Purpose: validate the assessment pipeline against a multi-account, multi-region synthetic enterprise at customer-scale volumes. Metrics represent the full generated population; interactive drill-down is intentionally capped for browser performance. No customer data or credentials were accessed.
Full-population metrics are generated across the configured enterprise-scale scenario and environment. Interactive drill-down is capped at 20,000 records to keep the report responsive.
Click a signal to filter the finding explorer below.
Click a business unit to filter the finding explorer below.
Combined GenAI exposure and internal LLM misuse. AI findings are included directly in the unified Finding Explorer.
Click a signal to filter the unified Finding Explorer to AI Risk.
Click a business unit to filter the unified Finding Explorer to AI Risk.
Enterprise risk is concentrated where modernization constraints, business exposure, and control gaps intersect. The immediate priority is to reduce critical and high findings while removing the technology dependencies that can block migration — particularly legacy algorithms, HNDL exposure, HSM/PKI constraints, certificate and ownership gaps, and unsupported libraries. In parallel, AI risk requires governance over sensitive-data flows, unapproved models or endpoints, prompt-mediated exfiltration, excessive data access, and policy-bypass behavior. For the CEO, this frames the business exposure and investment priorities; for the CTO, it identifies engineering dependencies that can delay modernization; for the CISO, it identifies the control and evidence gaps requiring remediation. Use the unified Finding Explorer to move from an enterprise signal to the affected system, evidence, recommended action, and remediation status.
One investigation surface for cryptographic and AI risk findings. Use the scope toggle, filters, or any risk signal above to drill down.
| Domain | Severity | Signal | System | Business unit | Recommended action |
|---|---|---|---|---|---|
| Cryptography | Medium | Weak RSA key | Vendor-Integration-00001 | Digital Channels | Move to approved stronger or hybrid profile during lifecycle work. |
| Cryptography | High | HSM capability gap | HSM-Service-00002 | Digital Channels | Upgrade/configure HSM before migration. |
| Cryptography | High | HNDL exposure | Identity-Platform-00003 | Customer Platforms | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Identity-Platform-00003 | Customer Platforms | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Certificate expires <90d | Identity-Platform-00003 | Customer Platforms | Schedule rotation. |
| Cryptography | High | HNDL exposure | API-Gateway-00005 | Payments | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | API-Gateway-00005 | Payments | Select approved hybrid target and schedule migration. |
| Cryptography | High | Key rotation overdue | API-Gateway-00005 | Payments | Rotate key and capture evidence. |
| Cryptography | High | HNDL exposure | Backup-Platform-00006 | Cloud Infrastructure | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Backup-Platform-00006 | Cloud Infrastructure | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Weak RSA key | Backup-Platform-00006 | Cloud Infrastructure | Move to approved stronger or hybrid profile during lifecycle work. |
| Cryptography | High | HSM capability gap | Certificate-Authority-00007 | Data & Analytics | Upgrade/configure HSM before migration. |
| Cryptography | High | HNDL exposure | Analytics-Lake-00008 | Customer Platforms | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Analytics-Lake-00008 | Customer Platforms | Select approved hybrid target and schedule migration. |
| Cryptography | High | Key rotation overdue | Analytics-Lake-00008 | Customer Platforms | Rotate key and capture evidence. |
| Cryptography | High | HNDL exposure | Identity-Platform-00010 | Corporate IT | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Identity-Platform-00010 | Corporate IT | Select approved hybrid target and schedule migration. |
| Cryptography | High | Policy violation | Vendor-Integration-00011 | Digital Channels | Replace primitive and validate dependent applications. |
| Cryptography | Critical | HNDL exposure | Customer-Portal-00013 | Digital Channels | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Customer-Portal-00013 | Digital Channels | Select approved hybrid target and schedule migration. |
| Cryptography | High | Key rotation overdue | Customer-Portal-00013 | Digital Channels | Rotate key and capture evidence. |
| Cryptography | Medium | Missing evidence | Customer-Portal-00013 | Digital Channels | Collect and seal evidence snapshot. |
| Cryptography | High | Key rotation overdue | Identity-Platform-00018 | Digital Channels | Rotate key and capture evidence. |
| Cryptography | Medium | Weak RSA key | Backup-Platform-00020 | Security | Move to approved stronger or hybrid profile during lifecycle work. |
| Cryptography | Medium | Missing asset owner | Backup-Platform-00020 | Security | Assign an owner and establish review cadence. |
| Cryptography | Medium | Weak RSA key | Kubernetes-Cluster-00021 | Security | Move to approved stronger or hybrid profile during lifecycle work. |
| Cryptography | Medium | Missing asset owner | HSM-Service-00023 | Insurance | Assign an owner and establish review cadence. |
| Cryptography | Medium | Missing evidence | HSM-Service-00023 | Insurance | Collect and seal evidence snapshot. |
| Cryptography | Medium | Missing asset owner | Analytics-Lake-00024 | Digital Channels | Assign an owner and establish review cadence. |
| Cryptography | High | HSM capability gap | HSM-Service-00026 | Corporate IT | Upgrade/configure HSM before migration. |
| Cryptography | High | HNDL exposure | Mainframe-00027 | Insurance | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Mainframe-00027 | Insurance | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Certificate expires <90d | Customer-Portal-00028 | Cloud Infrastructure | Schedule rotation. |
| Cryptography | Medium | Missing evidence | Customer-Portal-00028 | Cloud Infrastructure | Collect and seal evidence snapshot. |
| Cryptography | High | HNDL exposure | Data-Warehouse-00029 | Payments | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Data-Warehouse-00029 | Payments | Select approved hybrid target and schedule migration. |
| Cryptography | High | HNDL exposure | Data-Warehouse-00031 | Payments | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Data-Warehouse-00031 | Payments | Select approved hybrid target and schedule migration. |
| Cryptography | High | Certificate expires <30d | Kubernetes-Cluster-00033 | Payments | Rotate certificate and validate dependent chains. |
| Cryptography | High | HNDL exposure | CI/CD-Platform-00034 | Digital Channels | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | CI/CD-Platform-00034 | Digital Channels | Select approved hybrid target and schedule migration. |
| Cryptography | High | HNDL exposure | CI/CD-Platform-00037 | Retail Banking | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | CI/CD-Platform-00037 | Retail Banking | Select approved hybrid target and schedule migration. |
| Cryptography | High | HNDL exposure | CI/CD-Platform-00038 | Digital Channels | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | CI/CD-Platform-00038 | Digital Channels | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Missing asset owner | CI/CD-Platform-00038 | Digital Channels | Assign an owner and establish review cadence. |
| Cryptography | High | Certificate expires <30d | CI/CD-Platform-00038 | Digital Channels | Rotate certificate and validate dependent chains. |
| Cryptography | High | HSM capability gap | HSM-Service-00044 | Data & Analytics | Upgrade/configure HSM before migration. |
| Cryptography | Medium | Certificate expires <90d | Mainframe-00045 | Data & Analytics | Schedule rotation. |
| Cryptography | Medium | Missing asset owner | Payment-Service-00049 | Security | Assign an owner and establish review cadence. |
Executives can start with posture, concentration of critical/high findings, HNDL exposure and migration blockers. Executives can then click through the unified Finding Explorer — filter by domain, business unit, system, or signal, expand a row to see the remediation context and evidence, and export the filtered list as evidence-backed work items.
begin → collect → seal → consume
Synthetic evidence is generated deterministically across accounts, organizational units, regions, systems and AI/LLM signals. The same normalization and assessment logic is exercised; no live cloud mutations occur.
Enterprise Scale Validation · Synthetic only · Full-population metrics with capped interactive drill-down · Generated locally