Your message has been sent. You will hear back at .
Governance, risk and compliance
Percival: Risk decisions you can defend.
Built from real security operations, Percival helps security professionals assess, prioritise and manage risk without relying on inflated scores or black-box logic.
How it works
Evidence, judgement and experience kept distinct
Sources
Specialist data, open-source intelligence, regulatory frameworks, assessments and operational context are brought together without being collapsed into a single number.
Connections
Assets, suppliers, controls and assessments are connected, so a decision reflects what it depends on.
Financial range
Where risk is put in financial terms, Monte Carlo analysis simulates thousands of possible outcomes and gives a range of what could be lost, so you can plan with confidence.
Principles
How Percival reaches a decision
Screened, layer by layer, until it is resolved.
01Scoring
Inherent and residual risk are kept separate. Neither overwrites the other.
Controls are read in layers, and a missing layer counts against you more than a weak one.
Prioritisation is explicit, so decisions can be explained, challenged and defended.
02Evidence
A control recorded as in place is an assumption until something proves it.
Intelligence is weighed by who reported it and whether anyone independent agrees.
An event can inform a risk. Only a person can change it.
03Standards
ISO, British Standards and regulatory frameworks are reference points, not scoring inputs.
They inform decisions without inflating them.
Alignment without artificial certainty.
04Context
Assets, suppliers, controls, people and places sit in one picture, connected by what depends on what.
When something fails, what fails with it can be seen.
Decisions remain consistent as scope expands.
05Accountability
Every decision keeps its reasoning, its owner and its history.
A decision taken in a boardroom is recorded as the board's, with the evidence that it was taken.
A measure people understand is one they follow. Reasoning is kept so it can be explained, not only defended.
06Uncertainty
Nothing unexamined is presented as safe.
Where risk is put in money, the margin comes with it, and what could not be priced is named, never counted as nothing.
Silence is never read as good news.
07Integration
Percival works fully on its own. Nothing has to be connected for it to be useful.
What happens in Percival can flow into the tools your team already uses, and back again.
Connect as much or as little as suits you, and change it as the organisation changes.
About
Built from the reality of security operations
Percival was founded by Sinan Augustus, a security practitioner. Existing tools were effective at recording risk and demonstrating compliance, but less useful when a decision depended on judgement, context and being able to explain why it was made. Percival is built to close that gap.