Surface what is missing before it conditions judgment. Blindspot does not assess declared security: it helps distinguish available evidence, missing evidence, unclear ownership and decisions that are not yet demonstrated.
What it focuses on: opaque dependencies, missing evidence, unproven controls, unclear ownership and fragile assumptions that may become operational checks or scenarios to exercise in Prudentia Drill.
PerimeterBlindspot supports evidence readiness. It is not an audit, SoA, gap analysis, pentest or certification. It can work on real or simulated cases, but outputs distinguish what is known, missing, declared or to be verified.
A · Starting point
1
Start from the blind spot
Choose a scenario and let ESR turn the doubt into verifiable questions. You do not need to import anything to start.
2
Or load a ready-made scenario
The scenario pack loads directly from the catalogue in scenarios/blindspot/, without a server and without searching for files.
Import external files or resume a session
External files
Encrypted vault
Threat model: baselines and reports may contain real weaknesses, tokens, suppliers, missing logs, backups and roles. Use encrypted export/import for transferable dossiers. The local vault is encrypted, requires a passphrase and should be used with one active session at a time.
Guided readiness snapshot
One-off, optional and lightweight path. It is not a Statement of Applicability, an audit or a gap analysis. It creates or updates an evidence-readiness baseline: entered values prefill probes and surface blind spots more quickly.
Warning: this snapshot may describe real organizational weaknesses. Export and stat it as a security report.
B · Preventive probes
“Unknown”, empty or unproven evidence do not block: they generate candidate findings.
C · Exposure Register
Seeds exported from Blindspot are Drill-ready scenarios: in the extracted package they can be stored in scenarios/drill/seeds/ and imported into Prudentia Drill. To transfer the dossier, preferably use encrypted export; plain exports remain available only as a conscious choice.