AIYour assistant

Team lead

One screen: how safe you are (honestly), what to do next, and who carries the unknown.
Download report data
How safe are we · never higher than what we know
62%
true range 6262% · 91% of the estate is known
Rules verified
26 / 56
rule checks passing over known devices · see rules
Things to do
18
ranked by how unknown the network is × how bad it could be

A few quick questions

Every gap is explained or closed. New questions appear when new devices show up.

What we learned

Your answers appear here. Each one becomes a record on the map.

What to do next

#whatwherewhowhy nowscore
1risk Unknown devices in ot-plant-bot-plant-btech-amalstated 12, effective 15.948, above appetite23.922
2risk Laptop with customer data is lost or stolencorp-hqtech-linastated 12, effective 12.588, above appetite18.882
3risk Cloud admin account is phishedcloud-prodlead-sarastated 10, effective 10.3610.36
4incident our colleaage got phisshed by emailcorp-hqnobody yetseverity 3, open, darkest network 5% unknown9.441
5risk Repeat of: phishingcorp-hqtech-linastated 9, effective 9.4419.441
6task Treat risk "Unknown devices in ot-plant-b" [risk #33]: effective 15.696 is above the appetite. Planned: mitigate. 69% of this network is knoot-plant-btech-amal33% of ot-plant-b unknown × treat task5.316
7risk Unknown devices in corp-hqcorp-hqtech-omarstated 4, effective 4.1964.196
8task Treat risk "Laptop with customer data is lost or stolen" [risk #34]: effective 12.588 is above the appetite. Planned: mitigate. 95% of this corp-hqtech-lina5% of corp-hq unknown × treat task4.196
9risk Unknown devices in cloud-prodcloud-prodtech-linastated 4, effective 4.1444.144
10task D3FEND D3-ACA Active Certificate Analysis [Detect]: apply to cloud-prod. Inputs satisfied: Certificate Filecloud-prodtech-lina4% of cloud-prod unknown × gap task3.108
11task D3FEND D3-AEM Application Exception Monitoring [Detect]: apply to cloud-prod. Inputs satisfied: Application Failure Count Variable, Log, Appcloud-prodtech-lina4% of cloud-prod unknown × gap task3.108
12task D3FEND D3-ANET Authentication Event Thresholding [Detect]: apply to cloud-prod. Inputs satisfied: Authenticationcloud-prodtech-lina4% of cloud-prod unknown × gap task3.108
13task D3FEND D3-APM Application Performance Monitoring [Detect]: apply to cloud-prod. Inputs satisfied: Application Scan Time, System Application cloud-prodtech-lina4% of cloud-prod unknown × gap task3.108
14task D3FEND D3-CA Certificate Analysis [Detect]: apply to cloud-prod. Inputs satisfied: Certificate Filecloud-prodtech-lina4% of cloud-prod unknown × gap task3.108
15task Ticket OPS-4471 names ot-plant-b-plc-001 (hostname) which no adapter, scan or human has seen. Confirm what you see.ot-plant-btech-amal33% of ot-plant-b unknown × verify task2.658
16task Ticket OPS-4519 names 10.44.7.31 (ip) which no adapter, scan or human has seen. Confirm what you see.ot-plant-btech-amal33% of ot-plant-b unknown × verify task2.658
17task Ticket OPS-4519 names cam-dock-09 (hostname) which no adapter, scan or human has seen. Confirm what you see.ot-plant-btech-amal33% of ot-plant-b unknown × verify task2.658
18task Ticket OPS-4502 names 00:1b:63:84:45:e6 (mac) which no adapter, scan or human has seen. Confirm what you see.corp-hqtech-omar5% of corp-hq unknown × verify task2.098

Who carries the unknown

personitemsdarkness carried
tech-amal51.645
tech-lina90.363
tech-omar20.098
nobody yet10.049
lead-sara10.036
Darkness = sum of the unknown share of each item's network. The person with the most is working where you see the least.

Per network

networkknowntasksrisksincidentsslipped rules
cloud-prod96%5200
corp-hq95%2310
ot-plant-b67%4100

Let the AI write the management paragraph

Report for management (copy and paste)

# Security status, 2026-09-24

**Posture: 62% (true range 62–62%).** 62% of the estate is both known and covered by rules (26 of 56 rule checks verified). 91% of the estate is known, so no posture number can be higher than that. True range 62–62%.

## What we do not know
- cloud-prod: 4% of devices unknown (90 known); 5 open tasks, 2 open risks, 0 open incidents, 0 slipped rules
- corp-hq: 5% of devices unknown (154 known); 2 open tasks, 3 open risks, 1 open incidents, 0 slipped rules
- ot-plant-b: 33% of devices unknown (50 known); 4 open tasks, 1 open risks, 0 open incidents, 0 slipped rules

## Top 10 things to do next
1. [risk] Unknown devices in ot-plant-b — tech-amal — stated 12, effective 15.948, above appetite
2. [risk] Laptop with customer data is lost or stolen — tech-lina — stated 12, effective 12.588, above appetite
3. [risk] Cloud admin account is phished — lead-sara — stated 10, effective 10.36
4. [incident] our colleaage got phisshed by email — nobody yet — severity 3, open, darkest network 5% unknown
5. [risk] Repeat of: phishing — tech-lina — stated 9, effective 9.441
6. [task] Treat risk "Unknown devices in ot-plant-b" [risk #33]: effective 15.696 is above the appetite. Planned: mitigate. 69% of this network is kno — tech-amal — 33% of ot-plant-b unknown × treat task
7. [risk] Unknown devices in corp-hq — tech-omar — stated 4, effective 4.196
8. [task] Treat risk "Laptop with customer data is lost or stolen" [risk #34]: effective 12.588 is above the appetite. Planned: mitigate. 95% of this  — tech-lina — 5% of corp-hq unknown × treat task
9. [risk] Unknown devices in cloud-prod — tech-lina — stated 4, effective 4.144
10. [task] D3FEND D3-ACA Active Certificate Analysis [Detect]: apply to cloud-prod. Inputs satisfied: Certificate File — tech-lina — 4% of cloud-prod unknown × gap task

## Who carries the unknown
- tech-amal: 5 items, darkness 1.645
- tech-lina: 9 items, darkness 0.363
- tech-omar: 2 items, darkness 0.098
- nobody yet: 1 items, darkness 0.049
- lead-sara: 1 items, darkness 0.036

_Every number above is computed only over devices some source has seen. Nothing here is more certain than the estate is known._