Risk page

The Risk item in the main navigation is where you create and tune risk profiles for your account. A profile decides how Prefactor turns declared span-type capabilities into a risk classification for each run — category weights, action multipliers, and score thresholds. You assign a profile to an agent to control how those declarations are scored.

For how weights and multipliers combine into a score, see risk profile.

Profiles list

Every profile configured for your account is listed here. Open one to review or edit its configuration; use Create profile to add a new one.

Create risk profile

Use Create profile to open the creation form. Fields:

Name (required) and Description.
Start from template — choose one preset; it pre-fills weights and related fields.
Data category values — weights for the categories under Standard PII, Sensitive data, and GDPR Article 9 Special Categories. Each category has a weight from 0 to 10 and an inclusion toggle. Excluding a category drops it from the profile regardless of the weight; including a category with weight 0 keeps it in scope but contributes nothing to scores.
Action risk multipliers (advanced) — Destroy data, Financial transactions, External communication, Create data, Update data, and Read data. Actions also have an inclusion toggle. Excluded actions are not allowed under the profile’s agreed risk.
Risk level thresholds — Medium ≥, High ≥, and Critical ≥ (numeric inputs within the allowed range).

Saving returns you to the list with the new profile in it. Open it for the full configuration below.

Profile detail

Opening a profile shows its score thresholds, agreed risk scope, category scores, action multipliers, and the agents currently assigned to it.

Score thresholds

Low, Medium, High, and Critical each map to a threshold value configured in the profile, with each band running from one threshold up to the next. If the values are not strictly ascending (medium > 0, high > medium, critical > high), the section shows an error — fix the values under Edit.

Agreed risk

The scope an agent using this profile is agreed to operate within: which actions it may perform and which data categories it may touch. Prefactor compares the agent’s declared capabilities against this scope on the Overview tab of the agent and flags anything that exceeds it.

Category scores

The categories the profile scores against, with their weights, grouped under Standard PII, Sensitive data, and GDPR Special Categories (Article 9). Zero-weight categories are hidden — included categories with no weight are still part of the agreed scope but do not contribute to the score.

Action multipliers

Each included action type carries a multiplier. Values above 1 amplify that action in the risk score; 1 is neutral; below 1 reduces it. Actions excluded from agreed risk are not listed.

Agents using this profile

Lists agents currently linked to this profile, each linking to that agent’s overview.

Actions

Editing a profile

Use Edit to change the profile’s name, description, category weights and inclusion, action multipliers and inclusion, and thresholds. The same fields are available when creating a profile. Editing does not re-offer the Start from template picker; templates only apply when a profile is first created.

Deleting a profile

Delete profile is in the action menu. Agents that used the profile keep the association in their history and the configuration is preserved for audit, but no new instances will be scored against it.

Risk profile — what a risk profile is and how category weights, multipliers, and thresholds combine into a risk level.
Agents page — agents list; assign a profile when registering or editing an agent.
Prefactor introduction — how risk profiles fit into the platform.