A Microsoft-first foundation
Core connects Entra and Sentinel records to identities, assets and incident timelines. Captured payloads retain their source timestamps, hashes and provenance alongside separately normalised records.
THE 170TARV PLATFORM
Reconstruct the incident.
Keep the proof.
When an MSP faces a serious cyber incident, 170tarv brings together the people, events, affected customers, evidence, decisions and obligations that explain it.
01
Capture
Least-privilege vendor APIs collect source records.
02
Preserve
Raw payloads remain unchanged, with hashes and provenance.
03
Reconstruct
Linked timelines connect identities, assets, customers and decisions.
04
Verify
Export manifests support checks for changes after capture.
Your workspace.
Governed access.
The public website holds no customer evidence or privileged sessions. Customer users access their organisation in the authenticated app. Staff operations have a separate authentication boundary. Integration activation and commercial entitlements remain managed by 170tarv.
ONE CONNECTED INCIDENT RECORD
From the first signal.
To the next decision.
Customer impact in context
Blackbox adds ConnectWise PSA and NinjaOne RMM relationships to map potential downstream scope. Reconstruction distinguishes confirmed impact, suspected findings and questions that still need evidence.
A view for each responsibility
Command brings leadership the current picture. Incident Command connects evidence, actions and decisions. Assurance links controls and obligations. Workspace Admin brings service health, billing and governed requests together.
A report you can carry
Core provides signed readiness reports. Blackbox adds evidence-backed reconstruction, customer-impact assessment, decision rationale and an uncertainty register. Each report carries a 170tarv verification code.
Human-reviewed intelligence
Blackbox can use a configured external AI service to draft summaries, identify gaps and organise findings with evidence citations. Drafts remain subject to human review before becoming official signed report content.
Governed from capture to recovery
Tenant isolation, role permissions and separate customer/staff authentication protect access. Audited containment controls can pause high-risk operations while preserving records for investigation and recovery.
THE NAME. THE PURPOSE.
Evidence when it matters.
The name draws on tarv, a Scandinavian word with Germanic roots associated with need, requirement, welfare and best interests. Its usage spans Danish, Norwegian and historical Swedish.
For example: when an MSP needs to explain a serious incident, 170tarv brings the preserved evidence, customer scope and human decisions together into a record that can be verified.
Platform status
Service updates, incident communications and planned maintenance.
Evidence integrity
Follow the capture, hash, provenance and verification chain.
Privacy
Understand website enquiries and customer evidence processing.
Terms of service
Review acceptable use, managed service boundaries and contract terms.
Cookies & local storage
See exactly what this public site stores in your browser.
Security & disclosure
Review access boundaries and responsible reporting guidance.
Core & Blackbox
Explore two quote-led plans with annual contracts.
Integrity has a precise meaning.
Cryptography can demonstrate that evidence has not changed after capture. It cannot prove that the upstream system was truthful or complete. Human assessment remains essential.