Purpose: validate the assessment pipeline against a multi-account, multi-region synthetic enterprise at customer-scale volumes. Metrics represent the full generated population; interactive drill-down is intentionally capped for browser performance. No customer data or credentials were accessed.
Full-population metrics are generated across the configured enterprise-scale scenario and environment. Interactive drill-down is capped at 20,000 records to keep the report responsive.
Click a signal to filter the finding explorer below.
Click a business unit to filter the finding explorer below.
Combined GenAI exposure and internal LLM misuse. AI findings are included directly in the unified Finding Explorer.
Click a signal to filter the unified Finding Explorer to AI Risk.
Click a business unit to filter the unified Finding Explorer to AI Risk.
Enterprise risk is concentrated where modernization constraints, business exposure, and control gaps intersect. The immediate priority is to reduce critical and high findings while removing the technology dependencies that can block migration — particularly legacy algorithms, HNDL exposure, HSM/PKI constraints, certificate and ownership gaps, and unsupported libraries. In parallel, AI risk requires governance over sensitive-data flows, unapproved models or endpoints, prompt-mediated exfiltration, excessive data access, and policy-bypass behavior. For the CEO, this frames the business exposure and investment priorities; for the CTO, it identifies engineering dependencies that can delay modernization; for the CISO, it identifies the control and evidence gaps requiring remediation. Use the unified Finding Explorer to move from an enterprise signal to the affected system, evidence, recommended action, and remediation status.
One investigation surface for cryptographic and AI risk findings. Use the scope toggle, filters, or any risk signal above to drill down.
| Domain | Severity | Signal | System | Business unit | Recommended action |
|---|---|---|---|---|---|
| Cryptography | High | Certificate expires <30d | Certificate-Service-00001 | Data & Analytics | Rotate certificate and validate dependent chains. |
| Cryptography | High | Certificate expires <30d | Driver-Mobile-App-00004 | Payments | Rotate certificate and validate dependent chains. |
| Cryptography | Medium | Configuration drift | API-Gateway-00006 | Payments | Reconcile configuration and reseal evidence. |
| Cryptography | High | HNDL exposure | Payment-Service-00008 | Driver Platform | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Payment-Service-00008 | Driver Platform | Select approved hybrid target and schedule migration. |
| Cryptography | High | HNDL exposure | Driver-Mobile-App-00010 | Payments | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Driver-Mobile-App-00010 | Payments | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Missing asset owner | Customer-Identity-00011 | Warehouse Operations | Assign an owner and establish review cadence. |
| Cryptography | Medium | Configuration drift | Customer-Identity-00011 | Warehouse Operations | Reconcile configuration and reseal evidence. |
| Cryptography | High | HNDL exposure | Order-API-00012 | Order Management | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Order-API-00012 | Order Management | Select approved hybrid target and schedule migration. |
| Cryptography | High | Key rotation overdue | Data-Lake-00014 | Warehouse Operations | Rotate key and capture evidence. |
| Cryptography | Medium | Missing asset owner | Customer-Identity-00015 | Security | Assign an owner and establish review cadence. |
| Cryptography | Medium | Certificate expires <90d | Customer-Identity-00015 | Security | Schedule rotation. |
| Cryptography | High | Certificate expires <30d | Warehouse-Platform-00019 | Security | Rotate certificate and validate dependent chains. |
| Cryptography | High | HSM capability gap | Payment-Service-00022 | Corporate IT | Upgrade/configure HSM before migration. |
| Cryptography | High | Certificate expires <30d | Data-Lake-00024 | Payments | Rotate certificate and validate dependent chains. |
| Cryptography | High | Key rotation overdue | Order-API-00025 | Data & Analytics | Rotate key and capture evidence. |
| Cryptography | Medium | Configuration drift | Order-API-00025 | Data & Analytics | Reconcile configuration and reseal evidence. |
| Cryptography | High | HNDL exposure | Web-Store-00029 | Warehouse Operations | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Web-Store-00029 | Warehouse Operations | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Missing asset owner | Warehouse-Platform-00032 | Payments | Assign an owner and establish review cadence. |
| Cryptography | High | HNDL exposure | Payment-Service-00033 | Corporate IT | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Payment-Service-00033 | Corporate IT | Select approved hybrid target and schedule migration. |
| Cryptography | High | Key rotation overdue | Order-API-00035 | Delivery Operations | Rotate key and capture evidence. |
| Cryptography | High | HNDL exposure | API-Gateway-00036 | Data & Analytics | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | API-Gateway-00036 | Data & Analytics | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Missing evidence | Dispatch-Engine-00039 | Warehouse Operations | Collect and seal evidence snapshot. |
| Cryptography | High | HNDL exposure | Certificate-Service-00044 | Warehouse Operations | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Certificate-Service-00044 | Warehouse Operations | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Missing evidence | Certificate-Service-00044 | Warehouse Operations | Collect and seal evidence snapshot. |
| Cryptography | High | Key rotation overdue | API-Gateway-00049 | Delivery Operations | Rotate key and capture evidence. |
| Cryptography | Medium | Certificate expires <90d | Customer-Identity-00055 | Web Commerce | Schedule rotation. |
| Cryptography | High | HSM capability gap | Payment-Service-00065 | Delivery Operations | Upgrade/configure HSM before migration. |
| Cryptography | High | Certificate expires <30d | Order-API-00066 | Order Management | Rotate certificate and validate dependent chains. |
| Cryptography | High | HNDL exposure | Customer-Identity-00067 | Order Management | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Customer-Identity-00067 | Order Management | Select approved hybrid target and schedule migration. |
| Cryptography | High | Certificate expires <30d | Customer-Identity-00067 | Order Management | Rotate certificate and validate dependent chains. |
| Cryptography | High | Key rotation overdue | Customer-Identity-00067 | Order Management | Rotate key and capture evidence. |
| Cryptography | High | Certificate expires <30d | Warehouse-Platform-00068 | Data & Analytics | Rotate certificate and validate dependent chains. |
| Cryptography | Medium | Missing asset owner | Dispatch-Engine-00073 | Web Commerce | Assign an owner and establish review cadence. |
| Cryptography | High | HNDL exposure | Payment-Service-00075 | Warehouse Operations | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Payment-Service-00075 | Warehouse Operations | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Certificate expires <90d | Payment-Service-00078 | Driver Platform | Schedule rotation. |
| Cryptography | Medium | Certificate expires <90d | Data-Lake-00080 | Driver Platform | Schedule rotation. |
| Cryptography | High | HNDL exposure | Data-Lake-00081 | Security | Prioritize hybrid/PQC migration and protect retained ciphertext. |
| Cryptography | High | PQC migration required | Data-Lake-00081 | Security | Select approved hybrid target and schedule migration. |
| Cryptography | Medium | Certificate expires <90d | Data-Lake-00081 | Security | Schedule rotation. |
| Cryptography | High | Certificate expires <30d | Certificate-Service-00083 | Warehouse Operations | Rotate certificate and validate dependent chains. |
| Cryptography | Medium | Third-party dependency | Dispatch-Engine-00087 | Data & Analytics | Obtain vendor roadmap and migration compatibility statement. |
Executives can start with posture, concentration of critical/high findings, HNDL exposure and migration blockers. Executives can then click through the unified Finding Explorer — filter by domain, business unit, system, or signal, expand a row to see the remediation context and evidence, and export the filtered list as evidence-backed work items.
begin → collect → seal → consume
Synthetic evidence is generated deterministically across accounts, organizational units, regions, systems and AI/LLM signals. The same normalization and assessment logic is exercised; no live cloud mutations occur.
Enterprise Scale Validation · Synthetic only · Full-population metrics with capped interactive drill-down · Generated locally