Incident Blast Radius Estimator.

Required input fields.

• Compromised identity scope (required): Single low-privilege user, Business app role, Privileged or cloud admin
• Lateral movement potential (required): Low, Medium, High
• Data reach (required): Low, Material, Critical
• Dependency concentration (required): Low, Medium, High
• Segmentation strength (required): Strong, Partial, Weak

Data handling: this interface uses the L2ET protected same-origin instrument engine. Do not enter confidential, regulated, privileged, incident, medical or sensitive operational data.

Heatmap logic.

Combines identity privilege, lateral movement potential, data reach, dependency concentration and segmentation into a blast-radius pressure map.

Source families

Assumptions

• No live discovery is performed.
• Estimates depend on accurate architecture knowledge.
• Containment decisions require incident commander review.

Incident blast-radius review note.

The generated artifact includes findings, assumptions, limitations, recommended next actions and exportable structured output.

Export options

Example input and output.

Example input

Compromised business app role with medium lateral potential and material data reach.

Example output

Outputs medium-high blast pressure, containment focus areas and evidence required.