Attack-path console

1. Read the map. Boxes are parts of a network; lines are the traffic between them. Thick teal lines are trunks (where most traffic flows); thin grey lines are branches. The red line is the critical path — the easiest route from the entry point to the asset you're protecting. The two red-outlined boxes are those endpoints.
2. Set the two ends. Entry point is where an attacker starts (e.g. the internet); Protect is the asset they're after (e.g. a database). Change either dropdown and the map and numbers update.
3. Run the simulation. Thousands of simulated attackers try to reach the target. “Attack reaches target” is how often they succeed with no defense; “Detected & stopped” is how often they're caught on the way. The numbers shift slightly each run — that's the simulation being random, not a bug.
4. Block a link to respond. Click Block on any link in the table (or click a line on the map). Watch “With your blocks” fall and “Legitimate traffic blocked” rise — that's the trade-off of cutting that link. The critical path reroutes to show where attackers go next, so you can see which link to block for the biggest drop at the lowest cost. Reset blocks clears them.
5. Try your own network. Open “Load your own network” below, enter one from, to, traffic line per connection (or upload a CSV), and load it.

One link per line: from, to, traffic — e.g. web, database, 6100. Up to 20 nodes in the free edition.