Free security review

Assess the security risk of an architecture change before it reaches production.

Describe a change, vulnerability, AI rollout, integration or supplier. NetRisk maps the architecture, traces the risk paths and tests which controls actually break them.

  1. 1Describe
  2. 2Check
  3. 3Assess
Privacy check runs as you type

Private until you approve it. No account needed for a session review. How your data is handled

Not sure what to write? Start from an example
  • Privacy check runs in your browser
  • Free session review · no account needed
Checked in your browserIPs, emails, keys and hostnames masked before sending
You approve what’s sentSee the exact text. Nothing is submitted automatically.
Start without an accountSession only · download your assessment
Decision supportKnown, assumed and unknown are always marked
What you get back

Three answers, shaped by what you describe.

No generic checklist. NetRisk reads your situation and returns the parts that apply to it — a diagram only when there’s a system to draw.

  1. 01

    Understand the architecture

    The systems, identities and connections in your description — and what you didn’t say.

    6 components · 1 material unknown
  2. 02

    Identify risk paths

    How an attacker or failure moves from a weak point to something that matters, step by step.

    1 main path · 4 steps to billing data
  3. 03

    Evaluate controls

    Proposed controls ranked by effort. Toggle them to see which ones actually break the path.

    3 controls · what-ifs are free
Inside a result · try it

Describe a change. See the risk move.

Tell NetRisk what’s different in plain words. It proposes the change to the map, you apply it, and the result is reassessed as a new revision — through the method your team uses.

MSP remote access to productionRevision 1PreliminarySample · illustrative
What NetRisk understood

External engineers reach billing data through one shared credential and two hops.

? MFA on the VPN — not stated
What matters most

A leaked shared account gives unattributable access to billing data.

What to do next

Replace the shared account with named, time-boxed vendor access.

Method
Suggested for vendor access to systems
  1. Shared account is reused or leaked outside the MSP
  2. VPN accepts it — MFA unknown
  3. Jump host allows SSH onward
  4. Billing data reached with no named user

UnknownRisk pathBlockedMethod term
For organizations

One review is a start. Your suppliers change every day.

The free review assesses what you describe. The NetRisk platform finds third parties from real network signals, verifies their claims against evidence and keeps them monitored — across your organization.

Free reviewOne situation you describe. Private to you.
Platform pilotDiscovery, verification, monitoring and team workflows. By approved paid pilot.
Request a pilotSee the platform in motion →

Discover vendors

Third parties and AI tools in real use, from network signals.

otter.ainot in register

Verify evidence

Vendor answers checked against documents and live systems.

Claimed→Verified

Manage risks

Owners, decisions and assigned actions in one register.

HighuntilSSO enforced

Monitor continuously

Evidence expiry, drift and concentration, once sources connect.

Okta→31 vendors
Free to start

Start with one question. Approve what’s sent.

Free
your first security review
You
approve exactly what is sent
∞
control what-ifs
0
accounts needed to begin
Start free reviewManaging risk across many suppliers?Request a paid pilot →

Self-service paid plans aren’t available yet. Free review access is subject to service and abuse-prevention limits.

Trust CenterPrivacyAI transparencyData retentionSubprocessors