Platform
Follow a run from start to finish.
Q-Risk maps your infrastructure estate, then attacks it inside agreed limits. Follow a run cycle below, from the mapping analysis to the quantified business impact that makes remediation decisions business relevant.
01
We map systems to the work they serve.
Q-Risk reads the inventories, identity stores and scanner output you already hold. The result is a live picture of which systems, accounts and data routes keep each business process running.
- Cloud accounts
- Asset inventory
- Identity stores
- Scanner findings
- Endpoint logs
- Vendor and public data
02
The engine attacks your live estate.
The engine picks a business process and simulates attacks that could invade it, within guardrails that you set. Failed attempts stay on the record, and working routes become validated attack paths.
- ScopeYou agree the boundary of your systems before a run.
- PolicyThe engine stops at proof and goes no further.
03
Each priced figure holds three losses.
When an exploit path is found, Q-Risk quantifies the impact to that business process going down.
- Lost revenuewhile the process is down
- Operational recoveryspend to restore the process
- Regulatory exposurepenalties the incident brings
Business impact in numbers.
Each of the three parts carries its own assumptions and confidence. The board can challenge any part, the evidence chain answers.
04
Every figure keeps its evidence chain.
These five fields stay attached to the figure for as long as you keep it.
- Exploit pathThe attack path steps are stored in full.
- Business processIt names the work that stops, and what that work is worth.
- Business impactThe business impact figures and the assumptions behind each part.
- Model versionCalculation model that produced this reasoning.
- TimestampWhen this snapshot of the estate was taken.
05
Runs follow every change you make.
There is no engagement to book. Q-Risk runs again when you ship a service, grant access, or face a new CVE on a system you run, and the impact figures move with it.
06
Act on a path, then run again.
Each priced path arrives with the actions that would close it. Q-Risk ranks those actions by the reduction in business impact.
- FixThe next run cycle validates if the risk is reduced or removed.
- AcceptThe path stays priced and watched, as a recorded decision.
Point Q-Risk at your business and see what a first run finds.