What is a digital twin in cybersecurity?

A continuously updated virtual model of your IT environment — systems, users, access, data flows, and dependencies — built from live telemetry. It stays in sync with reality so you can simulate attacks, measure blast radius, and quantify risk against your actual environment rather than a static diagram.

What is cyber risk quantification?

Cyber risk quantification expresses security risk in financial terms instead of qualitative ratings. Onek uses Value at Risk (VaR) and Monte Carlo loss modeling to produce a dollar-denominated loss distribution, so leaders can compare risks, justify investment, and report to the board in business language.

What is Value at Risk (VaR) in cybersecurity?

Value at Risk estimates the potential financial loss from cyber events over a period at a given confidence level. Onek rolls per-asset revenue, cost, and customer exposure into a portfolio VaR and models tail risk (CVaR) so you see both expected and worst-case losses.

How does cyber attack simulation work?

Onek runs probabilistic simulations using agent-based modeling, discrete-event simulation, and Monte Carlo methods, with attacker and defender agents. Instead of a single guess, it produces outcome distributions, surfacing single points of failure, blast radius, weak points, and an overall resilience score.

How is Onek different from a SIEM?

A SIEM collects and correlates logs to detect events after they occur. Onek maintains a live, simulatable model of your environment, so you can test attacks before they happen, quantify business impact in dollars, and prioritize remediation — complementing detection rather than replacing it.

Can Onek help with NIST 800-171 and CMMC compliance?

Yes. Onek includes a NIST 800-171 control catalog (110 controls across 14 families) with evidence-backed self-assessment and CMMC preparedness gap analysis, mapping your live environment to control status and generating POA&M candidates.

What is automated remediation?

Automated remediation closes the loop from finding to fix. Onek generates risk-scored remediation previews, routes them through approvals, and executes via runbooks or infrastructure-as-code within policy guardrails — so fixes are fast but controlled, not unsupervised.

Does Onek use my data to train AI models?

No. Onek is bring-your-own-AI: you connect your own model provider and key, which is encrypted and used server-side. Privacy-preserving analysis runs on the server, so raw sensitive data is not exposed to the client.

How is Onek deployed?

Onek ships as a containerized stack (Docker / Compose) with a documented go-live runbook, so it can run in your own infrastructure. You bring your own AI provider and keys, keeping models and data under your control.

Security leaders (CISOs), IT and infrastructure teams, and executives or boards. Each gets a tailored view: defensible dollar risk and remediation plans, a live operational map, and business-language risk reporting respectively.

Privacy Policy

Last updated: July 2, 2026

This Privacy Policy explains how Onek (“Onek,” “we,” “us”) collects, uses, and protects information when you visit onek.ai or request a demo. By using this site, you agree to the practices described here.

Information we collect

We collect the information you provide directly through our demo request form: your name, work email, company, and (optionally) your role. We may also collect limited technical data such as IP address, browser type, and usage analytics to operate and improve the site.

How we use your information

To respond to demo requests and contact you about Onek.
To operate, secure, and improve our website.
To comply with legal obligations.

We do not sell your personal information, and we do not use information submitted through this site to train AI models.

Sharing

We may share information with service providers who help us operate the site and manage communications (for example, hosting, analytics, and CRM providers), under appropriate confidentiality and data-protection terms. We may disclose information where required by law. We do not sell your personal information; see Do Not Sell or Share My Personal Information.

Tracking technologies we use

We practice data minimization and load as few third-party technologies as possible. By default, only strictly necessary technologies run. Nothing in the analytics or marketing categories loads until you give affirmative, granular consent through our consent banner. Specifically:

Strictly necessary:we store your consent choice in your browser's local storage (key onek_consent) and use standard request handling to serve the site securely.
Analytics (consent-gated): if enabled, we use Google Analytics 4 with IP anonymization. It loads only after you grant analytics consent.
Marketing/advertising: we do not currently use advertising or re-marketing pixels (such as the Meta, TikTok, or LinkedIn pixels).
Session replay: we do not use session-replay software.

If we add any new tracking technology, we will name it in our Cookie Policy and request consent before it runs.

Your consent choices and record-keeping

Our consent banner lets you Accept All, Reject All (essential only), or set categories individually — and rejecting is exactly as easy as accepting. You can change your choice anytime through the privacy preferences control in the page corner and footer. We keep a timestamped, versioned record of consent decisions so we can demonstrate the choices that were offered and made.

Data retention

We retain personal information only as long as necessary for the purposes described above or as required by law. When information is no longer needed, we take reasonable steps to delete or anonymize it.

International transfers

We may process and store information in countries other than the one in which you reside. Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

Children's privacy

This site is intended for business use and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to remove it.

Your rights

Depending on your location, you may have the right to access, correct, or delete your personal information; to object to or restrict certain processing; and to data portability. Residents of California and similar U.S. states also have the right to opt out of the “sale” or “sharing” of personal information and the right not to be discriminated against for exercising these rights. See Do Not Sell or Share My Personal Information.

To exercise any of these rights, contact us at privacy@onek.ai. We will not deny you goods or services for exercising your privacy rights.

Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this policy? Email privacy@onek.ai.