HodeiShield®

Take the numbers to the committee without rebuilding every report.

A dashboard for management and the board, a report center with 18 templates and a scenario simulator. Figures are deterministic; the AI summary is optional and always has a fallback text.

For: CISOs and compliance leads who must present the security status to management, an auditor or a regulator every quarter.

Request a demoRead the reports documentation (opens in a new tab)
  • 18 templates: 1 executive and 17 per framework
  • Only the executive PDF can be emailed on a schedule

Board reportingEntity A

Sample data

Board panel: compliance health

  • NIS2RisingB
  • ENSSteadyB
  • DORARisingC

A to F grade and quarterly trend.

Report center

  • Executive packPDFXLSXMDJSONxBRL-CSV
  • DORAPDFXLSXMDJSONxBRL-CSV
  • NIS2PDFXLSXMDJSON

Scheduledthe executive PDF only, every month, to 4 recipients

Sample data: the organisation, the grades and the recipients are fictional. Reports from the center are not signed.

From data to the management report

The path of a report, in five steps, with what each one does not do.

  1. You pick the template

    There are 18: an executive pack across frameworks and one report for each of the 17 frameworks.

    Scope. A framework's report reflects measured coverage, not a clean bill of health.

  2. The figures are computed

    They start from your tenant's real data and are computed deterministically, always with the same method.

  3. The narrative is optional

    If you have the HodeiAI module, a summary and recommendations are written with AI. If you do not, or it fails, the report carries a deterministic fallback text.

    Scope. AI does not compute the figures.

  4. You export it in the format the recipient asks for

    PDF, XLSX, Markdown or JSON; xBRL-CSV for DORA and for the executive pack.

    Scope. The PDF is not signed and is not valid by itself before an authority.

  5. You keep it and schedule it

    Generated reports stay in a history. You can schedule the monthly or quarterly email of the executive PDF, to up to 20 recipients.

    Scope. Only the executive PDF can be scheduled; the other templates are generated by hand.

What management sees

Two panels with the same criteria as the reports, for people who do not want to walk through 17 frameworks.

Compliance health
A grade from A to F, with a quarterly trend and one signal per framework.
Board indicators
Open incidents and by severity, major incidents in 90 days, percentage of approved policies and overdue obligations.
Officer liability
A register of valid or expiring board sign-offs and of training.
Executive panel
Posture, the top three risk scenarios, a supply chain summary, compliance readiness, a 14-day trend and economic exposure in euros.
Board pack
The pack lets you confirm it has been read and raise a question.

The numbers and the narrative

We keep what is computed apart from what is written, so you can defend every figure.

Figures and structure, deterministic

  • They start from your tenant's real data.
  • They are computed the same way every time, with or without AI.
  • They include posture per framework and economic exposure in euros.

Narrative, optional

  • A summary and recommendations with AI, only with the HodeiAI module.
  • If it fails or is not enabled, a deterministic fallback text.
  • It is not a signed write-up or an opinion.

Ask what would happen if

The simulator answers over your vendor graph without touching real data.

  1. You pick a scenario

    Seven types: a vendor compromise, a vendor outage, a critical CVE, a compliance failure, a data breach, a partial outage and a regulatory action.

    Scope. Natural-language input is a keyword matcher against your vendors, not an AI model.

  2. It spreads through your dependencies

    It runs on a copy of the current state: it does not change real vendor or score data.

  3. You read the deltas

    The change in risk and compliance score per vendor and control, the affected vendors and the depth of the propagation.

    Scope. It returns scores, not euros: the economic impact is only a qualitative label.

  4. You compare and keep

    Compare scenarios, check the history and print a summary to take to the committee.

How economic exposure is presented

The executive panel shows a FAIR estimate in euros. The annualised loss expectancy (ALE) is presented as a long-run average, not as a forecast for this year.

Next to the point estimate there is a simulated uncertainty band (uncalibrated), which only describes what would happen if at least one loss occurs, and the probability of a loss-free year.

The parameters belong to the model; they are not your organisation's loss data.

What it does not do

So you know what a report from this center is and what it is not.

  • It does not sign the reports: the PDF is not an attestation. The signed attestation is the Trust Center's.
  • It does not schedule every template by email: it only sends the executive PDF.
  • It does not write the figures with AI: AI only proposes the narrative, and it is optional.
  • It does not offer xBRL-CSV validated by an authority: it is an interchange format for DORA and the executive pack.
  • The simulator does not return euros, does not use AI and does not predict probabilities.
  • Economic exposure is not a forecast and is not calibrated.

How it connects to the other solutions

The reports gather what the other modules produce.

Reports documentation (opens in a new tab)Simulator documentation (opens in a new tab)

Board reporting: straight questions

The ones asked by people who must present numbers to management.

Does AI write the reports?

No. Figures and structure are deterministic. A summary and recommendations can be written with AI if you have the HodeiAI module and, if it fails or is not enabled, the report carries a fallback text.

Which formats are there, and which templates?

There are 18 templates: an executive pack and one report for each of the 17 frameworks. They export to PDF, XLSX, Markdown and JSON; xBRL-CSV only for DORA and the executive pack.

Can I schedule every report by email?

No. You can schedule the monthly or quarterly email of the executive PDF, to up to 20 recipients. The other templates are generated by hand.

Are the reports signed?

No. Reports from the center are not signed and are not valid by themselves before an authority. For proof that can be verified offline there is the Trust Center attestation.

Does the simulator compute euros or use AI?

Neither. It returns risk and compliance score changes and a qualitative economic-impact label. It does not modify your real data.

Is annualised loss expectancy a forecast?

No. It is a long-run average, with a simulated uncertainty band (uncalibrated) that only describes what would happen if at least one loss occurs.

See the pack your committee would get

Request a demo and we walk through the dashboard, a report in several formats and a simulator scenario, with sample data.

Deterministic figures; the AI narrative is optional.

Request a demoRead the documentation (opens in a new tab)