Threataware Launches Dimension, The Governed Workspace For Building And Running Security Applications
New research finds nearly seven in ten respondents say their security teams have delayed or scrapped self-built applications due to security, governance or compliance concerns
LONDON, 27 Oct. 2026 – ThreatAware, the leading cyber asset management and cyber hygiene provider, today announced the launch of ‘Dimension’, its governed workspace that provides organisations with a foundation for building, running and managing their own customised security applications.
Dimension gives security teams the flexibility to develop applications tailored to their needs, while providing organisations with greater oversight of how those applications access data and interact with live systems. A shadow AI detector, an MFA dashboard, a compliance tracker, or whatever the organisation needs. If a team can describe it, Dimension can build and run it, safely.
Rather than adapting workflows to off-the-shelf software, Dimension enables teams to build what fits, with hosting, access controls and approval processes already built in. Every application runs on the same underlying foundation, with single sign-on, user provisioning, roles and permissions, approvals, audit, backups, version control and isolated tenancy already in place. This allows teams to develop applications without having to solve the production and security requirements from scratch each time.
Jon Abbott, CEO and Co-Founder, ThreatAware commented: “AI has made it easier for organisations to build applications on the fly. But what teams often overlook is that building an application is only the first step. They need to know what data those applications can access, who is responsible for them, and that they are fully governed. Dimension gives them the freedom to build the tools they need, without compromising on governance or creating another layer of unmanaged technology.”
Research highlights that security teams are building their own tools faster than they can govern them
The launch comes as new research with IT Security Decision Makers reveals how widespread in-house tool building has become, and how far governance lags behind it.
In-house security application development is now the norm: More than three quarters (77%) of respondents say their security teams have used AI coding assistants to build internal security tools in the past 12 months. Work that once took months of development can now be completed in hours.
Governance has not kept pace: Almost half (45%) say self-built tools do not go through the same review and approval process as other software, and 41% have no formal policy, or do not enforce one, for internal security applications built with AI.
The result is that organisations are caught between two bad outcomes. Nearly seven in ten (69%) respondents say tools have been delayed or scrapped because of security, governance or compliance concerns, while those that do get through often run without consistent oversight.
Abbott commented, "What starts as an attempt to fill a tooling gap either stalls at security review or becomes another layer of unmanaged applications, leaving security teams with the same visibility and governance problems they set out to solve."
Dimension allows teams to build and run scalable, fully governed applications
Dimension has three core components: Data, Studio and Actions, to take teams seamlessly from prompt to production-ready applications.
Data connects via API to the systems an organisation already uses, creating a live data layer. Studio is where applications are built on that data, while Actions enables them to make controlled changes to live systems.
Applications can be created using AI Composer, which builds from natural-language descriptions, or through an existing AI coding agent such as Claude Code, connected via the Model Context Protocol (MCP). Teams can also start with an application from the App Library and customise it to suit their needs.
Where applications need to take action, such as disabling a user, opening a ticket or updating a cloud configuration, each action must be explicitly configured and approved, and is recorded in an audit log. Applications can only access the data feeds and actions connected to them, helping enforce least-privilege access and maintain oversight of automated activity.
Applications are built in shared workspaces, with permissions and version control to support team-wide access and ongoing maintenance, reducing the reliance on individual developers and enabling teams to continue managing and adapting applications as required.
Dimension is available now. Find out more and see it in action at dimension.io
Methodology
The research was conducted by Censuswide, among a sample of 300 UK IT Security Decision Makers at UK businesses with 1,000 to 10,000 employees, with a security team that builds its own tools, excluding those in the public sector, in an organisation that has an in-house security function of one or more dedicated people. The data was collected between 16.10.2026 - 22.10.2026. Censuswide is a member of the Market Research Society (MRS) and the British Polling Council (BPC), and a signatory of the Global Data Quality Pledge. We adhere to the MRS Code of Conduct and ESOMAR principles.
About Dimension
Dimension is the enterprise-grade foundation for the security applications your team builds. Security teams build, run and govern their own applications on a platform where hosting, single sign-on, permissions, approvals and audit are already in place, so ideas reach production in days rather than months. Dimension is built by ThreatAware. Learn more at dimension.io.
About ThreatAware
ThreatAware is a cybersecurity software company founded in 2018 and trusted by more than 100 enterprise organisations across Europe and North America. Its cyber asset management and cyber hygiene platform discovers every device, validates every security control and closes the gaps that other tools miss, deploying agentless in less than an hour. With Dimension, ThreatAware now also gives security teams a governed workspace to build, run and manage the security applications they build themselves. ThreatAware is backed by One Peak, a leading growth equity firm that invests in technology companies in the scale-up phase. Learn more at threataware.com.
