Trusted by industry experts
Customer stories
Customer storyA peer partner was a big fan of X-Analytics, and he asked me to take a look. The outcome has been fundamentally career changing.
Chris Kennedy
Chief Technology & Security Officer, Group 1001
If you can't explain an issue simply, you don't understand it well enough. We're big fans of the X-Analytics approach at Digital Directors Network.
Bob Zukis
CEO, Digital Directors Network
X-Analytics delivers a transparent and scalable approach that separates them from others on the market by delivering the financial exposure analysis, risk prioritization and budget rationalization the market demands.
Ed Amoroso
CEO, TAG
The Cyber Risk Institute recognizes X-Analytics’ innovative approach, our pioneering Innovator Program participant, to operationalize the CRI Profile 2.0, driving meaningful transformation in the financial sector.
Josh Magri
CEO, CRI
We can now effectively communicate our planned mitigation and remediation strategies to the Board.
Aaron Momin
CISO, Synechron
This tool addresses the communication gap that often exists between Cybersecurity leaders, their teams, and business executives or board members.
Erik D.
Axalta, Information Security Manager, GRC
The platform
X-Analytics is a platform that thoughtfully applies domain-specific AI to help businesses assess and manage cyber risk. Here's how the platform makes it easy to use and powerful in practice.
Findings and insights from the X-Analytics Research team on how agents reason through cyber risk work, model updates, and what real-world practice teaches us.
AI Tools
Access to the full catalog of ready-made analyses and operations that ARIA can perform for your organization. Select a specific task to instantly generate results without the need to enter prompts.
Search5 Items · Level: Profile · Type: Compliance - clear filters
Build Mitigation PlanProfileAnalyze risk reducing opportunities and build an optimized plan.NIST 2.0 planCIS 8.1 planISO-based planROI AnalysisProfileAnalyze return on investment for security initiatives and budget allocation.View ROIBudget AnalysisCost OptimizationMaturity AssessmentsProfileEvaluate your organization's cybersecurity maturity across key domains.Budget AnalysisCost OptimizationTable Top ExercisesProfileConduct incident response simulations and tabletop exercises.Schedule ExerciseView ScenariosPast ResultsFraud AnalysisProfileDetect, analyze, and prevent fraud patterns across your organization.View AlertsFraud PatternsPut ARIA to work
Find AI Tool for youThoroughRecent AI tools
Vulnerability Exposure Analysis
Start Vulnerability Exposure AnalysisSupply Chain (Third Party) Analysis
Run OSINT AssessmentCIS CSC 8.1 Upload
Review CIS CSC UploadNIST CSF to Loss & Threat Alignment
Loss & Threat AlignmentLoss Table - Misappropriation of Funds
Calculate Misappropriation Fund RiskBrowse AllProfile Settings
Exposure Details*Required Profile Data This section captures basic information, which is used to deliver initial risk exposure insights.
CompletedCyber InsuranceThis section captures your organization's cyber insurance policy details to deliver valuable risk transfer insights.
Not startedCyber GovernanceThis section captures information related to your organization's cyber governance practices that are used to determine your dynamic cyber risk governance score and other valuable insights.
Not startedCustom Data FieldsNewCreate and manage custom fields to capture additional data on your profiles. Custom data fields do not impact risk calculations.
0 of 5 completedRisk Management Intelligence
BriefingStartRecent chatsAgentsGood morning, John
Briefing · Aug 31 · Covers Aug 24 – Aug 31, since your last visit · Previous briefings →
Your number moved twice since Aug 19 - neither time because your defenses changed. Your team completed the company profile, and we recalibrated the model. Worth knowing before you quote the figure: 38% of the inputs behind it are still self-reported, and two of them now disagree with what we can verify.
Since your last visit · Aug 19 → Aug 3162% of inputs verified, was 71% · two answers now disagree with what we can verifyCyber Risk$122.6M+$4.2M 2.00% of revenue · was 1.67%Suppliers RatingC+from B 1 supplier downgraded this periodSupplier Risk$4.1M+ $1.9M counted separately — not part of TotalWhat changed6 further profile edits since Aug 19 — none of them moved your numberSee all in Activity →$326.8K Company setup profile submittedTeam input · Emily Carter · Aug 31$41.2K Model recalibration raised every scenario slightlyModel update · Aug 27$1.9M Vertex Logistics disclosed a ransomware incidentSupplier OSINT · alerted Aug 26, grew Aug 29Worth checkingTwo answers now disagree with what we can verifyProfile check · Aug 29 · verified inputs down to 62%Connectors
Connectors settings for:John DoeConnectorsSearchAdd Custom ConnectorBrowseName ActionsCrowdStrike FalconAccesses endpoint telemetry, host details, and incident alerts from the Falcon platform. detailsConnectDrataAutomates compliance monitoring (SOC2/ISO) and provides real-time visibility into control tests and evidence. detailsConnectTenableVulnerability findings → the remediation that reduces exposure most. detailsConnectYour MCP addressAdd this URL as a custom connector in your AI assistant to let it securely access your X-Analytics data.
https://mcp.x-analytics.com/sse/7f3a9c2e41d8VaultNew
Search25 itemsSort: Most recentBoard reporting8 artefacts · 4 filesVendor risk reviews3 artefacts · 1 fileTodayQ3 Board Briefing: Top 5 Cyber Risks1 fileRollup view / Board reportingLinkPreviewGo to chat22 Sep 2026Ransomware Exposure: EU Business Unit1 fileInsights / RansomwareOwner: Sara KaurPreviewGo to chat18 Sep 2026Vertex Logistics Incident: Supplier Impact1 fileInsights / Third-party riskPreviewGo to chat15 Sep 2026Control ROI: MFA vs. EDR Expansion3 filesInsights / Control prioritizationPreviewGo to chat11 Sep 2026NIST CSF 2.0 Gap SummaryInsights / Framework coveragePreviewGo to chat9 Sep 2026Cyber Insurance Limit RecommendationInsights / Insurance reviewPreviewGo to chatResearch
Findings and insights from the X-Analytics Research team on how agents reason through cyber risk work, model updates, and what real-world practice teaches us.
Home / Research
Building Cyber Risk Intelligence
Explore benchmarksX-Analytics Research TeamUpdated monthly
- 00Introduction
- 01Ontology
- 02Evaluation
- 03How we test it
- 04Practice Notes
First we built the ontology. Then, we proved it in practice. Now, we're taking the next step.X-Analytics Research Team
One platform for cyber risk work
Cybersecurity teams, Private Equity Operating Partners, and Consulting Firms all do cyber risk work a little differently. X-Analytics is designed to show up with foundational cyber risk expertise and shape itself around how you work.
Slide 1 of 3
For Cybersecurity teams
AI for cyber risk management, designed to fit around how your business runs and how your team works.
For Private Equity
One standard for cyber risk across the portfolio, from diligence to value creation.
For Consulting firms
AI for cyber risk management, carried further by your firm's expertise.
The Language of Cyber Risk Management
Cyber risk management is complex and dynamic, and nearly a decade of refining our ontology has shown us how much details matter.
X-Analytics Research takes that work further with benchmarks and a model designed to make AI more capable of completing cyber risk work.
We'll publish our findings and share our approach as we build.
Frequently Asked Questions
Find answers to common questions about X-Analytics.
- X-Analytics is AI for cyber risk management. The platform's domain-specific AI builds a personalized cyber risk profile for your business and reasons through cyber risk management decisions, helping your team reduce exposure. Cybersecurity teams, private equity firms, and consulting firms use X-Analytics to set strategy, prioritize day-to-day security work, and evaluate acquisitions and suppliers.
- AI for cyber risk management is domain-specific AI built for the people responsible for reducing cyber risk, including security leaders, private equity operating partners, and cyber risk advisors. X-Analytics is AI for cyber risk management.
- X-Analytics pairs AI with a patented ontology that maps how cyber risk works and purpose-built agents that apply proven logic to specific tasks. Together, they keep the AI focused and consistent, reasoning within your cyber risk profile the way an expert would.
- You can use AI to prioritize cyber risk management decisions by letting the AI weigh and rank the actions that will reduce your exposure. X-Analytics' domain-specific AI does this work within your cyber risk profile and keeps the ranking current as conditions change, so your team always knows where to focus, whether that's building a risk-based program, guiding daily security work, or evaluating acquisitions and suppliers.
- General-purpose AI lacks both cyber risk expertise and the appropriate context of your business. X-Analytics brings both, and the platform is designed to keep the work consistent and traceable, with every session building on the last.
- No. Customer data is never used for training the models.
- Yes. X-Analytics is SOC 2 Type II certified, and the platform was designed to be enterprise-ready from day one, with security built into every layer. Access is managed centrally and follows your organization's permissions, and each connector has only the access it needs.
- Yes. X-Analytics connectors bring data from tools like CrowdStrike and Drata into your cyber risk profile. X-Analytics can also send recommendations, such as potential configuration changes or new project suggestions, back to those platforms.
- Getting started is simple. You can explore X-Analytics risk-free in a sandbox or test the platform against your requirements in a free trial. Whenever you're ready, our Customer Success team can help you make the easy transition and start putting X-Analytics to work.
- No. X-Analytics brings the cyber risk expertise and works for programs at any stage of maturity. The platform guides you through setup in minutes, and you can add context and integrations as you go, with the X-Analytics team available to help.