The evidence-backed path a capable adversary could plausibly assemble and attempt now — reviewed by two analysts, with the validation your team can run today.
The screen
Built on the same preserved evidence as every alert and perspective. Open the live demo
Each perspective is assembled from preserved evidence, challenged by a second analyst and delivered with its confidence rationale, alternatives and revision history.
Direct answers on scope, evidence, safety controls and how ThreatCanary differs from tools you already run.
No. It is a reviewed hypothesis of the path an adversary could assemble from the evidence Nullstar holds about you today. It is written to be tested by your team, and it carries its uncertainty and the alternatives considered.
A ThreatCanary analyst authors it from preserved evidence. A second analyst challenges and approves it before publication. Models may assist with drafting; they never decide what is published and their output is never treated as evidence.
The perspective is revised through the same author, challenge and approve flow. You see the current revision and can walk back through the history, and investigations you raised stay bound to the revision they came from.
