No fabricated data
Every score — exposure, confidence, blast radius, evidence grade — is derived from real observed signals. Never a number we invented.
01 · Inventory
Know your network, device by device.
Every device grouped by the decision it needs. What's resolved, what's provisional, what's corroborated versus thin. Confidence and exposure from real signals — never a score we invented.
- Needs-review, flagged, and accepted sets — one obvious next action per row
- Exposure and identity confidence derived from observed signals, never painted on
- Hosted Secure does not scan. Discovery stays on a collector you authorize, or a labeled simulator
- When we aren't sure, we say so — and the call stays yours
02 · Topology
The network as observed.
Grouped by what things actually are, with pending-review provenance built in — not a pretty fiction of a complete map.
- Landscape, relationships, and devices from the same run evidence
- Pending-review markers on groups that still need a human
- Inspect a node without leaving the map — the custody trail travels with it
03 · Vulnerabilities
Coverage first — what ran, and what didn't.
A clean result is never mistaken for a complete one. Findings carry provenance; gaps sit up front.
- Candidate versus confirmed, with the claim boundary in view
- Provider coverage and the methods this run did not execute
- CPE→CVE with evidence — not a red wash of invented scores
04 · Attack paths
Ranked routes to crown jewels.
Attack-path analytics from the same evidence base. Blast radius, and a rehearsal you run before anything touches production.
- Ranked paths with cited evidence — entry, hops, and the jewel
- Blast-radius scoring on what those routes can actually reach
- What-if rehearsal in the console. Hosted Secure executes nothing on your network
05 · PQC · Reports
Quantum deadline, honest artifacts.
Crypto inventory for the post-quantum clock: what's classical, what's hybrid, what still needs a plan. Reports that stamp their own honesty — scope, freshness, evidence grade.
- PQC readiness from the same run — a planning posture, not a quantum-safety score
- Folios that cannot ship without disclosing their limits
- Simulator data labeled as not evidence-grade. Nothing is dressed up as a determination