From technical scenario to business decision.

Starting from a scenario such as ransomware, identity compromise, application vulnerability, supply chain attack or cloud incident, the engine combines revenue, sector, size, country, assets involved, severity, exposure, control maturity and recovery objective.

• 133 scenarios
• CRITICAL → RECON
• custom scenarios
• deterministic model

Beyond a single value, the platform runs multi-iteration analyses to observe the distribution of possible impacts. Scenario comparison includes a bounded sensitivity analysis that varies factors and ranks drivers by economic impact.

• P10, P50 and P95 scenarios for every simulation
• Comparison of up to ten scenarios against a baseline
• Deltas in score, probability, probable loss and annualized loss

The platform does not stop at the score. It generates roadmaps and operational priorities, estimates costs and compares the cost of mitigation with the modelled loss reduction. Remediation status, linked tasks and operational history remain available.

• Interventions ordered by priority
• Indicative cost and ROI of mitigation
• Residual risk after the controls considered

Server-side reports in PDF, CSV, JSON and, optionally, narrative form. They can be generated synchronously or as an asynchronous job and retrieved through an authenticated, tenant-scoped endpoint. With a configured LLM provider, the system can add narratives and recommendations, to be reviewed by a person.

• PDF
• CSV
• JSON
• executive summary
• optional AI

Optional enrichment through configured sources. Timeouts, circuit breakers, destination allowlists and credential handling limit the impact of unavailable or untrusted external services.

• NVD
• EPSS
• CISA KEV
• OSV
• PhishTank
• AbuseIPDB

Scheduled simulations with execution history, idempotent asynchronous jobs with controlled retries, and HMAC-signed webhooks to the customer's systems. The queue accepts known job types only: arbitrary task or code execution is not supported.

• Single and batch simulation, and CSV import
• Notifications via email, Telegram, Slack and Microsoft Teams
• Delivery history and administrative replay of webhooks

Persistence of simulations, scenario library, asset inventory, remediation tasks, report versions and workspace export. Each organization or client works in its own tenant.

• Cyber maturity and supply chain impact analysis
• Predictive functions as decision support, not as certain forecasts

Every result exposes version, summary formula, factors, assumptions, warnings and confidence score. A backtesting workflow checks aggregate metrics on operator-controlled data and can block production start when approval or calibration are not valid.

Learn more about governance