Features

What it does

• Generates at least twenty candidate scenarios from your context (typically 25 to 40), screens them and keeps the 10 most material
• Estimates threat probability, exploitation, expected and maximum damage, resilience and criticality, with a confidence level for each
• Scores technical vulnerabilities with CVSS v4.0 and says when CVSS does not apply
• Compares residual risk with the risk your organization tolerates
• Proposes treatment measures with costs, owners and controls shared across scenarios
• Writes the management report, key risk indicators and a roadmap from 0 to 24 months
• Drafts security policies in French and English (Security Policy Writer)
• Assesses identity and access management (IAM/PAM) and configuration management with population-level registers, automatic KRIs and evidence linked to scenarios — no names, no connectors
• Answers your questions with the Virtual consultant, citing the textbook, the CRGO ontology and your own documents; local AI model by default
• Prioritizes vulnerabilities with SSVC decisions beside CISA KEV and FIRST EPSS

How it works

Each scenario follows one causal chain:

1. Threat source
2. Weakness
3. Affected asset
4. Cybersecurity event
5. Consequence for the organization

CyberRiskGuardian is a decision-support tool. Its estimates are analytical hypotheses to validate with your teams; decisions stay with management.