Assigned to your account
Cloud-D routes your file requests to your customer storage area and checks account ownership before returning files.
Cloud storage · Encrypted database
Your Cloud Workspace
Upload and organize files in the folders assigned to your account.
CONNECTINGYOUR AREA
Last synced Waiting for connection…
Assigned storage area
—
Automatically assigned by account type
Current files
0
Latest version in your folders
Uploaded records
0
Structured data in your files
Encrypted backup copies
0
SQLite backup replica
Primary storage and encrypted recovery copies
Cloud-D routes your files to the database assigned to your account and mirrors encrypted file data to the recovery database.
♢
Encrypted file storage is ready
Uploaded file contents are encrypted before saving. An encrypted recovery copy is stored separately and can be restored if a primary copy is missing.
Primary databaseSQLite
File encryptionAES-256-GCM
Backup file copies0
Backup databaseSQLite
File contents are encrypted in both SQLite databases. Account and folder metadata is stored separately.
Cryptographic demonstration · Primary DBVerify decrypts and authenticates encrypted file copies without exposing plaintext in the browser. Re-encrypt writes fresh AES-GCM ciphertext for the primary node.
Your cloud folders and files
Files are scoped to your account type and assigned folders.
Folders
Loading folders…
| FILE | FOLDER | SIZE | TYPE | RECORDS | BACKUP | ACTION |
|---|---|---|---|---|---|---|
| No files yet. Upload a document above to add it to your cloud. | ||||||
Customer workspace · Read only
Cloud Architecture
A simple view of how your account reaches its storage and how uploaded files are protected.
Your accountVerified sign-in
→
Cloud-D APIRoutes authorized requests
→
Customer DBYour private file area
→
Recovery DBEncrypted recovery copy
SQLite primary and recovery
File, folder, and version records are stored in the primary SQLite database and mirrored to a separate recovery database.
AES-256-GCM file protection
Uploaded file contents and saved report snapshots are encrypted before storage. Passwords are stored as salted scrypt hashes.
Your cloud is protected
When a simulated security event is detected, Cloud-D will show its current status here.
Security operations · Defense posture
Security overview
Review the defenses, decision policy, containment rates, and protection status guarding the simulated cloud.
Attack block rate
—
Run a simulation to establish baseline
Data protection
—
Records protected / assessed
Mean response time
—
Simulated time to execute a defense
Threats contained
0 / 0
No attack rounds processed
Coordinated defense network
Shared threat intelligence feeds the decision engine
AuthSentinel
Actions0
FlowGuardian
Actions0
Decision Engine
Utility-ranked proposals
Execute at > 0.40
QueryShield
Actions0
BehaviorWatch
Actions0
Decision engine
The engine ranks proposals and resolves qualifying actions in the same round
Minimum utility score
Set this in Live simulation.
0.40
Security implementations
Identity and access defense
AuthSentinel scores login anomalies and coordinates account locks or source blocking. Credential-Bot uses bounded Minimax search to select credential attack tactics.
SignalsLogin patterns
ResponseBlock / lock
Traffic flood protection
FlowGuardian monitors simulated request rates and proposes rate limiting when traffic exceeds the API gateway’s modeled tolerance.
SignalsRequest rate
ResponseRate limit
Query injection defense
QueryShield uses Expectimax chance nodes to compare query rejection, sanitization, and monitoring under uncertain parser outcomes.
SignalsQuery patterns
ResponseSanitize / reject
Insider behavior monitoring
BehaviorWatch scores unusual user activity and can recommend session revocation when simulated access patterns look suspicious.
SignalsAccess behavior
ResponseRevoke session
Multi-agent decision engine
Defender proposals are ranked by utility, compared with a shared threshold, and qualifying responses are coordinated in the same simulation round.
PolicyUtility ranking
CoordinationShared intelligence
Threat lab · Coordinated defense
Attack & defense simulation details
Review attacker activity, outcomes, and coordination details from completed simulations.
Attacker activity
Attackers in this exercise
Current attempts and outcomes by attacker
Recent simulated attack decisions
| ROUND | ATTACKER / TYPE | TARGET | DEFENDER | UTILITY / THRESHOLD | DECISION | ATTACK OUTCOME | IMPACT | RATIONALE |
|---|
Coordination flow
Live visualization · Staff simulation
Live simulation
Set up the exercise here, then watch each attack move through the firewall and its matched defender.
READY
Decision threshold
Minimum utility to execute
The decision engine ranks proposals and selects actions above this threshold.
0.40
Choose attacker agents
Attack destinations and automatic defender assignments are configured in the Python engine.
AuthSentinel, FlowGuardian, QueryShield, and BehaviorWatch respond automatically to the selected attack types.
Attacker and defender network
Red packets travel from active attackers to the firewall. Green packets travel from each mapped defender to the firewall and back after inspection.
Attacker agents
Credential-BotCredential attacks
FloodSwarmDDoS / traffic floods
Injector-XSQL injection
GhostUserInsider behavior
⬡FirewallCentral inspection
Defender agents
AuthSentinelIdentity & access
FlowGuardianTraffic protection
QueryShieldQuery inspection
BehaviorWatchActivity monitoring
Rounds completed0 / 20
Threats contained0 / 0
Cloud statusReady
Live agent processesSee each attacker, its assigned defender, the action, utility score, threshold, and both outcomes.
WAITINGCredential-BotReady · credentials
⬡Firewall
AuthSentinelWaiting for assignment
FloodSwarmReady · traffic floods
⬡Firewall
FlowGuardianWaiting for assignment
Injector-XReady · SQL injection
⬡Firewall
QueryShieldWaiting for assignment
GhostUserReady · insider behavior
⬡Firewall
BehaviorWatchWaiting for assignment
Run totals by attackerAll generated attacks in this run. Utility shows the defender proposal score against the threshold; these are simulation results, not real-world security guarantees.
0 eventsATTACK EVENTS0
BLOCKED0
IMPACTS0
CONTAINMENT RATE—
MEAN UTILITY—
Full attack decision history0 events
| ROUND | ATTACKER / TYPE | TARGET | DEFENDER | UTILITY / THRESHOLD | DECISION | ATTACK OUTCOME | IMPACT | RATIONALE |
|---|---|---|---|---|---|---|---|---|
| No attacks yet. Run the simulation to create decision records. | ||||||||
Simulation summary · Live results
Defense report
Metrics, node health, and defender performance refresh after every simulation round.
AWAITING SIMULATION
Attack block rate
—
No events yet
Data protection
—
No records assessed
Mean response time
—
Simulated control-plane latency
Data exposed
—
Synthetic records in the model
Damage taken
—
Total node health lost
Defender performance
| DEFENDER | THREAT DOMAIN | EVENTS SCORED | ACTIONS EXECUTED | CONTAINMENT RATE | LAST UTILITY |
|---|
Node health
| CLOUD NODE | STATUS | EVENTS OBSERVED | DEFENSE ACTIONS | SIMULATED IMPACT |
|---|
Saved report history
Saved encrypted reports will appear here after a simulation.