Access hardening
Lowest modeled meanTotal cost $70,000
Modeled annual loss: mean $402,566 · P95 $2,092,283.
Cyber Risk & Assurance Platform
Know the risk. Own the decision.
Quantify cyber exposure, compare security investments, and govern action with the evidence in view. One platform for your company and your portfolio.
The Valty decision loop
One platform. From evidence to action.
Company and portfolio context, with the evidence behind every stage. Keep the decision in view as priorities change.
Quantify loss
Explore modeled annual loss, its drivers, and the assumptions behind the range. Keep uncertainty visible.
Exposure + uncertaintyFund next
Evaluate actions against budgets and loss objectives. See what to fund, defer, or investigate next.
Budget + alternativesAuthorize change
Assign the action and its owner. Keep approvals, supported execution, and unresolved work visible.
Ownership + approvalProve reduction
Review implementation and verification evidence alongside modeled effects. A completed task alone does not establish reduced loss.
Review + evidence
Inside the Valty workspace
Your cyber decisions, connected.
Explore individual Valty application captures with illustrative data. Each shows a product surface; together they are not a reconciled transaction or a customer result.
Quantify loss
Understand the range. Challenge the assumptions.
Inspect modeled annual loss and the assumptions behind it. The P95 marks a loss threshold exceeded in 5% of simulated years; it is not a forecast or a maximum possible loss.
Governed actions
Connect control gaps to a remediation plan.
Turn supported control findings into proposed work with an owner and approval requirements. Review authorization, execution status, and failures in the same workspace. Supported actions depend on your connected tools and permissions.
Reporting
Choose the report format.
Select an IC Update, Board Summary, or another format. This screen shows template selection before a report is produced.
For a separate worked funding example, read the sample decision memo
Built for the PE operating agenda
The first 100 days. The next funding decision.
Start with one portfolio company and a post-close cyber priority. Bring the operating partner, CISO, and CFO into the same decision, with a budget, an evidence owner, and a date to review what changed.
- Operating partner
- Keep the company’s priority, owner, and next review visible within the portfolio.
- CISO
- Bring control evidence and proposed actions. Identify the gaps that need investigation before approval.
- CFO
- Challenge the assumptions, compare the alternatives, and decide what fits the funding objective.
Return for the next decision cycle. Extend to additional companies and workflows as access, evidence coverage, and commercial scope are agreed.
Fictional worked example
Valty’s proposed plan. The alternatives, explained.
For this sample’s P95 objective, Valty proposes the required $15,000 tabletop plus a $75,000 recovery investment. P95 is the annual loss level exceeded in about 5% of simulated years.
Starting budget$100,000First-year cap
Recovery tabletopRequired by this fictional sponsor
$15,000Recovery capability investmentProposed for the modeled P95 objective
$75,000Proposed spend$90,000
Modeled annual P95 loss
Before$3.51M
With recovery$1.91M
46% lowerunder this example’s recovery assumptions.
Remaining budget$10,000Unallocated after this proposal
Compare the alternatives.
Recovery has the lowest modeled P95 within budget. Access hardening has the lowest modeled average annual loss instead. The choice depends on the objective.
All priced options include the required $15,000 tabletop. Annual gross loss; no insurance recovery modeled. This example uses different data from the application screens above.
Recovery capability investment
Lowest modeled P95 · proposed for this objectiveTotal cost $90,000
Modeled annual loss: mean $513,439 · P95 $1,908,058.
Both actions
Deferred · exceeds budgetTotal cost $145,000
Lowest modeled loss on both measures, but above the $100,000 budget.
Network segmentation (evidence-held)
Held: evidence missingCost unknown
Cost and effectiveness assumptions are not yet available for this option. It is excluded from the modeled comparison rather than modeled at zero cost or zero effect.
Before you start
What to expect.
What will we see in a platform demo?
A 30-minute walkthrough of Valty: company and portfolio exposure, investment choices, governed actions, and reporting. We use illustrative data and discuss the workflows relevant to your team. Adil reviews requests personally and replies within two business days to arrange the demo.
How do we get platform access?
Valty is in a design-partner stage. After the demo, we agree your evaluation scope, available workflows, evidence sources, onboarding, and commercial terms. Access is arranged with your team; there is no automatic account activation or public self-serve plan.
What do we provide, and who makes the changes?
Start with the evidence sources and workflows your team already uses. For an evaluation, agree data access, financial assumptions, action costs, and an evidence owner. Your team retains approval authority; supported execution depends on the connected tools, permissions, and workflow coverage confirmed for your environment.
Can Valty automate security control remediation?
Valty can automate supported evidence and control checks, surface configuration-drift findings, and prepare remediation proposals. Confirm the supported workflow, connected tools, permissions, approvals, and verification required for your environment. A platform demo does not authorize infrastructure changes. A proposed fix or closed ticket is not proof that a live control changed.
How should we interpret the modeled numbers?
Review each figure’s metric, time horizon, model version, assumptions, evidence status, and limitations. Traceability does not establish that modeled event frequencies or loss severities are calibrated to your business. Review assumptions with your finance or risk team before using the results in a decision.
What stage is Valty at, and how do we review security?
Valty is in a design-partner stage. The public sample uses fictional company data; it is not a customer result. SOC 2 is on our roadmap and is not complete. Published hosting, data handling, and subprocessors are at /trust. Contact security@valty.ai for additional review material.
How does Valty fit with our existing tools?
Valty brings source evidence, modeled loss, investment choices, and governed actions into a shared decision workflow. Your scanners, GRC tools, and other systems remain the source of record. Compare the same scenario and inputs with your current process, including how it explains alternatives and identifies evidence gaps.
See Valty in action
Explore the platform.
Bring your team’s questions.
Walk through the software with us: company and portfolio exposure, investment choices, governed actions, and reporting.
A guided 30-minute demo. No account required.
Prefer email? partner@valty.ai
Explore in the demo
- Company and portfolio views of modeled cyber exposure
- Investment choices, action ownership, and approvals
- Reports with assumptions and supporting evidence
Plan your evaluation
- Identify the workflows and evidence sources your team needs
- Discuss platform access, onboarding, and security review
For PE operating partners, finance leaders, and security teams.
Start with the workflows your team needs. Confirm evidence sources, permissions, and supported actions as part of your platform evaluation. Review evidence sources and setup, trust and security or see the evaluation process.
Your next decision, in Valty
See the full picture.
Decide what happens next.
Explore how your team can work from shared evidence, modeled exposure, and a clear funding rationale. Request a 30-minute platform demo.