RETACH CRQ ENGINEβ„’ Β· Cyber Risk Quantification + Live OSINT Pre-Assessment
← Free Scanner Premium Tool
CRQ Engineβ„’ Β· S.I.N.S. Framework

What are your security gaps
costing you β€” in KES?

The RETACH CRQ Engine translates your S.I.N.S. posture into Expected Annual Loss β€” scenario by scenario, pillar by pillar. Run a live OSINT surface scan. Get a board-ready financial risk model in minutes.

ISO 27005 risk model Kenya-calibrated benchmarks Live DNS + SSL + breach OSINT EAL in KES + USD Serianu / CBK data ODPC fine exposure
Organisation Profile
Step 1 of 2
Organisation
Annual Revenue / Turnover / BudgetKES 50.0M
Figure in KES millions β€” e.g. 50 = KES 50M. Use turnover (SME/fintech), total assets (SACCO) or annual budget (NGO/govt).
Staff / Endpoints50 people
S.I.N.S. Posture (from scanner or estimate)
SΒΉ β€” Systems (Identity & Access)50 / 100
SΒ² β€” Infrastructure (Backup & DR)50 / 100
SΒ³ β€” Network (Perimeter & Segmentation)50 / 100
S⁴ β€” Security (Governance & Policy)50 / 100
Risk Modifiers
Free Scanner vs. CRQ Engine
What you're unlocking
Free Scanner
S.I.N.S. score / 100
4-pillar breakdown
Critical findings list
Book consultation CTA
Expected Annual Loss (KES)
Scenario heatmap
EAL per scenario
Live OSINT scan
Regulatory fine exposure
Kenya sector benchmark
Control ROI ranking
30/60/90-day roadmap
CRQ Engineβ„’ Β· You are here
S.I.N.S. score / 100
4-pillar breakdown
Critical findings list
Book consultation CTA
Expected Annual Loss (KES)
Scenario heatmap
EAL per scenario
Live OSINT scan
Regulatory fine exposure
Kenya sector benchmark
Control ROI ranking
30/60/90-day roadmap

Fill your profile and click Calculate to run the full model. For a consultant-delivered version with live AD audit data, book an assessment.

These seven numbers answer one question: what could a bad year cost you, and how confident are we in that number? The three highlighted tiles are loss figures in KES; the rest give you context on how that number was built.

Expected Annual Loss
β€”
β€”
Data Credibility (Z)
β€”
β€”
Severe-Year Loss
β€”
95th-percentile annual loss
S.I.N.S. Score
β€”
β€”
Regulatory Fine Exposure
β€”
ODPC max
Risk as % of Revenue
β€”
EAL / annual revenue
Est. Recovery Time
β€”
downtime, ransomware event

Sector risk baselines from published industry data β€” the starting point for every RETACH engagement. Refines to your organisation once you calculate.

Likelihood (cols) Γ— Impact (rows). Darker = higher combined risk. Scenario codes plotted by calculated EAL and likelihood.

Critical
High
Medium
Low
Minimal
Rare
Unlikely
Possible
Likely
Almost certain
Critical Medium Low

EAL = modelled frequency (Poisson Ξ») Γ— severity (Lognormal), per scenario, summed. Likelihood = probability of β‰₯1 event this year given your control posture. Sorted by EAL.

ScenarioPillarLikelihoodEAL / yr

Live, unauthenticated checks against your own public-facing footprint β€” DNS, SSL, and known ransomware activity. Results feed into your Attack Surface Score, which nudges how often an incident is expected β€” not how badly it would hurt if one happened.

⬀ Loading live ransomware threat intelligence…
Domain Surface Scan
Live OSINT Pre-AssessmentEnter a domain above to run real DNS, SSL, and breach checks.
Results feed directly into your EAL model likelihood scores.
πŸ” Credential & Dark Web Exposure
β–ˆβ–ˆ accounts
Employee credentials from your domain may be circulating in breach databases and criminal marketplaces. RETACH checks HIBP, DeHashed, and dark web sources as part of every paid assessment.
Exact count of breached employee accounts
Breach source, date, and data types exposed
Named dark web marketplace mentions
Ransomware actor targeting intel for your sector
Unlock in Health Scan β†’
Included in every Health Scan from KES 45,000
Powered by HIBP Β· DeHashed Β· RETACH threat intelligence

Ranked by EAL reduction. Implement top-to-bottom for maximum risk ROI per KES spent.

Your top EAL-reducing actions, grouped into a 30/60/90-day sequence. Work top-to-bottom within each window for the fastest risk reduction per KES spent.

Kenya sector benchmarks: Serianu 2023 Β· CA Kenya Annual Report Β· CBK Cybersecurity Guidelines Β· ODPC enforcement data.

Ready for the board-ready report?

The CRQ Engine gives you the financial model. A RETACH Full Assessment adds live AD audit findings, consultant-run OSINT with dark web and Shodan data, and a signed executive report β€” in 5 business days.

Book Full Assessment β†’
Live AD auditDark web scanShodan deep scanBoard report5-day deliveryFrom KES 45,000