PEAKDEFENCEWINGMAN · Use cases

Vulnerability impact

Assess each vulnerability by the risk it raises, and fix first what matters most.

Typical requirementsISO 27001 A.8.8NIS2 Art. 21CRA

Screens for this stage · Stage 1: Intake

Vulnerabilities with SLA status
Vulnerabilities Vulnerabilities with SLA status CVE, CWE and CVSS per finding, a Breaching SLA badge on the list, and intake from scanners and pen-test tools through integrations.

Screens for this stage · Stage 2: Locate

An actively exploited vulnerability and the assets carrying it
Vulnerabilities An actively exploited vulnerability and the assets carrying it EPSS 0.952, exploited in the wild, patch available, linked to two assets. The brief names the gap: no owner and no remediation date.
The graph of one record
Graph The graph of one record Every record has a Graph tab: the risk in the centre, its review tasks, the incident that realised it and the control that reduces it. Depth 1 to 3, or open the full graph.

Screens for this stage · Stage 3: Assess impact

An asset with its quality score and dependencies
Assets An asset with its quality score and dependencies The identity provider for 500+ customers: a data-quality score with the reason (owners recorded as raw strings), related risks and incident, a parent asset, and custom fields for data classification.

Screens for this stage · Stage 4: Prioritise by risk

The Brief: state of the programme
The Brief The Brief: state of the programme Every morning WINGMAN writes the state of the programme from the records: where risk concentrates, coverage and control, a watch list and the tensions between groups of records.
Impact × likelihood matrix
Risks Impact × likelihood matrix The same register as a 5 × 5 matrix with counts per cell, beside the ranked list.

Screens for this stage · Stage 5: Remediate and re-score

Overdue tasks across the organisation
Tasks Overdue tasks across the organisation The Overdue quick view lists late work with its assignee, so delays surface as people's names, not as a number.

Sector angles

What this use case looks like under specific regulations.

NIS2

Advisories from the national CSIRT and scanner results land on the assets that carry them.

CRA

Advisories are matched against product components, so the affected products and versions are known within hours.

Videos

WINGMAN AI GRC – risk management use case Regular risk reviews and new risk identification, plus incidents, signals and vulnerability changes between reviews.

Plays from youtube-nocookie.com. YouTube sets no cookies until you press play.

Other use cases

Risk review and treatment

Review risks with all the context gathered since last time, plan their treatment, and keep several levels of risk consistent.

Risk identification

Find new risks without duplicates, link them to everything relevant, and let signals start identification or a re-review.

Business impact analysis

Assess how long each service can be down and what recovery it needs, from the services, risks and controls already recorded.

All use cases

See WINGMAN on your own data

We can walk through any of these use cases with your requirements, risks and controls.

Contact Peak Defence