what it is
describe a system (endpoints, users, mfa adoption, known vulnerabilities) and it scores the attack surface from 0 to 100 across 5 threat categories, ranking what's driving the risk. move the sliders and the risk curves update live.
why i built it
i was deep into cybersecurity at the time, and i wanted to take something i'd actually learned in calculus and use it on a real problem.
how it works
the backend models risk with quadratic functions, then uses derivatives to find the growth zones, the points where adding complexity makes exposure grow faster than the system itself. scenarios save to sqlite so you can compare setups side by side.