Skip to content
Back to Tools Hub
Advanced · Security

Zero-Trust Blast Radius

Pick any node — user, device, AP, VLAN — and see exactly which assets an attacker reaches if it's compromised. Then get the smallest policy delta that shrinks the radius without breaking working flows.

Multi-hop reachability

Walks ACLs, NAC roles, posture rules and observed flows with role hopping and trust-relationship traversal.

Sensitivity-weighted score

Reachable set is scored by sensitivity × asset count × exposure time — not just raw connectivity.

Minimum policy delta

Solves a constrained min-edit so the radius shrinks below your target without breaking flows seen in the last 14 days.

Compute a blast radius

Choose a seed node and a target radius. AI returns reachable assets, score and minimal fix.

Next run≈ 1–2 creditsInsight
No runs yet on this tool
Powered by Lovable AI · zero-trust · blast-radius · graph · policy-min-edit
≈ 1–2 credits