What is a digital twin in cybersecurity?

A continuously updated virtual model of your IT environment — systems, users, access, data flows, and dependencies — built from live telemetry. It stays in sync with reality so you can simulate attacks, measure blast radius, and quantify risk against your actual environment rather than a static diagram.

What is cyber risk quantification?

Cyber risk quantification expresses security risk in financial terms instead of qualitative ratings. Onek uses Value at Risk (VaR) and Monte Carlo loss modeling to produce a dollar-denominated loss distribution, so leaders can compare risks, justify investment, and report to the board in business language.

What is Value at Risk (VaR) in cybersecurity?

Value at Risk estimates the potential financial loss from cyber events over a period at a given confidence level. Onek rolls per-asset revenue, cost, and customer exposure into a portfolio VaR and models tail risk (CVaR) so you see both expected and worst-case losses.

How does cyber attack simulation work?

Onek runs probabilistic simulations using agent-based modeling, discrete-event simulation, and Monte Carlo methods, with attacker and defender agents. Instead of a single guess, it produces outcome distributions, surfacing single points of failure, blast radius, weak points, and an overall resilience score.

How is Onek different from a SIEM?

A SIEM collects and correlates logs to detect events after they occur. Onek maintains a live, simulatable model of your environment, so you can test attacks before they happen, quantify business impact in dollars, and prioritize remediation — complementing detection rather than replacing it.

Can Onek help with NIST 800-171 and CMMC compliance?

Yes. Onek includes a NIST 800-171 control catalog (110 controls across 14 families) with evidence-backed self-assessment and CMMC preparedness gap analysis, mapping your live environment to control status and generating POA&M candidates.

What is automated remediation?

Automated remediation closes the loop from finding to fix. Onek generates risk-scored remediation previews, routes them through approvals, and executes via runbooks or infrastructure-as-code within policy guardrails — so fixes are fast but controlled, not unsupervised.

Does Onek use my data to train AI models?

No. Onek is bring-your-own-AI: you connect your own model provider and key, which is encrypted and used server-side. Privacy-preserving analysis runs on the server, so raw sensitive data is not exposed to the client.

How is Onek deployed?

Onek ships as a containerized stack (Docker / Compose) with a documented go-live runbook, so it can run in your own infrastructure. You bring your own AI provider and keys, keeping models and data under your control.

Security leaders (CISOs), IT and infrastructure teams, and executives or boards. Each gets a tailored view: defensible dollar risk and remediation plans, a live operational map, and business-language risk reporting respectively.

Cookie Policy

Last updated: July 2, 2026

In short: by default, this site sets only strictly necessary storage. No analytics, advertising, or session-replay technology runs unless you turn it on. You can review or change your choices at any time with the control.

What cookies and similar technologies are

“Cookies” here means cookies and similar technologies — including browser localStorage, tags, pixels, and scripts — that store or read information on your device. We group them into the categories below and block every non-essential category until you consent.

Categories we use

Strictly necessary (always on)

Required for the site to function and to honor your privacy choice. These do not track you across sites and cannot be switched off.

Consent preference — stored in your browser's localStorage under onek_consentto remember your choice so we don't ask again unnecessarily.
Security and delivery — standard request handling and content delivery needed to serve the site securely.

Functional (off by default)

Remembers preferences to improve how the site works. Loaded only with your consent. Not used for advertising.

Analytics (off by default)

Helps us understand aggregate, de-identified usage. If enabled, we use Google Analytics 4 with IP anonymization, and it loads only after you grant analytics consent. If you do not consent, it is never loaded.

Marketing & advertising (off by default)

Advertising and re-marketing technologies (for example, ad-platform pixels). We do not currently use any. If we ever add them, they will be listed here by name and will load only with your marketing consent.

What we do not use

We do not use session-replay software, and we do not use advertising or social-media pixels (such as the Meta, TikTok, or LinkedIn pixels). If that ever changes, this policy and the consent banner will be updated to name the specific technology before it is enabled.

Managing your choices

Use the control (also available any time from the button in the corner of the page and the footer) to accept all, reject all, or set categories individually. Rejecting is exactly as easy as accepting. You can also control cookies through your browser settings.

See also our Do Not Sell or Share My Personal Information page and our Privacy Policy.

Changes

We will update this policy whenever the technologies we use change, and we will re-request consent when material changes occur. The “Last updated” date above reflects the latest version.

Contact

Questions? Email privacy@onek.ai.