15Scenarios

Four profiles,
one engine.

The same matcher runs on a laptop, a hardened laptop, a small self-hosted stack, and a phone. If the model only worked for one of those, it would be a demo, not an instrument.

4 reference profiles27 incidents each

this laptop

Exposed

This laptop

The default developer profile: Windows, Edge and Brave, Node and Python, GitHub Actions, Vercel, the eMudhra root, and SBI banking.

58risk

2 in path17 declared

eMudhra root keys+33
State Bank of India+25

hardened

Watchful

Hardened

Same stack after the fixes: eMudhra removed, a password manager, 2FA, and automatic updates. The delta is the point.

20risk

1 in path16 declared

State Bank of India+20

server operator

Critical

Server operator

A small self-hosted stack: NGINX, PHP, WordPress, GitLab, and AWS on top of the laptop. This is where the incident wave actually bites.

94risk

7 in path23 declared

eMudhra root keys+16
NGINX+15
PHP2Shell+15

phone only

Exposed

Phone only

No laptop, no CI, no server. Android, Chrome, Signal, Meta AI, and a bank account. The blast radius is smaller but not zero.

50risk

3 in path6 declared

State Bank of India+26
Meta Muse+15
Signal call-state bug+8

Compare directly

your profile is always included

Live

Fortified

Your profile

Live, from localStorage.

0risk

Relative0

Hits: 0
Stack: 0

this laptop

Exposed

This laptop

The default developer profile: Windows, Edge and Brave, Node and Python, GitHub Actions, Vercel, the eMudhra root, and SBI banking.

58risk

Relative58

Hits: 2
Stack: 17

eMudhra root keys+33
State Bank of India+25

hardened

Watchful

Hardened

Same stack after the fixes: eMudhra removed, a password manager, 2FA, and automatic updates. The delta is the point.

20risk

Relative20

Hits: 1
Stack: 16

State Bank of India+20

server operator

Critical

Server operator

A small self-hosted stack: NGINX, PHP, WordPress, GitLab, and AWS on top of the laptop. This is where the incident wave actually bites.

94risk

Relative94

Hits: 7
Stack: 23

eMudhra root keys+16
NGINX+15
PHP2Shell+15

Delta table

Profile	Risk	Delta	Worst contributor
Your profile	0	—	none
This laptop	58	+58	eMudhra root keys
Hardened	20	+20	State Bank of India
Server operator	94	+94	eMudhra root keys

Why these four

They bracket the product's real audience. The default laptop is a working developer in India with real exposure. The hardened version isolates the effect of four changes. The server operator is where the October wave actually bites. The phone-only profile proves the model degrades gracefully when almost nothing is declared.

Build your own