. The platform is designed to give organisations greater control over how internally developed applications access information and interact with production systems.
Instead of relying entirely on off-the-shelf software, organisations can use Dimension to develop applications that align with their existing workflows. The platform provides a common foundation with built-in hosting, single sign-on, user provisioning, roles and permissions, approval workflows, audit capabilities, backups, version control and isolated tenancy. These capabilities allow security teams to focus on application development without having to establish production infrastructure and security controls for each new application.
Jon Abbott, CEO and Co-Founder, ThreatAware commented: “AI has made it easier for organisations to build applications on the fly. But what teams often overlook is that building an application is only the first step. They need to know what data those applications can access, who is responsible for them, and that they are fully governed. Dimension gives them the freedom to build the tools they need, without compromising on governance or creating another layer of unmanaged technology.”
New research commissioned in connection with the launch indicates that AI-assisted development is becoming increasingly common among security teams, although governance processes have not necessarily evolved at the same pace.
According to the findings, 77% of surveyed IT Security Decision Makers reported that their security teams had used AI coding assistants to develop internal security tools during the previous 12 months. AI-assisted development has significantly reduced the time required to create applications, allowing work that previously took months to be completed in hours.
However, the research also identified gaps in how organisations oversee internally developed tools. Nearly half of respondents (45%) indicated that self-built applications do not undergo the same review and approval procedures as other software. Additionally, 41% reported either having no formal policy governing internal security applications developed with AI or not enforcing an existing policy.
These governance challenges can affect whether applications reach production. The survey found that 69% of respondents had experienced delays or cancellations of internally developed tools because of security, governance or compliance concerns. Applications that proceed without adequate controls may also introduce additional visibility and management challenges.
Abbott commented, “What starts as an attempt to fill a tooling gap either stalls at security review or becomes another layer of unmanaged applications, leaving security teams with the same visibility and governance problems they set out to solve.”
Dimension addresses these challenges through three integrated components: Data, Studio and Actions. Together, they provide the capabilities required to move from application development to deployment within a governed environment.
The Data component establishes a live data layer by connecting through APIs to systems already used by an organisation. Studio provides the environment for building applications using that connected data, while Actions enables applications to perform controlled operations within live systems.
Security teams can develop applications through AI Composer, which generates applications from natural-language descriptions, or use existing AI coding agents such as Claude Code through the Model Context Protocol (MCP). Dimension also includes an App Library containing applications that teams can adapt to their specific requirements.
For applications that need to perform operational tasks, such as disabling user accounts, creating tickets or modifying cloud configurations, Dimension requires actions to be explicitly configured and approved. These activities are recorded in an audit log to support accountability and oversight.
The platform also restricts applications to the data feeds and actions specifically connected to them, supporting least-privilege access and reducing the potential for unauthorised interactions with connected systems.
Applications are developed and maintained within shared workspaces that incorporate permissions and version control. This approach supports collaboration across security teams, simplifies ongoing maintenance and reduces dependence on individual developers for application management.
Dimension is available now. Additional information and product demonstrations are available at dimension.io.
The research was carried out by Censuswide between 16 October and 22 October 2026, surveying 300 IT Security Decision Makers at UK businesses employing between 1,000 and 10,000 people. All participating organisations had security teams that develop their own tools and at least one dedicated in-house security professional. Public sector organisations were excluded.
Censuswide is a member of the Market Research Society (MRS) and the British Polling Council (BPC), and a signatory to the Global Data Quality Pledge. The research follows the MRS Code of Conduct and ESOMAR principles.
Dimension is the enterprise-grade foundation for the security applications your team builds. Security teams build, run and govern their own applications on a platform where hosting, single sign-on, permissions, approvals and audit are already in place, so ideas reach production in days rather than months. Dimension is built by ThreatAware. Learn more at dimension.io.
ThreatAware is a cybersecurity software company founded in 2018 and trusted by more than 100 enterprise organisations across Europe and North America. Its cyber asset management and cyber hygiene platform discovers every device, validates every security control and closes the gaps that other tools miss, deploying agentless in less than an hour. With Dimension, ThreatAware now also gives security teams a governed workspace to build, run and manage the security applications they build themselves.
ThreatAware is backed by One Peak, a leading growth equity firm that invests in technology companies in the scale-up phase. Learn more at threataware.com.
