Introduction
Project Builder is a family of agents in the X-Analytics AI Toolbox that turns a planned security investment into a managed project in Projects. Answer a short set of questions about scope, budget, and timing, and the agent builds the project, maps it to your framework, and returns the risk it reduces and the return on that spend.
Key takeaways
- Project Builder agents turn the guidance X-Analytics gives you into projects you can manage, budget, and report on.
- Each agent covers a specific topic, including encryption, data security posture management, identity and access management, multi-factor authentication, and security awareness training. New topics arrive regularly.
- Every project captures six inputs: owner, budget, start date, end date, breadth of environment covered, and the elements included.
- Framework mapping is handled for you. The agent maps the project to CIS CSC or NIST CSF without you working out the relationship first.
- The finished project returns the risk it reduces and the return on the budget, and converts to a shareable artifact you can save to the vault or send to your CFO.
- Change any detail by telling the agent. It rebuilds the report, updates the project in Projects, and produces a new shareable artifact.
Bob Vescio, Chief Innovation Officer of X-Analytics, builds a data security posture management project from the first question through the shareable report, then corrects a date and rebuilds it.
What is Project Builder?
Project Builder is a family of agents in the X-Analytics AI Toolbox that creates projects in Projects, the planning area of X-Analytics. Each agent covers one topic and walks you through a short step-by-step routine: who owns the project, what it costs, when it runs, how much of your environment it touches, and what it includes.
The reason the agents exist is the mapping. Building a project normally means working out how your planned investment relates to CIS CSC or NIST CSF before you can measure what it does for you. The agent does that step, so you can describe the rollout in your own terms and receive the framework mapping, the risk reduction, and the return alongside it.
Where do I find Project Builder agents?
Open AI Tools and type project. Every Project Builder agent appears. Each one is built around a specific topic, so you select the agent that matches the work.
| Project Builder agent | Use it when you are |
|---|---|
| Encryption | Rolling out or expanding encryption coverage |
| Data security posture management | Deploying a data security posture management tool |
| Identity and access management | Standing up single sign-on or expanding access controls |
| Multi-factor authentication | Deploying or broadening MFA |
| Security awareness training | Launching or expanding a training program |
More topics are added regularly. Select Create Project on the agent that fits and the routine begins.
What does a Project Builder agent ask for?
Six inputs, the same six on every project.
| Input | What it is |
|---|---|
| Owner | Pulled from the user accounts on your cyber risk profile |
| Budget | What you are spending. X-Analytics has no way to know this, so you supply it |
| Start date | When the project begins |
| End date | When the project finishes |
| Breadth | How much of the environment on this profile the project covers, from one to one hundred percent |
| Elements covered | The specific items included, drawn from options particular to that agent's topic |
The agent then summarizes everything back to you before it builds. Read the summary and correct anything before you proceed, or proceed and correct it afterward.
What does the project report show?
Once you confirm, the agent builds the project and returns a report covering four things:
- The budget you specified.
- The risk the project reduces, in dollars.
- The return on that budget, as a percentage.
- The framework mappings, handled automatically. CIS CSC and NIST CSF controls are tied to the project without you working them out.
The report also carries an interpretation of what the project means for your organization. Convert it into a shareable artifact and you have a report you can save to the vault, edit, or send to your CFO, your CEO, or anyone else who asks what the spend buys.
How do I change a project after it is built?
Tell the agent what to change. A wrong end date, a revised budget, a different breadth: describe the correction in the chat and the agent reproduces the report with the new value, saves it, and updates the project in Projects. A new shareable artifact is available whenever you want one.
You can also complete a project early or delete it from the same conversation, and edit details by hand from the project itself.
Where do my projects live?
Select Projects in the left navigation. Every project you have built appears with its start and end dates. Open one to see its full detail and the actions tied to it, and edit anything by hand from there.
Your project reports also collect in the vault. Type project in the vault and every report you have generated appears, ready to open or share again.
What do you walk away with?
- A funded project with a measured return. Budget in, risk reduced and return on that spend out.
- Framework mapping you did not have to work out. CIS CSC and NIST CSF controls tied to the project by the agent.
- A report your CFO will read. A shareable artifact that says what the spend buys, in the terms finance uses.
Where does this agent live?
Project Builder agents sit in the X-Analytics AI Toolbox and build into Projects. The full library is covered in the AI Toolbox walkthrough. For the wider picture of ranking security spend by the risk it removes, see investment prioritization.
Related walkthroughs worth watching alongside this one:
- Actions Simulator, to test a decision before you commit budget to it.
- Board Reporting, for the report that carries your projects into the board meeting.
- Vault, where your project reports collect and where you annotate and share them.
What X-Analytics is
X-Analytics helps cybersecurity and risk leaders walk into every cyber and AI decision with answers in hand: measurable risk-reducing opportunities, delivered in minutes. X-Analytics is the cyber risk intelligence solution that CISOs, executives, boards, and the risk management industry rely on to align cybersecurity and AI strategy with the business priorities that matter most.
Frequently asked questions
What is Project Builder in X-Analytics? Project Builder is a family of agents in the X-Analytics AI Toolbox that turns a planned security investment into a managed project in Projects, carrying the framework mapping, the risk it reduces, and the return on the budget.
Where do I find the Project Builder agents? Open AI Tools and type project. Every Project Builder agent appears, each built around a specific topic.
Which topics have a Project Builder agent? Topics include encryption, data security posture management, identity and access management, multi-factor authentication, and security awareness training, with new ones added regularly.
What information do I need before I start? Six things: the project owner, the budget, the start and end dates, how much of your environment the project covers, and which elements are included.
Do I need to know how my project maps to CIS CSC or NIST CSF? No. The agent handles the mapping. Describe the rollout in your own terms and the framework mapping arrives with the finished project.
How is the return on investment calculated? The agent measures the risk the project removes from your cyber risk profile against the budget you specified, and reports both the dollar risk reduction and the return as a percentage.
Can I change a project after it is built? Yes. Tell the agent what to change and it reproduces the report, saves the new value, and updates the project in Projects. You can also complete or delete a project, or edit its details by hand.
Can I share a project report? Yes. Convert the report into a shareable artifact and you can save it to the vault, edit it, or send it to anyone in your organization.
Where do I see all of my projects? Select Projects in the left navigation. Project reports also collect in the vault, searchable by typing project.
Is X-Analytics a CRQ tool? No. X-Analytics is a cyber risk intelligence solution. Cyber risk intelligence includes CRQ components, and X-Analytics carries them through to the decision: it measures your cyber risk and connects it to the actions that reduce it, through specialized AI agents like Project Builder.
Watch the full walkthrough
The video above builds a data security posture management project from the first question through the finished report and the shareable artifact, then corrects a date and rebuilds it.
Questions about the agent? Reach out to your X-Analytics customer success team at customersuccess@x-analytics.com.
© 2026 X-Analytics. All rights reserved.