Allotrope — the risk-intelligence umbrella on vCISO Lite
Refraction, Keystone, and Continuous Indicators brought under one roof. See risk coming before it lands, priced in dollars, in your board’s language.
Allotropeis the risk-intelligence umbrella on vCISO Lite — the home for the three forward-looking risk products that used to live scattered across the platform. One data model, three lenses, no more “three products, three UIs” problem.
What’s under the umbrella
- Refraction — Dependency-Centric Third-Party Incident Response (DC-TPIR). The forward-looking third-party incident register. See vendor exposure priced in dollars before the incident lands, not after. Combines dark-web signal, threat-intel feeds, and your vendor concentration to surface which relationships are most likely to move next. Full methodology in the DC-TPIR executive brief & academic paper.
- Keystone — Operational Resilience Engine (ORE). Operational resilience across the whole business — functions, processes, systems, people, vendors, facilities. Which functions fall over first, what the loss looks like at each severity, who’s downstream. A single-point-of-failure surfaces whether it’s a person, a vendor, or a facility. Wired to your live dependency graph, so a KRI threshold or a DC-TPIR alert can trip an ORE scenario without a manual rerun. Maps to DORA Art. 8, NYDFS §500.16(a)(2), and ISO 22301 §8.2.2.
- Continuous Indicators.The KRI engine. Not the quarterly-review theater — real thresholds, triggered response, wired into the rest of the platform. See the methodology deep-dives in the Continuous Indicators series and the “Why your KRIs stopped predicting anything” post.
Why the umbrella
Same underlying data model, three lenses on it. The umbrella lets us cross-connect the three: a Continuous Indicator can trip an ORE scenario; an ORE scenario can raise a DC-TPIR alert; a DC-TPIR alert can update your vendor-risk registerin real time. That composition is where the moat sits — the individual signals exist elsewhere; the mesh does not.
Allotrope carries over vCISO Lite’s existing pricing on Business tier and above (Business, Ultra, and Enterprise) — no separate SKU. Existing customers on those tiers see the umbrella in the nav automatically.
Related reading: Vendor Risk cluster, DC-TPIR brief + paper.