Platform atlas
Everything on the platform, in one view
138 features across six guided workflows. All scenario data is synthetic unless a tile says otherwise.
Show me — one click
Show me: Build compromise in 60 sJump straight to the file-change burst and the mismatched digest. Show me: Vehicle x-rayOpen the Cyber MRI exploded view of one vehicle. Show me: Route gap → resolvedAttach evidence and watch the route conclusion change. Show me: Release decisionValid signature, failed provenance, the gate closes.
Guided workflows
All features — exploded view
Vehicle investigation · 17
- Active analysisSyntheticThe persistent analysis session for the current scope.
- Challenge the trust graphSyntheticName any supplier, part or VIN and challenge the graph.
- Vehicle Cyber MRISyntheticThe exploded, scan-style view of one vehicle's inherited exposure.
- Consequence mapSyntheticReal-world consequences of the MRI findings.
- MRI validation planSyntheticWhat evidence validates the MRI findings.
- Digital twinSyntheticThe vehicle that should not exist.
- Exposure calculationSyntheticHow exposure is calculated.
- Fleet impactSyntheticHow far a finding reaches across the fleet.
- The golden pathSyntheticTrace one VIN to the trust it inherited.
- The second vehicleSyntheticEvery vehicle has a trust twin.
- Three truths of one vehicleSyntheticWhat is known, modelled and missing.
- Trust DNASyntheticTrusted supplier paths that can reach this vehicle.
- Trust filmSyntheticTwelve-second exposure film.
- Vehicle workspaceSyntheticWhat is known and missing for one vehicle.
- Precision exposure boundarySyntheticExactly which vehicles are in scope.
- Enter a VINSyntheticTrace everything one vehicle inherited.
- VIN threat proofSyntheticOne vehicle, one inherited trust path, one action.
Attack & adversary · 23
- Think like the attackerSyntheticTen-act adversary theater over the synthetic scenario.
- The adversary's choiceSyntheticWhy an attacker picks the trusted path.
- Adversary profilesPublic dataKnown public ATT&CK groups with exact technique and replay-evidence mappings.
- Adversary operations timelinePublic dataDocumented group operations over time, linked to exact replay and detection evidence.
- Attack LabSyntheticReplay a compromised build trust chain and find the earliest trustworthy detection.
- Attack this vehicleSyntheticEvidence-driven replay plus the route intelligence brief when evidence is missing.
- The attacker's viewSyntheticWhat the environment looks like from outside.
- Full VIN cyber-ops simulationSyntheticCarry one VIN through Attack Lab, evidence intake, Release Guardian and a bounded debrief.
- The green screen attackSyntheticWhen every dashboard is green and one assumption is not.
- Which threats matter?Public dataPublished threats matched to your vehicles.
- Threat-claim validationSyntheticAssurance tiers for threat claims.
- Attack interceptSyntheticWhere the attack could have been intercepted.
- MITRE ATT&CK defensive playbookSyntheticEvery reviewed Attack Lab technique with its defensive tools, fixture indicators, analytics and evidence.
- Public intelligencePublic dataEstablished, unknown, evidence required.
- Quiet Passenger proofSyntheticSynthetic supplier proof for the Quiet Passenger scenario.
- The Quiet PassengerSyntheticThe Northstar synthetic scenario.
- Red team command centerSyntheticAuthorized red-team exercise overview.
- Threat intelligence feedPublic dataAI-summarized threat feed.
- Threat intelligence replay indexPublic dataKnown public ATT&CK identities mapped by exact technique overlap to the synthetic replay.
- Trusted trojan proofSyntheticA trusted component carrying untrusted change.
- Vector cyber healthSyntheticHistorical attack-vector health.
- Verified incident replaySyntheticReplay a verified incident.
- Verify remediationSyntheticDid the supplier fix reach the product?
Foresight & release · 12
- Decision HorizonSyntheticSignal, dependency, evidence and the intervention window.
- The green releaseSyntheticA release that looks green but inherits risk.
- Forecast run recordSyntheticFrozen evidence, stage events and receipt for a forecast.
- Three horizonsSyntheticNear, mid and far horizon view.
- Looking GlassSyntheticSee which upcoming supplier signal could change a decision.
- Release GuardianSyntheticClose the supplier evidence gap before promotion.
- Hidden dependency revealSyntheticReveal a hidden shared dependency.
- Shadow exposureSyntheticOne production assumption is no longer trusted.
- Shared dependency radarSyntheticDoes the backup share the same dependency?
- Would you release this vehicle?SyntheticSignature, provenance and the release call.
- Inheritance WatchtowerSyntheticInterrupt only when a decision changes; load real VINs here.
- What could hit us nextSyntheticThe next likely disruption.
Supplier continuity · 20
- Supplier black boxSyntheticThe flight recorder for one supplier incident.
- What buys us time?SyntheticWhich options extend the production window.
- Containment tradeoffSyntheticWhat containment costs versus what it protects.
- Continuity exchangeSyntheticSupplier cyber continuity exchange and continuity options.
- Supplier cyber memorySyntheticWhat the network remembers about a supplier.
- Supplier goes darkSyntheticWhat happens when a supplier disappears.
- Dependency explorerSyntheticExplore supplier and part dependencies.
- Exposure radarSyntheticSupplier continuity exposure radar.
- Controlled isolation plan CSyntheticThe controlled isolation fallback.
- Quality provider breachedSyntheticWhich approvals still hold after a breach.
- Reconnection gateSyntheticWhen a supplier may reconnect.
- Recovery validation gatesSyntheticGates a recovery must pass.
- Inventory runoutSyntheticRunout — only when every input is accepted.
- Single points of failureSyntheticSingle points of production failure.
- Supplier commandSyntheticSupplier cyber continuity command.
- Supplier isolationSyntheticIsolation and safe reconnection.
- Supply decision windowSyntheticHow long supply holds.
- 72-hour survival testSyntheticCan production survive 72 hours?
- How long can we operate?SyntheticOperating tolerance.
- Supplier-network watchSyntheticWatch the supplier network.
Decisions & proof · 17
- Exposure clearinghouseSyntheticProve one vehicle decision across companies.
- Cyber event decisionSyntheticThe decision a cyber event forces.
- The operating decisionSyntheticThe decision difference for today's operation.
- Production decision challengeSyntheticChallenge a production decision.
- Decision Proof SprintSyntheticProve one bounded decision against a baseline.
- Decision impact mapSyntheticWhich approvals hold and which need revalidation.
- Decision recordSyntheticThe recorded decision and its evidence.
- Permanent decision recordSyntheticImmutable trail of decisions and receipts.
- Decision windowSyntheticHow long the decision stays open.
- Decision impact ledgerSyntheticLedger of decision impact over time.
- P3 decision challengeSyntheticSupplier release decision assurance.
- PilotSyntheticOne production decision, proven.
- Pilot readiness briefSyntheticIs this ready for a pilot?
- Executive proof momentSyntheticThe moment the proof lands.
- Proof exchangeSyntheticPartners supply the proof for a decision.
- Prove the valueSyntheticThe decision challenge.
- Test my businessSyntheticTest the platform on your own business.
Executive · 18
- HomeSyntheticExecutive screen — where every journey starts.
- AccountabilitySyntheticProjected versus observed accountability.
- Executive askSyntheticAsk a plain question, get a bounded answer.
- Board assurance reportSyntheticQuarterly board-ready assurance report.
- One-click decision commandSyntheticOne-click automotive decision command.
- Executive decision theaterSyntheticThe decision presented as a staged briefing.
- Enterprise exposureSyntheticEnterprise-wide exposure review.
- 90-second executive briefSyntheticThe situation in ninety seconds.
- Executive dashboardSyntheticUrgent decisions and vehicle population.
- Executive investigation orderSyntheticOrder a bounded cyber investigation.
- Resilience investmentsSyntheticWhere the next dollar reduces most risk.
- What needs meSyntheticOnly the items waiting on you.
- Open disagreementsSyntheticWhere evidence and assertions still disagree.
- Weekly resilience briefSyntheticWeekly ninety-second brief.
- Resilience truth gapSyntheticThe gap between reported and supported.
- Value measurementSyntheticExecutive value measurement.
- Executive war-gameSyntheticTwelve-minute executive war-game.
- What can stop us?SyntheticThe few things that could stop production.
Evidence & data · 15
- Assurance recordSyntheticThe recorded assurance position and its basis.
- Authorized data intakeCustomer dataPlant, supplier and lot data a customer authorizes.
- Evidence intakeCustomer dataUpload supplier manifests, SBOMs and canary telemetry for the route brief.
- Supply-chain data mappingSyntheticWhat Looking Glass adds to shared data spaces.
- Load dataCustomer dataSample operation or your own workbook.
- Evidence & assurance centerSyntheticEvery evidence item and its assurance state.
- Evidence roomSyntheticReported versus supported, with export.
- Live source observatoryPublic dataPublic sources the platform watches.
- Footprint workbenchSyntheticHydrate an operational footprint.
- Data readiness gatewayCustomer dataCustomer data readiness gateway.
- Method & data dictionarySyntheticCalculation method and data dictionary.
- Outstanding asksSyntheticEvidence requests still open.
- Supplier data pipelineCustomer dataERP, PLM and supplier packages.
- Data readiness scorecardSyntheticHow ready the data is.
- Trusted dataSyntheticWhich data the platform trusts, and why.
Operations · 15
- Action & decision boardSyntheticEvery open action and decision in one board.
- AuthorizationSyntheticWho authorized which action, and when.
- CommitmentsSyntheticWhat was promised, by whom, by when.
- Controlled communicationsSyntheticApproved messages for an incident.
- Delegated authoritySyntheticWho can decide on whose behalf.
- Go liveSyntheticPlatform activation checklist.
- Interrupt recordSyntheticEvery interrupt the platform raised.
- Open an incidentSyntheticOpen a supplier disruption incident.
- Operational truthSyntheticWhat is actually true in operations right now.
- Operator workspaceSyntheticThe operator's working surface.
- PreferencesSyntheticExecutive preferences.
- Calibrated scenarioSyntheticThe calibrated operational scenario.
- Scenario versionsSyntheticVersioned scenarios.
- Tonight's planSyntheticTonight's production plan is no longer fully supported.
- Guided workflowsSyntheticThe six guided runs, with progress and what each one lets you say.