Security risk, in plain words

See the risk in your architecture before it ships.

Describe it in plain words. NetRisk draws the map, flags potential access routes and helps you choose what to fix. Add an AI assessment when you approve what’s sent.

  1. 1Describe
  2. 2Check
  3. 3Assess
Privacy check runs as you type

Private until you approve it. No account needed for a session review. How your data is handled

Not sure what to write? Start from an example
  • Live check on your device · no sign-up
  • Free session review · no account needed
Checked in your browserIPs, emails, keys and hostnames masked before sending
You approve what’s sentSee the exact text. Nothing is submitted automatically.
Start without an accountSession only · download your assessment
Decision supportKnown, assumed and unknown are always marked
Findings map to the frameworks you report against
  • ISO 27001
  • CIS Controls
  • GDPR
  • PCI DSS
  • STRIDE
  • LINDDUN
  • OWASP LLM Top 10
  • ISO 42001
How it works

From one sentence to a decision.

Every edit re-rates instantly. No questionnaire to start.

  1. 01

    Describe

    Plain words, a diagram export or a Terraform file. Speak it if you prefer.

    “Customers use our shop, which calls a Node API…”
  2. 02

    See the map

    Components, zones and data flows drawn for you — including what you didn’t say.

    11 components · 2 assumed links
  3. 03

    Break the routes

    Every route from an entry point to your data, rated. Fixes ranked by effect for the effort.

    High · 3 routesMedium with 2 fixes
  4. 04

    Decide

    Add an AI assessment for context rules can’t see, or run a vendor check — and export the register.

    Approve with conditions · review in 6 months
Try it

Change one thing. Watch the risk move.

Toggle a control or type a change — the path and the rating update live.

MSP remote access to productionRevision 1PreliminarySample · illustrative
What NetRisk understood

External engineers reach billing data through one shared credential and two hops.

? MFA on the VPN — not stated
What matters most

A leaked shared account gives unattributable access to billing data.

What to do next

Replace the shared account with named, time-boxed vendor access.

Method
Suggested for vendor access to systems
  1. Shared account is reused or leaked outside the MSP
  2. VPN accepts it — MFA unknown
  3. Jump host allows SSH onward
  4. Billing data reached with no named user

UnknownRisk pathBlockedMethod term
Third parties & AI providers

Eight questions, not three hundred.

Review what a vendor publishes, then ask targeted questions for the service you use.

  • Every gap closes two ways — the vendor confirms it, or you add a control.
  • Paste their reply — review the answers, record conditions and set the next review date.
Try an IT providerTry an AI model provider
Brightline ITManaged IT · admin access to production
Critical vendor
RiskHigh8 open questions

Checked what Brightline already publishes

  • SOC 2 Type II reportFound
  • Data processing agreementFound
  • Breach notice within 72 hFound
  • ?MFA for engineersNot published

Asked only what changes the rating

  • 1Do engineers sign in with MFA?NoYou add: named accounts + MFA
  • 2Are admin sessions recorded?Yes
  • 3Where is your data processed?EU only
Approve with conditionsNamed accounts + MFA before go-live
Owner
IT Security
Next review
April 2027
Register
Exported
Illustrative
For organizations

One review is a start. Your suppliers change every day.

The platform finds third parties from real network signals, verifies their claims and keeps them monitored.

Request a pilotSee the platform in motion →

Discover vendors

Third parties and AI tools in real use, from network signals.

otter.ainot in register

Verify evidence

Vendor answers checked against documents and live systems.

Claimed→Verified

Manage risks

Owners, decisions and assigned actions in one register.

HighuntilSSO enforced

Monitor continuously

Evidence expiry, drift and concentration, once sources connect.

Okta→31 vendors
Free to start

Start with one sentence. See the risk in seconds.

Start free review
  • Live checkFree

    No sign-up. Runs on your device. Unlimited edits and what-ifs.

  • AI assessmentFree · subject to service limits

    No account needed for a session review. You approve exactly what is sent.

  • PlatformPaid pilot

    Vendor discovery, verified evidence and monitoring across your suppliers.

    Request a pilot →

Self-service paid plans aren’t available yet. The free allowance may change.